This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json)
Hash identifier: khCiqzZjLm4JzLkhhvzuYjRX697B4yPHmPOjXiSgp1U=
Subject key identifier: EC:B2:B1:9D:B4:2F:8B:D1:A7:DC:65:E7:00:83:50:B0:5B:05:0F:95
Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD
Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD
Certificate serial: 0A42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
Manifest number: 0A3A
Signing time: Sat 24 Jan 2026 19:10:46 +0000
Manifest this update: Sat 24 Jan 2026 19:10:46 +0000
Manifest next update: Sat 31 Jan 2026 19:10:46 +0000
Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: xuZS+RkssGLUeQ5McJTQCW5arZl6+J6mNI4DNQONur8=)
2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: nTti14+ixHvCqHgk8IwtFdkQ1Ouiq6aL3zx3Hm8MMGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl
rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2626 (0xa42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD
Validity
Not Before: Jan 24 19:10:46 2026 GMT
Not After : Jan 31 19:10:46 2026 GMT
Subject: CN=69751936-0ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:60:9a:dc:99:cf:44:24:af:3f:12:b3:b8:
0e:5e:d3:91:ef:3d:2a:1e:1e:c1:fd:f5:b0:55:f0:
ba:80:7e:e6:e8:62:8f:2d:ba:48:1e:7c:b5:fa:ae:
6f:f7:b8:be:d8:29:bf:33:2c:0c:44:e2:61:c6:12:
93:bd:52:42:c6:b7:3c:97:ce:66:ca:11:f6:65:f2:
61:43:5c:e7:c2:74:ee:f8:be:25:b9:36:4a:f3:50:
24:28:c3:b9:22:03:1b:b0:f4:ad:d5:0a:94:82:77:
38:ad:8b:d1:c5:74:12:1d:57:e2:56:e9:4f:e6:db:
cd:ca:73:45:0d:f5:e7:a2:38:21:3d:9e:27:23:f9:
fb:ba:33:f0:6f:69:62:ae:69:c8:33:d4:20:88:45:
f6:b2:6c:17:5c:54:93:97:5c:44:c9:57:78:ca:13:
aa:be:e2:31:65:e6:2b:e9:6a:20:68:e4:e5:76:f3:
2a:6d:28:ef:b5:df:25:d5:64:d1:f9:34:d1:1f:30:
e2:06:db:86:12:7b:ab:67:dc:19:49:4e:d6:6a:ab:
d9:41:9f:16:60:60:b6:f7:59:75:ef:53:79:9c:4c:
23:d9:b8:e5:47:7c:c3:83:05:d2:5c:41:2f:3d:a3:
cd:8c:c4:5e:ca:07:d7:d6:38:4b:41:cc:d3:e1:e7:
0f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B2:B1:9D:B4:2F:8B:D1:A7:DC:65:E7:00:83:50:B0:5B:05:0F:95
X509v3 Authority Key Identifier:
keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ed:98:8f:d4:94:ce:b2:aa:b6:69:22:93:c7:4a:c0:80:d6:
4e:45:85:9c:d2:c9:9b:98:18:ac:d6:b7:42:16:1f:d7:15:c8:
e5:21:45:d5:3d:14:c2:f5:5c:c9:46:3c:5a:fc:2e:ee:a1:fb:
93:fb:69:03:3b:42:07:32:85:05:25:48:3d:4d:a6:d5:a1:63:
9b:72:06:a7:f3:f9:5a:42:fe:62:fd:b4:0c:cf:f1:d5:31:65:
0d:47:b8:83:b8:60:3c:50:1f:cb:a1:dd:ed:60:92:7e:06:bb:
31:61:62:bc:59:55:e6:9a:a3:b8:1f:02:14:46:fd:bc:67:62:
d5:ce:ee:fa:32:cc:65:39:84:8a:21:fa:cd:32:92:e9:81:d6:
5e:85:d2:b1:66:b2:16:a9:bc:3a:8e:d3:d3:a0:ed:00:f6:55:
ff:73:db:4f:fb:a7:33:e3:c8:98:ff:fb:63:51:5e:34:03:25:
42:41:db:10:1e:05:50:15:9b:25:14:6c:f3:45:99:25:4d:8f:
17:db:0c:3c:1a:6d:b5:59:a0:fd:48:70:06:7e:85:88:ba:9e:
29:0f:74:07:6d:fd:f9:f8:62:58:62:c9:42:70:e1:6a:c8:20:
84:7b:39:8c:6f:ad:8b:b8:27:cd:53:fc:1e:bf:71:d5:4a:6d:
6b:2c:03:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:41:17 2026 by rpki-client