This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
File: yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json)
Hash identifier: NA0WB+GQGioyQz/V+Sd559r7vTbU3y/OU3ftZuidzVI=
Subject key identifier: B1:65:FA:11:D3:FC:4A:D1:AE:28:28:B1:9F:01:BC:6B:AD:26:71:36
Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD
Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
Certificate serial: 0DD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
Manifest number: 0DC3
Signing time: Sat 10 Jan 2026 17:33:05 +0000
Manifest this update: Sat 10 Jan 2026 17:33:04 +0000
Manifest next update: Sat 17 Jan 2026 17:33:04 +0000
Files and hashes: 1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: wcsLmlrOaURQScYOCy8T3IFeTgHmv1uuwUAxE8AUdd0=)
2: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: h9Ek+uVHJkd43jpvXLhIeId4TZWOhn+0W2MAspUZuOw=)
3: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: +QLq15+GCrbTMv3T/U18UwN/WHFJnfWgXMxuf5yq0ts=)
4: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: sy4Su4ASjc+OqwWE5jPxA/U7NJeDsxDapY34Q7SzDAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl
rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 17:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3544 (0xdd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
Validity
Not Before: Jan 10 17:33:04 2026 GMT
Not After : Jan 17 17:33:04 2026 GMT
Subject: CN=69628d50-6a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:74:37:58:8a:07:57:6b:99:78:c2:29:63:
a7:d5:09:d8:9b:56:fa:bb:18:28:e5:cf:ab:ac:4f:
8e:52:4d:69:0b:2a:9f:ef:65:21:d0:30:c1:72:53:
52:5e:7c:3c:68:bd:f6:15:42:44:05:c5:59:52:c3:
32:a9:4a:64:6e:5d:fe:71:bb:da:ab:65:26:de:f0:
ba:e8:29:a5:1b:de:8a:3f:b8:77:f8:43:19:5e:37:
32:0e:86:64:40:41:cd:4f:fa:b8:b0:ff:3d:70:3d:
33:e4:e9:62:7f:0b:84:cb:26:a9:cc:31:71:96:f5:
22:2f:d8:fb:97:d7:cd:e3:fb:50:18:03:93:db:0f:
67:14:33:43:1d:08:6f:41:96:86:a3:d9:a7:18:9b:
a0:2b:27:33:73:9f:5a:87:3b:8c:72:22:5f:d1:d1:
dd:79:cb:46:65:f2:39:5b:a3:6d:6d:5b:a9:66:5f:
fc:06:59:fb:ca:02:40:65:1b:47:4a:82:25:a3:f8:
e4:34:1d:5e:bc:bb:10:ee:cf:94:e3:17:03:74:a3:
b0:dc:bb:56:3d:bb:09:fc:08:a8:6a:29:9f:6d:a2:
22:4e:40:57:92:2d:12:0c:fa:ef:71:56:5d:72:6b:
6c:f4:98:fe:ba:29:02:ac:75:58:18:64:2d:99:86:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:65:FA:11:D3:FC:4A:D1:AE:28:28:B1:9F:01:BC:6B:AD:26:71:36
X509v3 Authority Key Identifier:
keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:ff:1c:22:b3:c7:4f:53:8b:6f:f8:5a:18:2a:ec:da:bf:86:
a3:42:4d:e6:1c:e1:b3:d9:98:47:07:d3:d5:89:3a:d6:da:24:
92:5d:7b:f4:90:20:3e:78:52:0d:a3:76:0b:02:6e:43:70:23:
3f:7f:7f:10:eb:50:ed:fa:ae:0c:83:49:13:46:98:55:37:49:
fa:0e:55:87:f6:eb:ce:33:8d:35:b9:10:9b:c1:e6:e3:60:bd:
0b:18:bb:19:a2:dc:3c:7d:b8:74:ef:7e:4e:fb:cf:a7:53:94:
a3:2b:1f:76:0c:37:14:a2:c2:04:8d:c6:40:49:5f:b2:01:53:
1e:67:2f:ee:3b:bd:b8:f4:38:9b:39:5a:8e:59:0f:58:56:f3:
e8:18:30:80:98:6c:5c:f1:9c:1c:8d:c7:c3:05:48:38:38:f6:
67:ea:59:78:ed:4e:5d:c7:34:df:82:61:41:15:4b:f5:ee:3b:
0f:12:d3:04:cd:79:22:54:39:fb:34:7d:b1:04:6e:07:b1:5e:
64:f4:01:68:94:b8:7e:de:48:ee:6b:e4:f9:a2:49:bc:2e:5c:
b0:62:4f:a8:b7:69:1d:e3:f1:b6:32:94:3c:03:e2:4f:ce:36:
f7:0d:e4:b3:47:cb:f8:59:e6:84:23:b7:c4:0e:69:04:24:92:
46:14:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:55:47 2026 by rpki-client