This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json)
Hash identifier: 0hqc4lxToiv/US1nlQ2ZXahTN3aFNh6aQ2c9KxGJoGo=
Subject key identifier: 28:A1:3A:E6:8C:0D:AE:B8:ED:5C:92:AD:35:7C:97:8C:96:5D:F9:EB
Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80
Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
Manifest number: EA
Signing time: Thu 01 Jan 2026 04:54:31 +0000
Manifest this update: Thu 01 Jan 2026 04:54:30 +0000
Manifest next update: Thu 08 Jan 2026 04:54:30 +0000
Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: peU/UXMshB2J0TaQ0pNbtFpfAMTxqHeGebtWFokCerQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl
rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Jan 2026 04:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
Validity
Not Before: Jan 1 04:54:30 2026 GMT
Not After : Jan 8 04:54:30 2026 GMT
Subject: CN=6955fe07-ab1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:88:20:16:2a:47:4e:01:aa:35:8f:93:8e:
7b:36:9e:f0:d2:ea:de:a8:81:ef:ee:d1:cc:04:41:
5a:a2:9d:d9:95:68:09:68:a0:d0:28:80:0d:51:71:
d7:f8:f9:f1:c7:07:16:ad:0e:45:80:d5:f9:d1:97:
6b:97:af:a4:9a:7f:bb:66:42:83:20:bd:13:2a:45:
91:09:b5:63:33:5b:0d:76:d8:eb:3e:f2:89:c9:ea:
a6:ef:ce:09:4c:da:b9:1f:fc:27:c5:22:fe:ff:98:
8e:8d:b7:54:04:dd:f6:b0:85:51:19:9e:58:dd:81:
7f:bf:dd:8b:0f:38:b6:ae:f6:10:11:73:d0:7f:7e:
f8:57:c8:6b:a7:fc:af:79:4b:b0:ba:ac:af:3c:3e:
7e:ed:fc:b5:18:23:a0:79:39:bb:45:7e:76:9d:66:
c2:1b:79:3d:4f:ae:49:1a:1f:76:11:a8:ac:12:05:
eb:fc:2a:4b:51:30:2d:3a:36:89:92:ad:db:0f:3d:
84:3f:fa:9b:0f:9a:fb:53:5f:9b:14:0d:ca:69:8d:
d5:9d:95:36:2e:00:c5:b7:90:ed:35:b4:c8:4b:ab:
4b:76:aa:d0:b6:0e:e9:e4:69:ff:77:3d:aa:1f:9e:
3d:56:2c:79:fa:36:d3:89:c9:03:2c:32:cc:4b:b1:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A1:3A:E6:8C:0D:AE:B8:ED:5C:92:AD:35:7C:97:8C:96:5D:F9:EB
X509v3 Authority Key Identifier:
keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e9:95:6a:c6:21:c6:a0:a9:51:7a:f9:36:18:d4:e8:d5:6c:
7e:a7:69:ac:ba:cd:50:62:70:45:ab:29:b1:f3:ae:d7:ad:b1:
f9:c5:3c:3a:0c:97:cd:aa:26:b7:f6:b3:8d:49:e7:8c:b8:56:
ac:34:c5:39:02:72:b5:8b:ea:cc:b2:5d:5e:ba:9d:3d:37:fe:
50:6d:6b:af:73:55:71:f5:f6:46:fb:81:f9:69:2b:14:c2:0b:
69:c4:53:d5:12:15:1f:66:c2:da:64:1e:62:3d:e4:91:3e:b7:
fb:3a:40:2d:e0:fa:9b:ca:c3:39:09:e4:a0:e5:8b:7c:73:11:
6c:79:a8:40:22:88:4e:fb:bb:34:83:b5:16:49:da:b5:f1:15:
ac:36:86:38:5b:8f:32:0d:c8:d8:3e:15:7d:4d:c7:c1:ca:9a:
71:c3:37:b7:3f:e9:bc:30:e9:29:36:e9:3f:77:f9:46:ea:af:
6d:5d:1c:ee:d6:32:51:7b:8b:ac:36:38:a7:88:2e:3d:65:20:
35:af:5d:5f:b7:1f:d9:a1:e1:e9:72:ef:b3:b6:6e:9a:fb:a0:
09:d8:2d:c2:13:9b:d0:5f:6c:67:2c:6e:3e:a4:79:a6:97:ea:
89:c3:68:55:82:0e:d7:e7:59:b9:c3:8b:4a:f4:de:7d:9b:6f:
b3:2a:10:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlDRDUxMTAvBgNVBAUTKDYzMDVEQ0I1NUZEMTRCNUM3QUEyOTRBRTM3QzcwMjc1
NjkyRjQxODAwHhcNMjYwMTAxMDQ1NDMwWhcNMjYwMTA4MDQ1NDMwWjAYMRYwFAYD
VQQDDA02OTU1ZmUwNy1hYjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvpaIIBYqR04BqjWPk457Np7w0ureqIHv7tHMBEFaop3ZlWgJaKDQKIANUXHX
+PnxxwcWrQ5FgNX50Zdrl6+kmn+7ZkKDIL0TKkWRCbVjM1sNdtjrPvKJyeqm784J
TNq5H/wnxSL+/5iOjbdUBN32sIVRGZ5Y3YF/v92LDzi2rvYQEXPQf374V8hrp/yv
eUuwuqyvPD5+7fy1GCOgeTm7RX52nWbCG3k9T65JGh92EaisEgXr/CpLUTAtOjaJ
kq3bDz2EP/qbD5r7U1+bFA3KaY3VnZU2LgDFt5DtNbTIS6tLdqrQtg7p5Gn/dz2q
H549Vix5+jbTickDLDLMS7EMHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCihOuaM
Da647VySrTV8l4yWXfnrMB8GA1UdIwQYMBaAFGMF3LVf0UtceqKUrjfHAnVpL0GA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83QTlBMjUxMDdG
RUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMxeDZvcFN1TjhjQ2RXa3ZR
WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1l3WGN0Vl9SUzF4Nm9wU3VOOGNDZFdrdlFZQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUNENS83QTlBMjUxMDdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMx
eDZvcFN1TjhjQ2RXa3ZRWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCb6ZVqxiHGoKlRevk2GNTo1Wx+p2msus1QYnBFqymx867XrbH5xTw6
DJfNqia39rONSeeMuFasNMU5AnK1i+rMsl1eup09N/5QbWuvc1Vx9fZG+4H5aSsU
wgtpxFPVEhUfZsLaZB5iPeSRPrf7OkAt4PqbysM5CeSg5Yt8cxFseahAIohO+7s0
g7UWSdq18RWsNoY4W48yDcjYPhV9TcfByppxwze3P+m8MOkpNuk/d/lG6q9tXRzu
1jJRe4usNjiniC49ZSA1r11ftx/ZoeHpcu+ztm6a+6AJ2C3CE5vQX2xnLG4+pHmm
l+qJw2hVgg7X51m5w4tK9N59m2+zKhAE
-----END CERTIFICATE-----
Generated at Thu Jan 1 12:32:38 2026 by rpki-client