This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
File: ysouRCIiw-2H53WblewRGMOLhbY.mft (raw, json)
Hash identifier: +9upKAfL7sJf4/GqdGpktO0OqnLcjy1rZzljx8gxdco=
Subject key identifier: FC:68:43:44:41:83:F2:42:2D:02:4B:EC:B8:D5:F8:16:46:BE:5F:23
Authority key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
Certificate issuer: /CN=A91E9A44/serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
Manifest number: 25
Signing time: Sat 17 Jan 2026 06:44:14 +0000
Manifest this update: Sat 17 Jan 2026 06:44:14 +0000
Manifest next update: Sat 24 Jan 2026 06:44:14 +0000
Files and hashes: 1: ysouRCIiw-2H53WblewRGMOLhbY.crl (hash: rh37YWR//N60o4CE0g/GD9SCsyVXFshroRf5Xz9VI/c=)
2: 769D5C68C09711F08165E157C4F9AE02.roa (hash: OJEG2iMlHS+dlOzTygzni5AYhZaYZz74JLyfsdZ4HV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Validity
Not Before: Jan 17 06:44:14 2026 GMT
Not After : Jan 24 06:44:14 2026 GMT
Subject: CN=696b2fbe-b33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:03:32:dc:78:1b:75:89:10:bb:23:53:c8:
20:6d:3e:b7:0e:96:4a:a6:25:90:d2:4a:8f:63:d2:
53:3e:f4:83:28:b8:5f:7a:e4:14:fd:ed:e3:2b:41:
15:93:2c:b2:90:df:6a:16:ec:24:3a:56:51:cb:ff:
a6:51:3f:c6:0e:4d:9d:2b:2f:bd:93:1d:b1:7f:f3:
24:04:72:de:fc:01:92:bb:9d:a9:9b:c6:04:fa:7a:
fd:a2:bd:e9:e2:45:d5:bf:9f:d0:23:58:5f:f9:ec:
c8:3f:89:8d:24:63:4f:07:85:83:9a:33:8d:0f:ca:
24:3b:db:71:87:32:72:c5:c0:02:08:63:f9:02:1f:
74:77:d4:c5:45:79:69:fc:cd:2b:42:92:f2:cc:c1:
fa:38:26:be:52:fb:73:93:19:93:f8:94:64:e0:d5:
c1:bd:f4:9c:1f:87:fb:8c:12:ea:a4:37:95:55:19:
fd:d3:57:d9:e6:bb:03:8d:7d:0a:4c:1a:32:2e:b6:
42:09:6d:70:8d:1d:d5:ca:e0:b9:23:d0:2f:fb:e7:
18:ba:d7:4a:5a:3b:c4:61:1c:00:b4:b4:55:00:20:
c5:0d:09:01:77:c0:4b:15:ba:2d:4e:5f:50:b4:90:
7a:ce:bf:7b:32:84:19:9f:a3:4f:6f:37:a3:22:83:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:68:43:44:41:83:F2:42:2D:02:4B:EC:B8:D5:F8:16:46:BE:5F:23
X509v3 Authority Key Identifier:
keyid:CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2b:5d:55:3a:3b:1e:12:d3:3d:1e:4b:0c:ed:43:61:b4:2f:
e9:a1:94:b9:82:e9:d5:a3:76:b0:93:6b:9c:25:2c:9f:d7:38:
7c:e1:bd:95:78:09:c1:47:61:8a:71:b1:b4:39:44:b8:df:23:
d1:08:5b:e2:78:fd:7c:ab:ae:aa:9a:e4:b0:10:4d:8c:ad:cb:
30:2c:d5:5c:43:d5:3c:72:e7:67:04:e3:de:0b:d7:ef:37:ec:
a5:b1:28:c5:67:b0:c7:32:73:ef:83:f7:58:f6:a4:0c:ba:fa:
4c:46:a1:ad:cb:26:bb:e9:68:fd:2b:6b:ed:32:ce:70:3c:79:
e2:bb:b4:a1:7f:1c:fa:aa:f2:45:b8:67:cd:3c:8c:59:79:3a:
3a:b7:eb:34:77:bb:d9:1a:d1:c0:5e:d4:bd:81:ac:1a:71:60:
3b:12:41:a9:63:33:54:95:b0:22:e5:60:16:38:fd:84:e9:52:
96:da:bf:ec:e4:99:dc:d4:f0:da:2d:88:99:02:9b:cd:11:83:
df:51:ef:35:1a:f9:22:ef:6f:cb:35:ab:89:93:97:24:8f:d1:
32:d0:45:ef:82:6f:10:cb:66:38:08:dc:dd:55:53:ee:2f:d8:
e2:50:d6:06:ad:8e:c8:03:3a:26:0b:5f:71:ad:d0:79:cd:ed:
1d:7c:1e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:09:52 2026 by rpki-client