This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
File: YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json)
Hash identifier: Cd5VLJ6PBsgKrAokp5i9MbzdZxss0j4Lc9SAfev0r0Q=
Subject key identifier: DC:2F:FA:02:18:BE:3A:F7:CC:E5:BA:54:AF:95:62:41:57:04:C3:23
Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
Certificate issuer: /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Certificate serial: 1ADA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
Manifest number: 1ACB
Signing time: Sat 10 Jan 2026 16:06:14 +0000
Manifest this update: Sat 10 Jan 2026 16:06:14 +0000
Manifest next update: Sat 17 Jan 2026 16:06:14 +0000
Files and hashes: 1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: jN+ltk/p+gcPX4UcSyAfAoUtVcGju86J/Mw+L84MZh0=)
2: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: Wesd0InqJ/VHy6+SYHu7ABNFnSg/btyWb+0cbj+CPEk=)
3: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: rSf0co4QElknqmx/HUwcUze0T308M2kPbS2aUDzOJyo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 16:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6874 (0x1ada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Validity
Not Before: Jan 10 16:06:14 2026 GMT
Not After : Jan 17 16:06:14 2026 GMT
Subject: CN=696278f6-5ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:c2:e4:45:90:ba:79:0d:b2:29:b9:e6:79:
ae:cf:0a:e4:b5:25:77:2b:e7:ff:f0:3c:73:a9:e0:
a8:48:f1:92:16:76:7c:86:8a:86:50:7d:bd:90:28:
2a:ad:07:3b:00:a7:72:9b:2c:4b:a0:2f:a9:b5:8d:
71:5a:66:f0:bd:8a:53:2f:27:b9:77:c2:25:95:a3:
fb:41:d3:dd:c9:97:b9:b9:e0:d9:b1:98:a1:b8:5e:
2a:fd:6a:65:e7:ef:29:be:d1:05:73:e5:19:f1:ac:
52:d3:1b:2b:82:35:29:63:46:fb:23:7f:bb:99:38:
12:7f:2c:a6:0b:19:41:dc:3d:1c:ff:40:32:ce:51:
14:ec:56:bb:e8:9a:52:2d:c9:5d:0d:33:54:6a:82:
72:1c:cc:eb:4a:64:0f:65:9f:da:a0:16:72:18:1e:
c4:a3:d0:d3:9c:15:dc:3d:66:cb:7e:cd:59:f0:d4:
10:8d:94:92:93:f5:e7:58:49:90:0a:9a:05:85:76:
e9:33:15:20:12:a4:40:2f:96:22:7e:e8:11:25:10:
7e:fd:3f:bd:dc:5f:20:61:12:b2:4c:53:7d:0f:f6:
be:b2:32:c5:f4:64:dd:d8:26:3a:e0:c9:f4:5d:aa:
d6:dc:18:ef:32:13:32:99:5c:83:c8:3a:d3:ce:58:
84:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2F:FA:02:18:BE:3A:F7:CC:E5:BA:54:AF:95:62:41:57:04:C3:23
X509v3 Authority Key Identifier:
keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:39:c2:fa:8f:1e:57:00:2e:36:f4:e8:02:b0:c4:d8:f7:cb:
83:62:0c:0f:7a:b1:31:1c:6f:08:66:f9:85:8d:4d:a4:d4:50:
23:11:39:36:78:9f:6a:62:26:3d:22:1e:15:24:3a:5e:74:b8:
44:67:91:07:49:b6:56:c2:26:60:d8:09:af:33:09:c2:7b:f7:
e7:45:c3:53:a7:59:a6:49:cd:14:51:13:98:f0:4d:d8:1b:87:
23:ce:ed:e5:f7:3f:ff:b2:df:cb:e5:e6:80:1a:4d:f1:3b:9a:
98:ce:71:1f:dd:7d:12:26:27:1b:4a:ff:0f:89:c8:d7:17:ee:
88:e3:43:c0:34:05:a0:f1:eb:5d:55:3f:48:41:22:79:3c:7e:
12:b9:48:30:53:27:74:9e:45:93:76:d3:1a:53:95:56:33:35:
6e:16:e7:e9:ac:00:ba:0b:7c:92:72:f2:ec:84:07:fa:5c:a4:
23:2e:63:19:30:e5:d7:a6:46:79:9c:a5:ac:ed:4e:3e:32:88:
4d:f8:b1:18:bd:4e:5f:a7:5c:fe:f4:4a:1c:a0:42:44:c5:c5:
25:c9:ae:2d:1b:ce:18:0e:e5:5c:c7:09:01:e0:12:40:14:69:
b7:e6:e4:a7:f5:3a:18:41:cd:df:ce:68:8f:2f:4e:c7:4d:a1:
18:37:d4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:42:06 2026 by rpki-client