This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
File: k0_yOzjsbVimyqtwe3lVUcicMf0.mft (raw, json)
Hash identifier: yU3Zif52KvZmYAsyOsPh65UVIEJqbdAmS0X801Ppw/s=
Subject key identifier: 04:59:43:90:73:99:B0:33:8C:E5:7D:B1:D6:92:F8:AF:99:AB:DF:CC
Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD
Certificate issuer: /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
Certificate serial: 04E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
Manifest number: 04E3
Signing time: Sat 10 Jan 2026 22:59:27 +0000
Manifest this update: Sat 10 Jan 2026 22:59:26 +0000
Manifest next update: Sat 17 Jan 2026 22:59:26 +0000
Files and hashes: 1: k0_yOzjsbVimyqtwe3lVUcicMf0.crl (hash: ngevU2wTucOHqUtNfcbIylYTb0Uw6w31CsbLp5jiK+Y=)
2: B7BE1DAC482511ECA1A68F13C4F9AE02.roa (hash: QSS01Cht+60Ca3lCH+aUYEQ83cHrjHOe9Xz/oSR4PIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl
rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 22:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1256 (0x4e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
Validity
Not Before: Jan 10 22:59:26 2026 GMT
Not After : Jan 17 22:59:26 2026 GMT
Subject: CN=6962d9cf-fb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:28:f2:fe:be:6f:5a:64:0e:b3:4f:f1:31:
93:a6:52:61:94:4c:a3:01:0e:dd:3d:bf:50:e0:41:
2e:0b:f6:04:1f:18:65:09:e2:2d:63:d6:2b:90:62:
6f:1b:9d:ca:8c:29:ca:68:f2:73:18:a3:ea:da:95:
13:bd:fd:ec:50:c2:77:34:28:d2:d8:30:86:a2:b6:
7d:ab:4e:94:54:5d:20:64:c2:87:cd:9c:9b:54:3e:
73:18:c4:d9:4c:1f:84:69:35:d2:a9:24:9b:2f:a0:
a3:a8:dd:37:c6:92:d6:08:58:64:70:39:a9:7c:df:
e3:f6:f4:f5:52:6e:c6:23:3e:82:c4:f9:43:98:a9:
7e:47:32:51:51:35:a7:28:f3:cd:c1:41:65:14:a8:
d1:28:49:72:49:66:32:a8:1d:5f:0e:52:7d:a8:56:
a2:63:12:e6:c6:51:69:44:48:18:d3:e5:da:ef:cb:
12:4a:55:08:96:98:89:6c:32:a2:6f:09:a2:63:f8:
0c:62:c7:2c:54:a0:14:75:2d:50:1f:c0:39:44:97:
f0:fa:34:bf:3d:52:2b:6f:f2:6e:4c:c9:1c:39:90:
88:33:7d:0b:75:46:57:10:84:cf:ed:5a:89:bf:df:
de:4c:3f:3e:5e:c4:6a:83:e6:e7:d8:a3:9e:ec:34:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:59:43:90:73:99:B0:33:8C:E5:7D:B1:D6:92:F8:AF:99:AB:DF:CC
X509v3 Authority Key Identifier:
keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:c8:d7:4f:46:89:95:4a:97:04:f5:b2:81:4a:8e:53:16:6b:
bd:3b:15:d8:f1:3d:f3:b8:d7:de:bb:03:b0:91:4a:7b:bf:6a:
aa:fa:f4:81:47:3c:29:2b:fe:5e:01:71:ab:b4:61:82:71:74:
3d:ce:61:82:6e:63:ee:e3:4b:a1:f5:80:30:37:88:d4:c0:af:
9d:a8:8e:a6:11:aa:d6:fb:14:29:16:27:f0:9c:0c:59:84:4f:
20:39:65:62:9a:4c:5e:8c:31:90:91:c2:b1:2d:65:f0:17:44:
a2:59:14:f0:41:81:e0:59:18:f9:49:0a:09:b6:40:36:a9:c4:
6d:a5:71:3f:cd:6f:a0:46:61:8e:dc:fc:ff:7c:6b:0f:fd:e5:
fe:c5:2f:62:cd:4f:e4:ed:97:6a:41:0c:4e:5d:1d:7f:f4:0a:
23:49:dd:9f:41:5d:5b:5d:c8:93:4d:4c:ee:5d:12:ac:32:41:
7b:cf:19:82:7c:c6:8d:2d:59:a3:54:80:80:11:96:9a:7e:97:
ad:b2:55:11:a5:1a:24:ff:2f:36:a4:78:95:6e:ae:78:63:fd:
39:03:92:87:eb:e9:00:f7:bb:9a:68:14:a5:1c:9e:eb:87:66:
3d:1b:cc:e5:a8:3b:66:fe:dd:f4:f6:6d:a2:77:10:17:ef:d4:
1d:26:41:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:03:50 2026 by rpki-client