This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
File: rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft (raw, json)
Hash identifier: j38z/637w2LVNc1F0187d9cZLKBJz416tv3wDpID1bs=
Subject key identifier: 58:86:A6:65:3F:93:18:26:DB:A5:3C:36:C7:13:72:E1:76:6F:CF:74
Authority key identifier: AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
Certificate issuer: /CN=A91174DD/serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
Manifest number: 04
Signing time: Fri 23 Jan 2026 07:11:39 +0000
Manifest this update: Fri 23 Jan 2026 07:11:39 +0000
Manifest next update: Fri 30 Jan 2026 07:11:39 +0000
Files and hashes: 1: rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl (hash: ovpXPlYLiNVuKWYgwGWO/wlNKc8WZqKmyTJEadEeXLI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 07:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91174DD, serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Validity
Not Before: Jan 23 07:11:39 2026 GMT
Not After : Jan 30 07:11:39 2026 GMT
Subject: CN=69731f2b-254f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:b9:74:dd:8b:0f:30:ba:34:a9:3a:f1:1b:
1a:53:32:75:cb:a7:d3:9e:18:70:47:86:7b:03:54:
d0:2d:61:e7:bd:f0:39:54:2a:23:d7:fa:7e:f6:b2:
0d:fe:80:ec:77:78:7c:e8:bf:cd:7e:c2:03:5b:7f:
e0:19:b3:d2:bc:c0:65:12:89:32:35:8b:ff:83:df:
a6:87:04:9c:fe:42:e2:a7:f5:65:9a:d2:1d:b3:8d:
8b:c6:a6:30:5b:f3:5a:4d:f3:4e:76:e4:1b:cf:2c:
76:8f:44:6b:7d:55:3a:6c:a6:1f:71:fb:f4:52:a6:
16:70:02:32:04:ff:6c:2b:7d:12:ae:8a:64:81:54:
83:db:4b:0f:72:2b:7b:57:fb:72:1f:82:a7:ee:b3:
85:84:cd:21:5d:ff:e0:da:aa:81:0f:d8:89:c4:d5:
28:ce:04:96:63:fb:25:d2:aa:e3:50:27:77:6d:c9:
ad:c3:37:75:cf:d1:9b:39:06:d6:02:f2:2e:57:1a:
ee:74:2c:60:a9:82:15:3f:53:d5:ce:b0:ba:9d:47:
f3:e2:09:f8:97:2e:6e:bb:2a:37:10:d5:11:77:56:
22:89:b6:b0:86:71:e1:6b:fc:21:49:bd:7b:c4:45:
05:1d:8e:8f:b7:20:db:89:75:27:71:b9:86:53:3b:
c5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:86:A6:65:3F:93:18:26:DB:A5:3C:36:C7:13:72:E1:76:6F:CF:74
X509v3 Authority Key Identifier:
keyid:AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:b6:f7:65:22:a3:c8:18:d2:5e:15:2a:bc:d5:80:b8:22:ae:
f0:1e:eb:1c:79:77:f8:72:1a:ef:3e:e0:c5:72:3d:0f:c0:d3:
33:c5:83:77:e4:77:9f:e3:96:ba:92:a2:7c:8d:fa:04:8f:2b:
0f:b5:0e:5e:eb:48:db:30:11:8a:82:c4:b3:47:81:6b:ff:41:
8b:8e:ba:ef:97:64:c6:e9:70:d8:ea:3d:6d:09:46:fa:c1:f6:
41:b9:44:ea:77:30:75:05:69:6a:13:55:21:2a:26:38:db:bf:
51:22:bf:a1:8f:75:fe:38:66:59:9e:99:17:20:b1:d4:31:1e:
1f:8d:ec:c0:76:47:10:1f:fe:26:72:5b:8c:03:d6:f2:33:1e:
4e:cd:f2:94:9c:46:ac:74:63:d6:ff:fa:38:d1:8f:16:f8:49:
70:dd:77:5a:9e:0d:33:15:08:49:9c:05:c9:45:73:1c:66:86:
b0:29:17:21:1a:e1:0d:59:cd:9d:27:02:c0:7f:c1:47:9e:04:
ed:5a:4f:91:58:7c:00:02:85:00:3a:35:c1:fa:3e:b0:df:63:
2a:7b:47:da:d7:d5:9a:e0:90:7b:b2:16:ef:59:35:25:6d:17:
ba:70:72:72:96:ce:19:33:6a:83:85:a2:b5:75:a7:57:0f:5f:
74:96:0d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:48:41 2026 by rpki-client