This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json)
Hash identifier: 0Yffq1TR/g9pb9Yxa7bcBZwN+h9tEIKHeM/MWhIjnMg=
Subject key identifier: 11:3C:91:6C:4A:A1:96:0F:A1:A4:99:10:A4:6B:8A:6D:B7:7D:ED:82
Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
Manifest number: CC
Signing time: Sun 25 Jan 2026 05:01:53 +0000
Manifest this update: Sun 25 Jan 2026 05:01:52 +0000
Manifest next update: Sun 01 Feb 2026 05:01:52 +0000
Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: zxkQChOsVvtg9CPupQeTJvPj10S/0qjnMGwFrnYsIvI=)
2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: drd+idSshs98eOD0pXc/+ttH+udrA5TRp96UQZXHfUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Validity
Not Before: Jan 25 05:01:52 2026 GMT
Not After : Feb 1 05:01:52 2026 GMT
Subject: CN=6975a3c1-40bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:67:97:cc:7e:6b:de:b5:ae:d3:76:e2:4f:7f:
3e:3e:c8:11:3a:59:6f:b8:1a:78:b8:57:07:3d:e0:
0f:09:28:0c:92:3a:3b:4b:cd:6d:98:15:6a:ee:0e:
20:7f:e6:91:ef:ef:39:1e:13:2a:7e:3a:7b:b3:d5:
bd:fb:ff:a7:b9:a2:5f:63:12:81:85:7b:26:72:2d:
7c:1a:39:e9:25:8e:72:82:ef:46:44:b6:13:ca:16:
c2:4f:4a:bd:b0:3f:d3:0a:c1:ad:4a:96:d9:52:3c:
0f:77:cd:c9:d0:b8:fc:50:67:f5:f4:79:7c:da:40:
e9:20:1a:36:12:ad:c2:cb:e0:22:7c:91:12:15:b2:
cb:12:4f:97:66:e4:35:ae:eb:f0:43:d1:48:66:46:
29:b1:a0:7a:e2:83:4a:8c:ab:4e:e6:84:f0:73:0f:
d7:9c:d4:c0:71:6f:5a:ea:f9:5b:6f:7f:ce:c6:d8:
cd:15:f4:fc:25:d9:02:53:21:5e:1b:0c:21:81:fc:
89:75:47:92:48:a1:4f:f4:08:18:a0:e6:72:3f:2d:
5f:79:cb:fc:9a:fd:2c:9e:cf:c7:02:1b:32:11:44:
70:4f:44:1b:52:c3:b4:e4:9b:5b:3d:4a:51:3a:49:
03:0c:43:6c:8c:74:c2:16:b4:3d:d7:79:83:e7:1f:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3C:91:6C:4A:A1:96:0F:A1:A4:99:10:A4:6B:8A:6D:B7:7D:ED:82
X509v3 Authority Key Identifier:
keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:e3:f1:91:43:09:b3:15:74:2a:0a:c2:00:e6:6c:76:30:f1:
89:e1:b7:f1:c5:a9:67:95:01:03:8e:de:bf:a0:01:57:19:c3:
44:2e:69:63:fe:64:5f:03:c0:3d:90:1d:91:85:93:24:44:f1:
c3:22:04:69:af:0a:02:7f:26:6e:ad:3f:e4:22:62:38:2f:63:
e9:20:5a:4a:05:b1:20:40:0d:2a:da:01:38:30:2f:26:d3:9a:
6a:44:e7:b9:5c:8f:b5:55:17:e8:96:12:37:45:b8:a9:59:38:
3a:1e:71:fb:86:ff:82:24:84:9d:83:c4:52:29:20:43:57:6e:
bd:b0:87:a0:7e:47:f0:6a:a5:bc:65:4f:21:f6:8a:cd:54:3c:
c7:d2:58:fa:fb:db:af:6a:69:bd:9f:14:89:c1:7d:9d:a7:c7:
72:5a:6e:11:78:b2:95:d8:34:ed:93:77:2b:60:87:5b:63:af:
cb:4a:52:fd:12:4b:16:11:b6:8a:a6:63:a6:c9:2b:f7:a8:23:
b5:e8:b0:bb:ec:88:97:21:b1:c8:6e:dc:38:d7:6a:1f:bf:96:
b2:28:2a:82:da:ac:b7:78:7b:3c:3c:aa:b6:26:3d:43:0d:6e:
f6:9e:d3:0f:32:c6:51:36:a5:6e:f0:26:32:61:43:41:87:2a:
10:71:f3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:32:52 2026 by rpki-client