This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
File: VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json)
Hash identifier: T/Z/8UHIW9jhnqMdFBdD0WBV7uG+xFnJxzfJqZdYDkw=
Subject key identifier: 8F:B0:5B:47:7F:59:3C:44:88:57:53:19:08:C1:07:73:CB:FA:4B:02
Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
Certificate issuer: /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Certificate serial: 0A42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
Manifest number: 0A3A
Signing time: Sat 24 Jan 2026 19:12:11 +0000
Manifest this update: Sat 24 Jan 2026 19:12:10 +0000
Manifest next update: Sat 31 Jan 2026 19:12:10 +0000
Files and hashes: 1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: kJFi2LTO19orOQ9gbX+4S3DTObOHOE4sg3aXBjkQLtQ=)
2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: OT+54b9b887njSEqmuExUbEj0TJJUhjKtfKkhce9QUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2626 (0xa42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Validity
Not Before: Jan 24 19:12:10 2026 GMT
Not After : Jan 31 19:12:10 2026 GMT
Subject: CN=6975198a-e3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:8a:bc:69:66:59:e0:b3:b9:07:f7:6e:08:
18:22:f0:57:fa:8a:0d:ea:a3:72:a5:a2:fe:c1:ea:
0b:fe:a1:42:29:00:c3:58:8f:37:1a:7a:f7:08:d7:
f3:dc:9c:7e:da:ec:ed:9d:64:2e:be:65:a8:ae:95:
d8:ba:dd:db:38:ed:b5:e6:46:3e:cf:d3:c2:63:df:
a4:cf:fd:b3:37:63:dd:c1:2c:1c:2d:56:f7:fd:4e:
c8:f8:d3:68:90:b9:47:f0:68:45:fb:82:d3:c0:48:
5f:91:ef:30:66:ba:fb:7d:94:52:4f:ba:10:86:b2:
87:34:87:fe:38:04:5f:49:15:fa:9d:52:90:ec:a8:
ed:1b:13:55:77:a0:cb:b6:20:9e:75:b3:67:83:0b:
96:d3:8a:47:92:1e:f0:b5:e3:47:b0:54:0e:48:0e:
d1:30:6d:9d:f0:2d:ae:2f:1a:be:7e:32:4e:08:81:
d7:72:fe:8f:ae:ff:59:bb:db:67:3f:e2:7b:9f:d8:
4e:f8:56:ce:a6:ba:a5:9b:14:66:7f:f7:8a:54:f3:
0e:95:8d:66:f2:4d:e4:14:6d:7d:d0:83:be:a2:74:
d0:ed:02:11:32:a0:1c:ce:80:c7:8b:7f:95:d2:5e:
d1:56:42:e3:8e:be:f4:9e:22:77:e7:88:49:24:df:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B0:5B:47:7F:59:3C:44:88:57:53:19:08:C1:07:73:CB:FA:4B:02
X509v3 Authority Key Identifier:
keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:28:24:b0:09:2a:eb:5f:48:75:e4:71:bb:30:b7:6b:17:1b:
e7:2c:1d:83:76:4d:13:0c:3c:e9:b0:3f:19:0c:b9:39:0e:b3:
a7:66:19:82:e3:dd:b3:6f:e5:00:51:da:9d:e6:1e:8f:f7:25:
4f:91:4c:25:b6:0d:ad:3b:b5:53:03:5c:0c:fb:62:96:fd:8c:
2d:76:68:81:06:d7:52:01:0b:23:29:7f:7b:77:0c:e5:11:9d:
1f:93:1d:74:0e:9d:7b:ec:3d:9f:a2:79:97:9f:7e:c0:8b:98:
f5:01:80:26:24:30:ed:74:e0:42:4d:5f:91:a6:4d:39:b9:8a:
8b:a3:bf:cb:c9:fe:7d:9b:6a:87:80:91:65:4c:0a:94:6a:ee:
9e:97:08:63:1d:dd:74:ad:dd:a0:12:fc:cf:a2:5b:62:1a:49:
59:30:d2:03:55:f3:d6:85:dd:52:58:59:db:b3:e1:aa:0a:b5:
b6:da:a3:0d:6c:0e:26:70:58:11:04:b5:6a:f9:31:65:bc:25:
e1:1a:a8:f5:44:78:6d:ef:8a:7b:1d:ec:db:db:09:31:a2:04:
eb:62:b1:99:51:c0:ee:bb:48:65:a9:bc:d3:f9:5a:13:5b:84:
22:6a:52:4b:c7:f8:63:c3:10:aa:8b:40:11:1e:59:c2:e7:66:
62:2b:31:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:32 2026 by rpki-client