This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json)
Hash identifier: ydAR/Nhb8DYyfrafHlzVmRagfMEXQYwxqHrUtIMebjk=
Subject key identifier: 47:84:A9:42:5A:DD:8C:E1:94:47:1F:EA:CD:31:B2:7B:71:DA:C7:A6
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial: 0927
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
Manifest number: 091A
Signing time: Sat 24 Jan 2026 19:40:43 +0000
Manifest this update: Sat 24 Jan 2026 19:40:42 +0000
Manifest next update: Sat 31 Jan 2026 19:40:42 +0000
Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: El2Ce6IGV6zSoFK7rt/s+yM57F6uLscX3tOdefhgBhs=)
2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: qDuXN79IYo1ayNnk4ZRYUkR9U2DK4zQbiGKyGGdoBrg=)
3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: bgNv+IqWCSXLvojk2Z7PhxXcctTDA8/7IvD4X7CUQGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2343 (0x927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Validity
Not Before: Jan 24 19:40:42 2026 GMT
Not After : Jan 31 19:40:42 2026 GMT
Subject: CN=6975203b-6b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:bf:eb:7c:59:e3:c7:5a:5a:ea:81:28:ef:
6e:f2:04:d3:a7:6e:90:82:f8:fb:6b:cc:d9:fd:a3:
72:21:cb:01:41:5c:97:f0:3b:f7:b0:78:3b:44:58:
f6:aa:22:85:75:b0:c1:86:40:22:ad:04:22:88:fc:
b6:95:ca:37:cc:f9:18:14:4f:f1:ee:1a:16:bb:c2:
e6:7f:7c:8d:0e:8b:d4:0f:25:2a:9a:93:e3:7d:ae:
90:00:91:4d:eb:94:6d:09:df:05:c0:de:80:46:b1:
f9:56:aa:01:c8:13:a6:94:c9:35:d9:53:fd:20:f1:
2c:86:10:ca:5e:18:48:09:4a:25:a9:8a:18:5a:d2:
f6:ac:dd:1e:30:b9:bb:56:60:23:cc:a8:2c:4b:cb:
8b:c5:72:2e:c5:32:7f:bb:74:84:e8:9c:4e:42:6e:
0d:ec:0a:5d:30:c3:6e:4f:7e:89:38:13:92:80:9a:
9c:c0:7a:61:bc:f7:fb:da:94:96:e3:eb:93:0e:ec:
e7:0b:2b:c3:04:c3:d2:51:af:78:eb:26:e5:54:fa:
c3:bb:80:e0:45:65:2a:23:2e:78:86:c7:cb:05:71:
fa:45:6d:74:ad:4e:0b:2f:68:cb:9d:9b:06:d9:0e:
fe:50:98:c6:76:64:d9:22:ba:92:b9:b7:31:28:20:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:84:A9:42:5A:DD:8C:E1:94:47:1F:EA:CD:31:B2:7B:71:DA:C7:A6
X509v3 Authority Key Identifier:
keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b1:81:47:4a:28:ef:e1:83:be:7f:73:8b:69:52:d2:99:7a:
94:19:ae:7f:04:55:cb:55:15:3c:b6:ae:21:47:bb:61:ea:5b:
0e:34:0a:0f:d6:54:e7:17:4f:fb:3d:03:42:2b:80:a1:f0:ae:
ac:98:d6:2a:5d:ce:d0:94:07:07:21:c8:4e:0a:a9:ff:87:3d:
1c:05:83:31:b9:11:07:b1:93:9b:db:41:de:b2:54:39:f9:de:
f8:99:85:c9:a8:38:77:be:eb:c0:a1:67:22:44:09:e7:9d:b8:
1b:66:ea:9b:4d:b3:18:29:a1:93:15:d9:54:d2:53:30:d9:9c:
21:22:b2:96:8d:15:82:2a:c7:2b:0f:bb:ce:9d:aa:0e:db:58:
2d:f4:74:9a:ea:1c:fd:1f:8f:cb:30:c0:6e:4c:8a:e6:b8:cd:
71:71:41:2c:bc:70:a7:09:d8:0a:85:aa:db:4c:bb:62:73:ed:
8f:99:7f:2d:5f:b0:55:96:24:7b:70:92:18:fc:0f:6a:3e:30:
d2:da:b0:6b:5f:c4:73:9a:b2:c8:8e:6a:f7:a0:1f:f1:e1:3f:
ac:f9:d1:02:20:2b:04:65:ec:9d:e3:e0:79:07:54:77:cd:c2:
78:6b:32:71:57:c5:b0:d2:cd:5b:4c:48:be:e0:b9:54:85:19:
d5:31:09:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:28 2026 by rpki-client