This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
File: ny5XiO95WFurdhmHfTlierLl1Rk.mft (raw, json)
Hash identifier: PoEBfg5Twa+W5ztkE8jn7CYO64Xa54dcquy/5pLowjI=
Subject key identifier: DC:8C:A0:B4:00:27:93:D9:CE:82:EA:C8:A6:70:FE:EE:C2:E8:E7:35
Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
Certificate issuer: /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Certificate serial: 0A8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
Manifest number: 0A82
Signing time: Sat 10 Jan 2026 19:02:55 +0000
Manifest this update: Sat 10 Jan 2026 19:02:55 +0000
Manifest next update: Sat 17 Jan 2026 19:02:55 +0000
Files and hashes: 1: ny5XiO95WFurdhmHfTlierLl1Rk.crl (hash: c/+kGbQjSj1BQGRA7vPsGyE+kAmLjXP6nOxlmxvA2fg=)
2: 4DAFC184ADC011ED897A4050C4F9AE02.roa (hash: Za3bISDsY9jXSiAUyE8K8a9BeVgovmO/YNcIsWrBq60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 19:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2698 (0xa8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Validity
Not Before: Jan 10 19:02:55 2026 GMT
Not After : Jan 17 19:02:55 2026 GMT
Subject: CN=6962a25f-47e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:3e:71:6a:8c:a8:73:e9:a6:63:fe:ae:43:
7e:37:b4:fb:f6:8c:1d:27:49:7c:93:35:34:91:a5:
82:93:dd:18:be:07:0f:8e:cc:ee:c9:ef:26:e7:25:
34:78:75:6b:18:d0:47:84:ec:7b:42:5b:51:4e:9e:
5f:7a:55:be:38:67:b0:ce:dd:1d:6d:b2:a4:72:4c:
a3:62:d2:d0:ff:40:21:fc:4a:b9:e1:7b:05:0a:01:
c9:4f:46:d0:80:df:55:db:a8:67:42:02:30:c2:29:
19:0a:8b:b8:2a:52:57:06:f4:1f:0d:ce:6e:5d:9a:
46:27:e1:7d:84:3e:74:e7:f3:e6:7a:2f:1b:a0:3c:
ae:a0:75:fb:c4:a5:d9:ec:0b:c7:ca:f1:f1:d7:5d:
94:f9:70:07:cc:dd:43:58:e3:06:35:f0:43:0f:a4:
41:ee:1e:52:6d:9a:04:41:53:85:b0:c2:6f:e1:72:
1f:10:6b:fa:d6:9d:5b:65:75:8c:0c:b2:2c:c9:c0:
e2:a9:22:ff:d3:96:95:d4:cc:f4:1e:0b:81:84:b4:
52:2d:87:3e:38:8b:d7:d6:b4:da:c8:9e:86:06:80:
21:6b:d2:95:20:b1:ba:8a:e6:20:52:5a:86:68:20:
c8:a2:20:26:ff:8c:13:2c:ac:15:ef:7e:25:52:ce:
48:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8C:A0:B4:00:27:93:D9:CE:82:EA:C8:A6:70:FE:EE:C2:E8:E7:35
X509v3 Authority Key Identifier:
keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a4:ca:8b:14:7c:1b:e6:f2:6a:c6:8e:a1:13:6d:06:70:11:
f0:d4:c5:5f:3c:dd:b2:48:d6:39:52:02:1c:7d:17:8f:71:9b:
40:49:de:bb:e4:e1:45:1c:19:00:29:58:41:f3:ce:65:a4:f3:
6e:05:49:44:a8:19:d8:b5:2c:d9:f3:34:f2:96:0d:df:bf:f8:
9b:1d:e5:5e:7a:62:d8:99:f3:36:bc:34:f1:77:5b:cc:68:9d:
b5:7d:77:c1:1b:18:bf:14:d8:83:3b:a8:ef:89:94:79:23:6e:
02:6e:b3:db:b3:fd:fb:df:11:bc:f8:73:b1:7d:5a:6e:6e:8b:
02:0c:6a:3f:ba:74:eb:42:d5:51:f6:4e:6c:98:1d:9c:b0:fa:
47:e5:5e:b3:96:3d:b9:b0:53:d1:08:ec:31:9e:c8:86:80:6c:
33:a2:b3:2d:9f:31:c7:2f:77:4b:82:5c:1c:d0:9c:58:c9:16:
05:30:02:0d:a0:b8:8d:05:78:1d:81:d6:39:f3:c4:b7:96:da:
2d:7c:59:52:fe:8b:e8:18:f4:35:d9:8f:6e:da:0f:8c:4a:ca:
e1:4b:66:38:fe:76:33:3a:a6:b6:0a:15:76:b2:32:c4:75:e9:
53:c3:f3:28:c3:be:7a:2d:0f:58:0a:08:30:b8:68:b0:42:37:
cd:1d:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:45:02 2026 by rpki-client