This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json)
Hash identifier: BnD/xwkOVUE1lTQI1UXUB18doBXxPvzYIv+EwdywShc=
Subject key identifier: 31:CC:F4:BA:DA:95:CD:F1:3B:B5:DE:A7:8E:01:2D:CF:99:53:C3:67
Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
Manifest number: 0141
Signing time: Fri 23 Jan 2026 03:36:17 +0000
Manifest this update: Fri 23 Jan 2026 03:36:16 +0000
Manifest next update: Fri 30 Jan 2026 03:36:16 +0000
Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: umH6ogd8FADelgJ2Z/JWULFB09ohyVtIXUY0zQC1710=)
2: 71DE3A16C2F511F09F5F373FC4F9AE02.roa (hash: WkJYQisnSBazPrwPxv44l2gKryzTzLronGoqsIsb18Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 03:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Validity
Not Before: Jan 23 03:36:16 2026 GMT
Not After : Jan 30 03:36:16 2026 GMT
Subject: CN=6972ecb0-0801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:6d:4e:b2:93:0d:6f:71:4d:23:16:84:b6:
d8:27:eb:40:09:90:a1:3c:e6:52:0b:49:12:a0:33:
3e:be:77:de:bf:fb:ed:11:82:b3:88:d4:32:ed:46:
17:94:6d:b6:9f:74:b4:e4:98:ed:f7:55:2d:c3:f4:
3c:e9:e0:f1:f3:a1:f6:0b:6c:c3:7f:18:64:6a:bc:
c2:06:a2:2f:f7:8e:11:ed:b4:a4:e1:81:9a:7e:c4:
cb:93:f8:6b:46:ca:37:fb:08:36:e2:0c:91:83:4f:
da:2d:1a:7f:ed:36:4d:8b:d6:19:9a:b0:f3:5a:18:
1d:10:aa:68:91:98:0b:17:9c:f0:5f:aa:be:5e:11:
df:f9:5c:09:fb:be:18:24:31:99:16:97:d2:45:d6:
e5:80:62:a4:6c:f1:df:a2:0d:23:0a:82:7f:19:20:
b1:40:f6:96:2c:ff:de:c6:72:2f:5e:90:7f:d4:57:
cb:20:69:24:a3:b4:e8:21:ed:23:9a:99:ee:3a:95:
2e:35:02:d3:d4:00:64:9b:4b:06:c9:8b:01:4e:f6:
92:13:16:e2:6f:5a:ea:87:b2:6d:04:a7:07:b1:f4:
66:0a:94:48:44:00:6b:d2:1d:24:4d:79:62:fc:9d:
e3:3c:4c:5a:da:d5:57:91:d5:34:40:92:70:f7:73:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CC:F4:BA:DA:95:CD:F1:3B:B5:DE:A7:8E:01:2D:CF:99:53:C3:67
X509v3 Authority Key Identifier:
keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:be:ea:37:cb:79:12:7f:1a:eb:49:8f:8f:fb:2d:bb:63:4f:
08:4a:07:2a:87:3d:ef:a8:35:99:51:41:5b:d4:79:94:42:3a:
32:79:ee:8d:01:69:63:79:25:00:f9:7c:4a:3b:30:27:05:3b:
4a:08:e1:6b:0a:09:e8:d4:9d:56:54:f1:0d:88:21:1a:01:f5:
ee:82:40:87:a6:cb:fb:7c:cd:ed:ab:f6:23:03:d5:50:4d:51:
09:2a:c4:0d:0d:ac:b4:00:bb:55:d6:bc:9e:5f:a1:ee:d8:78:
4f:5d:9e:c0:61:a9:98:8b:52:74:22:a9:dc:db:9b:f7:b6:83:
7c:a7:39:21:f3:34:07:3a:0a:ea:14:dc:db:0b:50:20:f6:95:
65:ee:45:19:b4:2f:52:99:40:08:b9:32:8a:15:09:ab:9b:4e:
cf:93:e5:52:74:0a:da:d0:60:2f:ed:4a:a4:ce:ec:95:62:d1:
4c:56:53:65:5b:35:eb:31:f6:fc:64:d1:23:6f:f1:e7:05:a4:
15:a8:b3:dc:38:8f:b0:8b:3e:de:8d:cb:a3:78:2a:70:b0:ef:
18:71:6c:92:74:8f:5e:3a:16:aa:4e:0d:a3:86:11:7e:62:1b:
2d:a2:44:86:cb:3f:b8:43:67:25:5f:6a:3a:bb:98:e6:c5:87:
22:48:b9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:28 2026 by rpki-client