This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
File: y4244fF7x3I0bdn_uyByz6j9plI.mft (raw, json)
Hash identifier: Bm/fPD5VAKd3oF92WNfRAfsvPzNa8TJYtXq6uR9fn4g=
Subject key identifier: 55:18:60:61:55:19:49:4E:03:05:34:B6:DE:99:D4:32:D1:FD:0C:94
Authority key identifier: CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52
Certificate issuer: /CN=A91DB7E9/serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
Manifest number: 01A7
Signing time: Sat 17 Jan 2026 02:28:53 +0000
Manifest this update: Sat 17 Jan 2026 02:28:53 +0000
Manifest next update: Sat 24 Jan 2026 02:28:53 +0000
Files and hashes: 1: y4244fF7x3I0bdn_uyByz6j9plI.crl (hash: a8DnU3dmYJAKA2/dFOcUGR10FP7T6Xz8X1184N/QmWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl
rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 02:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7E9, serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652
Validity
Not Before: Jan 17 02:28:53 2026 GMT
Not After : Jan 24 02:28:53 2026 GMT
Subject: CN=696af3e5-77cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:64:f5:11:22:fe:e2:92:81:14:7e:e9:8b:
ca:de:6d:a9:39:dc:a9:fb:aa:c4:ed:d8:2b:fa:4a:
34:18:70:0b:8f:2d:46:da:0f:66:c9:80:83:84:a1:
69:f6:5f:c5:60:79:2e:99:28:e2:a8:fe:7c:2b:e9:
e1:fb:ff:7f:69:7d:ba:a8:ab:5d:41:c9:1f:e3:0d:
94:a3:79:42:44:b9:f1:1f:2b:66:85:06:02:e7:37:
e5:2e:57:e9:af:ce:fb:7b:58:bf:93:00:7f:02:70:
ad:43:ba:ff:e9:33:0c:7f:98:33:08:fa:86:19:74:
2b:8b:87:66:d4:3c:c1:41:40:b7:d8:a4:67:00:a3:
6a:8d:b2:f3:5d:42:d3:81:6d:1b:35:80:f5:8e:be:
5f:fa:33:2e:7c:ed:44:64:c9:d6:2f:df:a9:21:6f:
2b:47:7e:36:5a:fc:62:ce:2d:44:86:29:8b:1e:50:
58:35:0a:b8:67:0d:fd:3d:64:3c:a5:9b:a1:46:b8:
28:1e:cd:7e:20:7e:ae:90:9f:c0:a4:1a:b1:9e:9d:
42:42:20:bb:13:ea:db:86:12:7c:96:06:97:33:71:
29:69:b4:93:fd:cd:b9:67:0e:b7:af:ce:05:86:de:
35:6e:0c:35:3b:25:78:03:3b:bb:ab:4d:74:c9:9b:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:18:60:61:55:19:49:4E:03:05:34:B6:DE:99:D4:32:D1:FD:0C:94
X509v3 Authority Key Identifier:
keyid:CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:71:35:29:90:d8:9a:06:13:3e:44:b2:24:74:fd:35:b4:ac:
ea:ef:9d:aa:25:52:48:7a:f1:14:0f:3c:4b:a7:c9:9b:87:59:
f7:33:4a:4b:8d:df:35:d2:e0:16:c9:11:ff:f9:1a:54:7e:c7:
3e:30:02:84:ea:4e:f7:0e:54:74:97:12:df:10:9b:dd:cc:99:
39:ab:de:a2:1e:db:3a:b7:31:3f:ca:b6:56:15:c9:4d:f4:0d:
cb:5f:7b:79:fe:96:3d:d2:7e:2f:8a:e6:6f:5c:49:9d:be:54:
c2:84:af:9c:af:90:7b:58:a1:86:a1:ad:26:20:63:fb:1d:95:
48:5f:8d:c2:c9:ef:1e:16:88:da:39:b1:84:df:85:81:41:f4:
76:a2:53:da:36:4e:dd:12:c0:d0:bf:1b:3b:73:7a:b3:a7:ea:
ed:7a:46:46:3d:12:c3:4c:32:f9:c3:9b:d9:ee:23:94:fa:d1:
f8:40:b7:5d:45:cf:17:cd:46:7c:82:60:0f:21:62:c8:b5:00:
4b:b4:40:e8:bc:69:88:14:4f:d7:8c:9d:a9:c7:17:fa:b0:12:
99:c5:c1:c9:28:f2:13:12:c5:e5:a6:d1:fa:b3:12:d1:f0:87:
55:4e:49:9e:8c:9d:ce:97:a1:82:0f:28:99:63:8d:8d:00:81:
18:25:98:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:13 2026 by rpki-client