This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
File: FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json)
Hash identifier: jLm+X3P9p2sXJqsaaQsOMIHFORgjVAjj/T7qoXpLDOc=
Subject key identifier: 95:1A:E9:85:DA:51:82:F1:DE:57:F8:0C:51:CA:EC:F6:D5:0F:62:76
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Certificate issuer: /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
Manifest number: 0283
Signing time: Tue 27 Jan 2026 00:41:56 +0000
Manifest this update: Tue 27 Jan 2026 00:41:55 +0000
Manifest next update: Tue 03 Feb 2026 00:41:55 +0000
Files and hashes: 1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: +XMTbmWV+3nQlu7aVZEHhKrYIeFGZVABpf24xrN3rNU=)
2: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: +vXql9o+JG8jXikaEwvUdgbDzT28NGoMtEaj6InzCZo=)
3: 59A2E9D8A01411EF8E674221C4F9AE02.roa (hash: 5FPvqFtCVuXHbJ5vIpGbKLrezdmHhY92OGb34DPDtdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 00:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Validity
Not Before: Jan 27 00:41:55 2026 GMT
Not After : Feb 3 00:41:55 2026 GMT
Subject: CN=697809d4-78be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:e6:de:27:5d:fd:60:c9:3d:4a:e5:44:b8:
f8:a7:74:7c:9f:33:69:75:fb:1a:cd:fa:82:1d:bc:
9e:83:33:44:d3:67:44:6c:eb:a8:0e:b2:81:45:48:
68:f4:19:1b:9e:58:a0:27:8a:63:17:fd:58:b1:5c:
e2:4f:5b:07:d3:62:f5:86:93:e2:ef:45:31:10:94:
bc:b1:42:e1:6c:ae:8b:25:58:a2:7a:14:c1:56:47:
96:ae:b3:d6:bf:54:a9:df:57:4d:36:b6:53:67:77:
55:a3:49:6c:4c:ab:ef:16:5e:8b:8b:76:77:99:c7:
65:7e:a5:f0:2c:7a:c3:c7:0b:66:2e:e5:a7:b2:c4:
c8:26:ff:b8:c5:e4:e9:00:3d:1c:74:29:94:0e:f4:
c6:1c:78:e6:e1:c8:22:88:2e:1a:27:96:06:e0:49:
8f:77:84:f1:2a:05:5e:be:c5:37:38:a3:95:cc:06:
80:01:eb:a4:f5:3a:e7:10:13:6c:65:9e:52:bb:3a:
f2:8f:ea:ba:93:c3:c9:4e:19:df:97:0f:fb:5c:d0:
3e:cb:22:5d:ab:f6:66:2a:1c:6a:4c:73:27:bb:9a:
cd:0d:be:d2:a1:98:b8:51:52:dc:a6:76:dc:a0:40:
ac:25:ae:a7:c2:38:bb:b0:17:b6:e0:a2:55:c6:2f:
2c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1A:E9:85:DA:51:82:F1:DE:57:F8:0C:51:CA:EC:F6:D5:0F:62:76
X509v3 Authority Key Identifier:
keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:60:c6:a7:a3:3c:df:2f:27:e7:99:16:16:78:40:14:d2:c5:
56:a0:b7:c8:ca:07:b2:b6:c0:1a:23:4c:b7:bc:cd:e2:d7:53:
ca:1b:3f:69:68:cf:73:a5:56:7c:de:98:47:34:20:29:28:6c:
b3:8f:ad:20:1f:48:25:d1:a4:f5:02:38:25:5b:56:d8:d1:5e:
9f:08:c1:97:fb:05:c2:9e:cd:f2:84:72:5b:f0:d3:f5:0c:a1:
12:dc:ae:7f:17:bc:41:3d:34:d4:49:df:99:0e:d0:18:8c:97:
be:36:0b:5a:e9:34:ea:04:8f:7d:fd:a9:a2:7a:05:62:0f:a6:
c2:a3:d5:e1:45:32:e9:55:e2:2b:48:68:e3:4d:5e:b4:f3:16:
dc:be:16:b4:8a:09:e0:19:cd:1e:d9:77:1d:59:84:4d:e2:e1:
8f:01:b7:72:19:cd:c1:48:4c:98:d4:50:a4:a3:2b:f3:1d:1d:
42:9e:16:5a:6d:87:eb:30:fd:9b:4f:b8:df:ac:4f:1e:e0:76:
e5:dd:bd:83:d4:6e:21:e6:d5:6c:74:3d:23:2a:ef:63:65:7f:
39:ac:ec:15:a2:e0:b9:13:79:d5:c6:da:b0:52:f3:33:44:b7:
fa:ed:ba:d5:f9:5b:f3:16:3b:ac:bc:3b:fd:ec:72:11:d5:5c:
27:b0:59:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:51:29 2026 by rpki-client