This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft
File: 5nV74dIYmt6NdyyclIZDEL45LXA.mft (raw, json)
Hash identifier: Fr5Kmbtbed5QFtpTeEJEkdoQziDsmHRRHRME7dmPZ3A=
Subject key identifier: 98:73:97:DF:AB:7E:DB:B1:42:25:A9:80:81:20:6A:C3:41:3F:EF:1C
Authority key identifier: E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70
Certificate issuer: /CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70
Certificate serial: 04E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft
Manifest number: 04DA
Signing time: Sat 24 Jan 2026 23:01:35 +0000
Manifest this update: Sat 24 Jan 2026 23:01:34 +0000
Manifest next update: Sat 31 Jan 2026 23:01:34 +0000
Files and hashes: 1: 5nV74dIYmt6NdyyclIZDEL45LXA.crl (hash: FcaW/go0qAJqGKHUTJf7pzBMACWF8c083MVl11+MG7U=)
2: 2B70BBE889E111EEB5E86A0EC4F9AE02.roa (hash: DAt6kU8T1ilBH7F7cWv77HjnJ4XZlNTWHqJVtiI5e4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl
rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1249 (0x4e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111F9E, serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70
Validity
Not Before: Jan 24 23:01:34 2026 GMT
Not After : Jan 31 23:01:34 2026 GMT
Subject: CN=69754f4f-4ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:9d:89:e1:f7:51:31:9b:db:00:1e:35:43:
fc:ff:c9:2a:5f:6a:c6:8a:ca:85:72:7f:34:e7:ad:
44:3d:c7:d9:d1:fe:31:2c:81:03:94:eb:f7:fa:16:
1f:e2:0b:3e:a2:ce:3a:15:f2:be:77:aa:c1:31:b5:
77:59:42:b9:e2:4f:e4:b9:b4:bc:04:e7:f4:08:24:
16:6a:a6:9c:af:15:56:37:8a:a9:ed:9e:9f:49:61:
b6:2d:c5:e8:9a:db:1a:9b:bf:78:96:2c:ff:85:63:
ee:77:16:68:f0:f2:28:56:c0:22:e4:fc:20:86:57:
1a:fb:89:c9:b0:88:48:f3:08:76:8e:f3:30:2f:8e:
8a:49:cc:74:57:11:33:a3:c1:66:20:48:8c:14:8d:
ab:18:6e:cb:db:21:82:70:32:ce:1a:0a:c7:2e:6b:
2e:d1:03:cc:c1:c2:4c:4b:03:22:11:4c:5d:39:31:
ab:52:54:aa:59:b4:21:bb:3f:1b:0f:f7:68:79:36:
2a:65:5d:a5:cc:c9:40:ad:d5:99:0c:97:45:f6:14:
60:d8:dd:75:4f:b4:11:b2:73:37:77:f9:38:f0:26:
1c:38:9f:f3:1b:f8:54:d0:85:f0:3b:fe:63:a7:06:
f1:8c:47:92:ef:33:2a:f5:2c:a2:bb:3e:44:23:ae:
af:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:73:97:DF:AB:7E:DB:B1:42:25:A9:80:81:20:6A:C3:41:3F:EF:1C
X509v3 Authority Key Identifier:
keyid:E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:49:23:fa:0a:74:8f:92:cd:1b:2e:5b:d8:d3:65:10:5a:9f:
8a:81:a1:31:62:00:cd:01:e7:16:87:f7:af:b4:0e:75:64:8f:
d7:54:36:bd:85:76:22:d8:c0:ff:79:e9:c2:14:5d:6a:bf:12:
36:e8:bd:05:64:ef:f1:23:0b:e7:16:e7:33:cf:ba:c0:6c:85:
c4:18:28:69:4c:6a:03:2f:3e:ff:4b:ec:41:fd:1c:44:d4:62:
5b:4a:e7:ba:6b:7c:e9:68:23:41:a5:41:af:d0:d4:98:59:24:
58:e1:58:36:07:9d:6d:a9:bf:a2:61:de:68:61:65:94:a7:c0:
ad:43:7e:e1:8b:c4:0f:ac:c7:15:1b:ab:3b:35:74:36:63:fe:
c8:80:8f:a8:5a:d4:3f:9c:69:99:5d:95:ae:a0:98:1c:f2:8f:
39:76:4a:9a:77:98:d5:1a:47:33:cf:f6:61:be:d7:9c:7f:e1:
f4:0b:4c:1d:5e:4c:bf:7c:56:c1:ac:5e:a1:ab:a4:0c:b1:54:
c7:c4:be:09:04:be:86:15:2f:bd:e0:e4:57:16:01:11:9c:32:
58:d9:72:38:ad:ef:9d:4f:ee:ea:ce:53:18:51:8e:f0:68:a7:
db:51:7f:76:18:74:b3:e0:fe:2f:f6:12:26:f1:80:1d:5d:d1:
9c:14:0e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:53 2026 by rpki-client