This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
File: Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft (raw, json)
Hash identifier: 6NZI9UJkjLEGIAuw6sB6SEPISwF/WmHPQDvLZ96ljsI=
Subject key identifier: 6F:61:40:B7:0C:62:08:8E:FF:36:D7:81:75:C9:00:C0:AB:00:84:D0
Authority key identifier: 63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C
Certificate issuer: /CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
Certificate serial: 065F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
Manifest number: 0655
Signing time: Mon 12 Jan 2026 21:52:49 +0000
Manifest this update: Mon 12 Jan 2026 21:52:48 +0000
Manifest next update: Mon 19 Jan 2026 21:52:48 +0000
Files and hashes: 1: Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl (hash: mJrJZJO8m9HwU+kDyS0QjudFtOT5/ZZ0NfJ+jkxA/IE=)
2: C8AE3C40B93811EBAC80A46DC4F9AE02.roa (hash: epd0cPO6XLoMNONThoYjKoYJrowDT9sNzGiBafqzZ5k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl
rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1631 (0x65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C15F2, serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
Validity
Not Before: Jan 12 21:52:48 2026 GMT
Not After : Jan 19 21:52:48 2026 GMT
Subject: CN=69656d31-61f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:1a:ef:86:61:71:b8:c6:c0:e8:26:0d:01:
a0:a1:a4:39:82:a2:04:82:fd:9e:38:cc:b2:5c:c8:
8f:a3:35:d1:f5:b4:84:1a:cb:21:54:54:7b:82:ad:
34:34:1e:7a:fe:fb:60:4c:b3:be:e7:ec:c9:bc:a7:
1c:32:9e:89:26:b7:3f:82:96:42:0c:04:f2:b8:d0:
a0:46:9e:2a:d9:0e:3c:86:b2:e6:5c:01:fb:90:52:
fb:25:ab:87:96:4f:6e:68:b9:78:df:9f:de:e1:9a:
73:6f:c6:1c:23:08:6b:32:40:ff:33:79:cb:d5:46:
a2:b8:81:fc:fb:29:12:57:e6:01:37:ac:ea:a3:df:
b1:56:4d:d4:e2:98:c0:59:02:bd:3a:76:2a:ab:cb:
93:e0:97:93:1e:e1:78:73:da:67:41:91:4b:8c:04:
84:e7:8b:4c:84:06:6e:a7:ad:b4:cd:2f:5e:37:4c:
b9:7a:95:a5:50:86:78:f6:65:ab:6a:f1:0d:2b:8f:
96:dc:66:82:2d:97:2e:3d:47:fa:9f:4f:8e:c1:d4:
b4:a7:b3:8a:a1:65:e7:7d:de:f7:14:c5:e5:7f:6e:
f7:49:67:f8:ba:db:1f:dd:39:95:b6:1a:e6:ba:9b:
a7:99:33:92:ae:7d:01:7d:45:9d:73:74:2b:07:68:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:61:40:B7:0C:62:08:8E:FF:36:D7:81:75:C9:00:C0:AB:00:84:D0
X509v3 Authority Key Identifier:
keyid:63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:cb:4c:3a:93:fc:9f:cc:f5:78:d3:28:3c:0f:14:97:c1:d1:
e5:ed:a5:33:39:aa:b2:cd:46:ca:a0:b0:40:b8:e0:7e:b8:46:
d3:b4:9c:91:11:04:07:70:a0:62:6b:df:01:65:e5:b0:00:eb:
e3:9f:d4:1a:ac:96:db:90:1e:27:93:b7:ed:9d:fc:df:be:06:
8f:20:6e:19:6f:98:52:e6:bc:02:1e:1e:a7:27:cc:3c:c9:73:
59:36:95:3c:e9:04:10:a4:f1:03:e0:9f:a6:ac:20:49:b9:53:
23:1a:7d:61:39:21:c7:85:3f:41:89:33:dc:8d:27:15:76:29:
2e:cb:e4:76:d3:b4:81:bf:70:9b:f5:53:ff:f5:9a:f8:8c:21:
e1:a7:2e:a8:df:ec:b5:74:30:ce:54:30:3b:d1:54:2e:92:cf:
df:3a:f3:97:98:fb:41:fc:39:b6:40:85:29:ac:64:48:e6:61:
df:27:6c:8f:3f:59:57:e0:87:fc:42:de:4e:4b:df:de:d4:6b:
7b:76:98:df:1d:de:ec:df:7b:d1:8a:9a:72:98:96:36:96:2d:
cb:ba:53:7e:08:86:bb:e5:7f:a6:3a:ac:8c:95:37:90:9a:ba:
b4:be:f9:63:13:25:a3:71:9b:e8:f6:55:11:78:c6:12:04:23:
f1:e0:a4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:00:18 2026 by rpki-client