This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
File: JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft (raw, json)
Hash identifier: HwagePcmFlaBczm2B0N1W3eY54B0iAneeVQj+k0TSoY=
Subject key identifier: B3:D4:A6:D5:5A:55:76:EA:68:8F:CA:7E:61:9A:BC:B5:44:6C:B3:94
Authority key identifier: 27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61
Certificate issuer: /CN=A91E5D61/serialNumber=272307B227936DB3EE3B6540602C32D958309F61
Certificate serial: 3521
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
Manifest number: 482E
Signing time: Tue 06 Jan 2026 14:20:47 +0000
Manifest this update: Tue 06 Jan 2026 14:20:47 +0000
Manifest next update: Tue 13 Jan 2026 14:20:47 +0000
Files and hashes: 1: JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl (hash: i5KoboHq9aMtOgMMR03hDuPT5nMohH2n234YtHl3fTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Jan 2026 14:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13601 (0x3521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=272307B227936DB3EE3B6540602C32D958309F61
Validity
Not Before: Jan 6 14:20:47 2026 GMT
Not After : Jan 13 14:20:47 2026 GMT
Subject: CN=695d1a3f-bb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:c4:40:50:b0:c7:cf:84:07:7b:3b:c9:27:
d2:f6:be:21:ef:d4:07:9b:e7:af:31:78:d9:3b:f7:
5c:b9:d4:ef:0b:ee:e1:b4:4f:40:3b:bf:08:5d:cc:
22:75:c5:7c:43:4e:a5:14:31:7a:d1:0b:e8:73:75:
ae:df:5a:b6:ab:bb:61:27:c6:3c:90:be:01:8e:b6:
04:7d:01:4f:c7:50:3d:cf:42:f0:85:f0:d8:bf:a3:
0d:bd:6a:ed:aa:d3:32:d5:15:6b:f6:97:c1:24:6c:
42:5b:35:57:71:27:c7:1a:62:94:8b:61:59:7b:38:
e3:ee:02:19:bc:a9:61:41:c1:9c:f4:14:32:84:81:
a3:5c:96:95:49:92:cd:0d:10:de:7f:3c:fb:34:7d:
93:ae:61:ca:61:31:a7:fe:de:0b:3f:d4:bb:77:1f:
a5:bb:51:a2:49:47:59:e6:28:81:06:b0:f6:a9:27:
39:ff:93:cd:8e:a6:1e:30:2e:bf:37:ee:4d:3b:2b:
80:4f:a9:43:17:2e:15:29:e3:ae:0d:a0:1f:7d:86:
f5:db:31:98:83:03:40:37:be:8e:5c:92:24:4a:c3:
81:ce:9c:ba:a8:a1:ef:21:bb:25:a9:0a:10:6e:bb:
d9:60:3e:c8:15:4d:85:30:88:06:83:8d:cf:b7:5e:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D4:A6:D5:5A:55:76:EA:68:8F:CA:7E:61:9A:BC:B5:44:6C:B3:94
X509v3 Authority Key Identifier:
keyid:27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:59:cb:4d:1f:8b:b2:af:24:75:f1:07:a7:45:fd:32:8a:35:
56:51:34:ff:d3:d6:3e:aa:3b:a5:2a:da:ce:02:01:e7:5f:ea:
4e:1a:26:54:a3:74:1b:47:b2:a5:c7:7f:88:7a:e7:b3:77:32:
4b:c7:87:77:ec:14:de:01:36:dc:af:b4:13:a7:07:4b:7a:ba:
e5:0c:63:d6:1a:85:51:a2:75:76:f6:bd:97:1e:6b:cb:b5:41:
bb:6a:e7:7c:4e:ac:5a:77:62:df:a1:2e:b7:18:e6:0a:3c:be:
e0:38:f8:22:c9:b4:a7:51:d4:85:71:86:5f:e0:8e:4e:81:51:
f7:c6:c9:86:34:a9:9e:7b:5a:fc:62:8f:10:a4:1f:84:74:b5:
63:ad:ea:e8:aa:f9:d1:89:96:c5:1d:cc:e0:64:68:9b:ba:d3:
a6:28:2d:25:a4:47:36:41:55:6e:91:fb:23:ad:b9:38:8b:fe:
5d:f1:9d:91:e2:cb:2b:8b:50:08:ce:f7:02:42:da:21:fa:f7:
2f:00:49:c4:3d:cc:d2:67:af:75:8b:6c:92:93:bc:7c:3c:e7:
1d:9b:01:73:c4:eb:43:c9:cf:e0:93:ad:ef:47:91:e9:28:f6:
c8:b7:d1:1a:42:3a:d9:0b:56:5c:25:fd:30:82:73:57:6c:09:
de:12:c3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 10:23:12 2026 by rpki-client