This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
File: LYC7UpVYC-No2mj7jQPqtI16xss.mft (raw, json)
Hash identifier: MFSyvdq2WGKseIjQiXH24mGjMTW/FI/2XX3gFxeDtL8=
Subject key identifier: 46:62:6A:C1:7D:F6:FC:0C:CC:95:ED:21:77:B2:7C:5D:86:7B:7E:E4
Authority key identifier: 2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
Certificate issuer: /CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
Manifest number: 0121
Signing time: Sat 17 Jan 2026 03:51:13 +0000
Manifest this update: Sat 17 Jan 2026 03:51:12 +0000
Manifest next update: Sat 24 Jan 2026 03:51:12 +0000
Files and hashes: 1: LYC7UpVYC-No2mj7jQPqtI16xss.crl (hash: 1dTsZrIvl43LzbrLzZ73g/qqwkMkbBdGq9xa32LCDUI=)
2: 70ED9D2837D111EF99A8011CC4F9AE02.roa (hash: ON0MiwZBInBHM7jc0lp0894BhHXsr6LrKE7baf75anU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 03:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7948, serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Validity
Not Before: Jan 17 03:51:12 2026 GMT
Not After : Jan 24 03:51:12 2026 GMT
Subject: CN=696b0731-0ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:cb:db:60:7c:be:e5:b2:21:cc:f2:db:ec:
bc:1c:0d:cd:a4:76:72:72:e7:17:92:82:02:20:0d:
8f:eb:9a:93:d2:11:4f:49:ba:44:b9:cd:83:ba:a6:
56:fb:bd:76:33:8a:22:4e:fe:7b:9c:ad:f5:9c:c1:
42:41:38:2f:c7:7d:7b:6e:f9:dd:e9:0a:f4:5d:4d:
a7:fa:27:07:e2:ba:29:62:71:7d:10:c8:5d:7d:e6:
78:a7:d0:eb:d3:d1:27:f0:40:51:c5:61:e3:33:fe:
e3:5c:93:e4:aa:5f:11:57:9f:d7:22:e8:31:d8:88:
3b:e7:c8:53:c2:20:64:2e:8c:06:99:ae:ae:ac:6f:
dc:c5:d3:a6:b2:77:f1:91:4e:28:cf:da:d1:20:a1:
ae:96:e9:16:da:bb:53:23:c0:c5:c9:37:5a:96:54:
a1:99:b2:ee:3b:38:6b:27:e1:cb:cf:c8:16:68:a5:
3c:ea:00:48:24:4a:29:f1:8c:b7:0e:cd:23:57:94:
fc:92:0d:2b:55:fb:74:9a:a4:27:2b:9a:92:cd:4c:
fb:99:24:bd:57:f1:08:25:91:e8:c9:51:58:90:16:
46:52:73:d1:60:36:f8:08:56:c1:dc:62:5e:7e:0c:
fb:64:c2:3a:37:d6:d0:ff:88:87:7b:50:6e:a2:8c:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:62:6A:C1:7D:F6:FC:0C:CC:95:ED:21:77:B2:7C:5D:86:7B:7E:E4
X509v3 Authority Key Identifier:
keyid:2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4a:bc:d8:7c:76:5d:7c:af:bf:91:67:c1:a0:91:32:90:5f:
f0:ea:df:3e:69:98:a3:3b:4b:03:25:14:d5:4d:11:33:f8:1d:
d8:02:2c:41:a0:af:19:72:fe:21:4f:be:75:d3:80:87:92:ea:
62:ff:b1:1b:45:43:07:0d:fb:43:6e:cc:d6:04:78:43:f5:6b:
a5:ae:06:f4:57:f1:91:72:37:5d:48:61:77:b6:08:71:ee:80:
45:a2:44:bc:86:84:49:3e:71:8d:40:4b:ed:80:a1:0a:58:d9:
06:f7:e0:87:63:61:20:6b:91:60:5a:65:fe:2a:4c:2d:4b:db:
cb:aa:a3:d7:51:9d:22:e7:1d:ef:a9:33:45:d9:03:1b:f8:aa:
a2:4e:0a:89:f9:24:7b:94:b3:f6:08:9c:82:93:ec:0b:05:99:
82:79:2b:4e:40:e8:4f:e0:63:69:23:ed:4d:75:07:4c:74:d8:
15:6e:fe:8d:74:96:78:88:57:e4:88:fb:17:8f:8d:a5:bd:0f:
b5:b3:c6:4e:4f:4e:0e:2e:39:eb:e9:ec:3e:79:f3:84:fb:8e:
2a:71:5c:3b:15:3f:3f:90:b1:56:ea:06:de:b4:f4:9f:3f:01:
47:ea:fb:0b:0d:88:75:4e:58:97:1a:7c:48:fb:e8:68:20:00:
01:ae:59:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:12 2026 by rpki-client