This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
File: YfjH66e1XnGy5rF3QJFCUdiM8KY.mft (raw, json)
Hash identifier: qVNygg9fNw/6PQTplDrRQC/3UHrrtcalD0Fglbvx38Y=
Subject key identifier: 10:38:81:4F:3E:06:DE:E7:8D:F7:39:44:05:EF:0A:63:46:8B:AF:86
Authority key identifier: 61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6
Certificate issuer: /CN=A9158491/serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
Manifest number: BE
Signing time: Fri 09 Jan 2026 05:24:49 +0000
Manifest this update: Fri 09 Jan 2026 05:24:49 +0000
Manifest next update: Fri 16 Jan 2026 05:24:49 +0000
Files and hashes: 1: YfjH66e1XnGy5rF3QJFCUdiM8KY.crl (hash: XQPQSMV/4TzXGvUYl2vQWUhO1PbUGLQIZn+bJyVnwSE=)
2: 5FDDEE1CE34211EF8EA0CA77C4F9AE02.roa (hash: mzE4Rj9TzgxYoPFC7hLQmMNdU4o1ATX8k/0uu+bhb9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl
rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Jan 2026 05:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158491, serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
Validity
Not Before: Jan 9 05:24:49 2026 GMT
Not After : Jan 16 05:24:49 2026 GMT
Subject: CN=69609121-3319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:54:69:d2:d3:e4:f1:99:cb:d4:47:9c:e2:
b9:34:99:2b:c3:03:4a:73:17:c6:1c:c0:00:59:e1:
6f:ea:3c:e7:48:84:5b:de:84:1b:b5:fc:f8:78:76:
d9:7e:05:5b:5b:59:5c:b7:de:aa:17:87:e0:01:01:
5b:6f:63:51:78:61:f7:81:67:9f:6e:a5:35:e2:86:
98:ec:6d:c2:16:4a:14:fe:e5:14:4e:6c:53:22:83:
b3:bb:64:0f:17:a8:f5:51:18:5d:0f:27:d1:26:ed:
60:40:76:83:c9:30:3f:f8:1c:8a:fe:00:85:d6:17:
a6:02:e7:30:b9:d3:7e:d6:6c:8d:06:15:08:a8:0a:
f9:c4:c3:a9:a7:55:82:f1:80:77:3d:c6:3b:95:90:
b3:61:cb:1c:a4:d1:50:b5:31:f0:a2:a5:04:69:c6:
7b:39:4d:da:1b:79:d1:1d:a0:4a:50:ef:7a:f0:a8:
2e:75:b1:c8:be:da:4d:f5:ac:4f:6e:9e:5e:d6:fa:
13:8f:7d:44:3e:a4:18:a8:d2:2c:41:7a:01:c7:0f:
53:cc:b6:d5:40:ad:14:72:ae:59:66:25:97:0b:c9:
4d:9f:d4:81:00:13:99:ba:2e:32:7d:10:ad:5c:31:
af:22:25:5f:ee:cb:5a:2b:ce:56:fd:fd:8c:2c:81:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:38:81:4F:3E:06:DE:E7:8D:F7:39:44:05:EF:0A:63:46:8B:AF:86
X509v3 Authority Key Identifier:
keyid:61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:48:5c:f4:1e:bc:ec:70:40:8e:de:21:fa:19:92:50:40:46:
e2:65:fa:14:1b:ad:2e:2d:f8:9e:61:94:cb:cb:fb:36:b3:0e:
b3:9f:e3:48:f9:4d:88:b0:89:32:96:7f:d4:fd:85:c2:8d:24:
f3:01:eb:3c:88:5a:e5:51:ed:b4:19:29:b5:3d:46:39:da:70:
ce:9d:21:96:ca:54:57:3a:22:b6:a0:6c:bb:91:8f:e0:1a:f8:
89:9a:5d:64:f3:31:06:59:5b:26:70:05:ff:3b:78:c5:48:cd:
37:ea:a3:bd:86:a1:96:76:1f:22:a3:04:62:a0:b0:ae:6b:c5:
65:1e:71:e6:42:6e:75:db:81:1d:64:39:0d:25:a2:b6:4b:df:
c6:9d:41:c4:4b:23:b3:e4:fe:bf:cf:a5:2b:00:ef:be:de:4b:
71:9c:fd:23:06:51:63:22:0a:26:9e:0e:0e:cb:27:02:f8:20:
25:68:aa:5b:89:81:d2:55:54:d7:e2:57:16:35:4a:79:c9:a3:
04:8b:f8:03:e5:50:a2:b7:a2:33:93:c3:dd:ba:5f:65:dd:f6:
0c:35:ae:65:44:0b:a0:9e:9e:68:cd:77:26:47:db:5e:5a:1d:
71:82:f9:bc:6c:e5:8c:3f:27:1e:69:81:af:2a:8c:b6:61:13:
b3:c6:2d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:50:31 2026 by rpki-client