This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
File: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json)
Hash identifier: IAq5tFzOiPontcXdtnriH6g8WsTE/5gKJ91Bdvo8PPA=
Subject key identifier: 2F:9A:02:21:C3:B1:99:06:A6:1A:B9:43:20:75:46:88:F0:D0:A1:87
Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Certificate issuer: /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
Manifest number: 0127
Signing time: Sun 25 Jan 2026 03:52:23 +0000
Manifest this update: Sun 25 Jan 2026 03:52:22 +0000
Manifest next update: Sun 01 Feb 2026 03:52:22 +0000
Files and hashes: 1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: eCVPl+TqRKbrSGPD5Y2qTtc0TQtx+JJf7yZLg+k6nL0=)
2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: C6HUwf1FQ1jXt6f1hhjL5V8WYMVbIiest2VH946jwa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Validity
Not Before: Jan 25 03:52:22 2026 GMT
Not After : Feb 1 03:52:22 2026 GMT
Subject: CN=69759377-f7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:58:3d:07:ba:b0:97:d6:1c:ba:12:5c:2f:
7e:5e:1e:29:32:6b:b4:90:d6:bf:01:17:bb:3c:34:
7e:b2:c9:13:f8:d3:21:38:f7:f5:ea:c8:27:87:df:
fd:fc:1d:0c:17:31:05:5c:cd:0a:e1:70:45:0a:e1:
90:3b:2e:37:eb:44:15:ed:2d:87:a7:13:a1:15:43:
45:7f:b7:e6:90:a2:dc:64:ac:f1:a9:8d:3a:c7:78:
9d:10:65:04:01:79:11:13:e3:a9:14:80:54:ef:98:
64:10:c1:3e:11:d3:ec:0c:e7:dd:2b:23:19:8c:d8:
2b:15:c9:e8:c7:e7:fd:ee:ab:76:75:bf:85:9e:9f:
b1:8d:5a:d3:e1:71:b5:03:1b:07:3d:63:61:7d:46:
ab:42:62:38:0d:57:33:49:7d:ce:cb:57:de:34:96:
b0:e4:7f:05:ca:21:c1:52:94:cf:aa:c9:25:23:d7:
3a:16:c5:64:cb:89:b5:5f:7c:26:ea:2f:34:5d:16:
c0:ac:89:8a:59:92:bd:bf:f6:dc:ab:1d:86:0a:b8:
5d:ec:6a:a4:76:56:24:14:3b:ed:b1:37:be:66:05:
c7:ef:1e:da:99:37:e4:f5:e1:c5:36:ad:17:b5:bd:
d9:03:2f:34:0f:d3:38:38:c8:85:c4:dd:14:a0:d2:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9A:02:21:C3:B1:99:06:A6:1A:B9:43:20:75:46:88:F0:D0:A1:87
X509v3 Authority Key Identifier:
keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f2:a7:87:a3:35:4b:ea:99:b1:3d:74:56:23:29:42:f6:7d:
5b:60:75:d6:f1:ab:11:9a:f6:23:8b:60:13:86:a5:3b:ae:5e:
18:6b:3e:49:97:55:73:66:22:48:e7:29:8a:0c:44:41:1e:cc:
b2:b0:6e:0b:bc:9a:b3:c6:a1:0b:b3:79:60:3d:48:ee:1e:37:
bc:96:d2:4e:df:6b:5a:e1:28:65:d2:0f:30:d2:78:e0:bd:a9:
a7:47:5c:03:9f:b2:b2:a5:f7:d5:ad:39:d4:b9:24:1a:93:77:
61:7e:4a:82:54:e9:c3:24:23:84:fa:6f:d4:5f:c7:37:fd:31:
54:e3:ee:27:b5:42:db:96:05:8c:85:f9:99:e8:36:51:51:37:
57:c7:43:f2:e3:7b:53:d6:7f:c1:62:5a:18:ff:41:3b:ac:05:
6b:54:17:95:2d:15:61:12:a2:75:a1:63:71:16:cf:a1:01:60:
e6:b4:2d:d2:6b:e3:dd:3b:a9:c7:86:9c:36:a2:43:20:60:f5:
1f:e6:8e:f7:0f:51:20:b7:9d:44:e7:f7:e3:71:47:67:a0:b5:
94:fd:7b:15:f2:0b:ae:3c:b7:43:88:2f:46:bf:a4:39:c6:34:
b5:09:ac:ca:84:15:0b:b3:8c:d9:22:fa:1f:72:19:d7:c9:db:
a4:c5:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:09:24 2026 by rpki-client