This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json)
Hash identifier: TsTLwJSYYnz/NXEZOnFz0agFTCBCJcgMS/CvPa66WeU=
Subject key identifier: 1D:97:E6:37:98:9E:93:67:04:07:C4:D2:08:EF:45:CF:94:52:33:2C
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial: 01E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
Manifest number: 01D4
Signing time: Sun 25 Jan 2026 02:12:25 +0000
Manifest this update: Sun 25 Jan 2026 02:12:24 +0000
Manifest next update: Sun 01 Feb 2026 02:12:24 +0000
Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: cd3w8+a0fHcrDG75jdqFLzpzehPFHwbZSmmelMX9lhU=)
2: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: W2GUCwLH1zO0HSDwZ2rzdxgCK5Z2LezwQn+GLI/pJ/g=)
3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: inmnpyaDxDWlLYNelzuadkNEoddsaWxx/qXH6LYAyxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Validity
Not Before: Jan 25 02:12:24 2026 GMT
Not After : Feb 1 02:12:24 2026 GMT
Subject: CN=69757c09-f381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:0f:ac:b4:c5:73:70:ae:bc:72:64:ee:d4:
59:0f:86:00:e2:e1:55:c7:37:ec:ae:a8:2b:38:16:
55:af:c2:ae:fa:56:02:f6:6f:f9:b0:6c:8b:99:37:
da:4d:bd:8d:4f:bc:eb:4b:70:7d:9f:9c:23:9e:d1:
c4:4b:79:99:2d:40:56:42:01:cd:98:c3:95:bd:f0:
a9:64:05:ea:91:2f:7f:3f:e4:26:2e:fd:67:52:4a:
62:27:14:69:f9:b1:de:8e:9a:cf:c5:6a:ff:6c:30:
8f:b3:4f:d1:5c:4c:b9:7c:4c:d0:66:1d:e7:6f:7c:
92:a3:a4:3f:00:50:2a:b9:18:11:ac:c9:fa:18:66:
78:a5:d0:c5:08:01:12:55:f3:21:1e:4f:87:a9:bd:
d8:13:85:ce:6f:41:c2:46:31:cc:b8:63:cc:1f:00:
a5:62:50:68:b6:10:ba:36:6b:b3:c1:12:d0:cf:a4:
9c:6b:5e:53:41:bd:07:68:2e:c3:24:f6:3b:69:f3:
59:9e:ce:07:bc:3f:31:99:03:81:1c:4c:82:3c:3a:
f4:fe:3c:c5:43:c8:9d:e7:f2:94:d2:33:ec:88:68:
f9:96:45:b2:81:88:87:c8:f8:9a:e2:f2:d0:37:f7:
68:a8:e7:4b:97:a2:ca:da:80:6e:e5:2d:d6:33:ac:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:97:E6:37:98:9E:93:67:04:07:C4:D2:08:EF:45:CF:94:52:33:2C
X509v3 Authority Key Identifier:
keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:81:1b:ea:bc:7a:60:74:ec:94:80:cf:1f:da:41:44:e3:b0:
9a:4a:f6:4f:46:76:fa:af:8b:a1:a7:3a:2b:f8:ce:1c:de:c3:
d1:02:a8:42:e7:3d:14:64:58:d4:a4:46:ec:e7:e5:0a:ce:e8:
86:4e:e0:92:33:9f:d9:1b:66:de:4f:ad:db:6a:39:1a:2b:4e:
86:23:56:c3:2b:58:35:78:4b:6a:e9:db:c5:52:5a:ef:47:b8:
a7:a5:3c:21:ac:0b:94:84:a7:72:1a:1c:22:52:d4:81:39:45:
cd:f7:60:31:13:4c:9e:fe:20:a3:2b:35:c1:f4:85:6a:cf:fd:
b8:0e:7a:30:18:da:28:c5:6f:4a:ee:d3:a5:f9:8e:d6:b2:9c:
85:57:eb:6e:7b:e0:1a:3c:6f:f7:dd:47:6e:fd:48:96:83:aa:
ad:b2:0b:dc:76:84:c3:0d:49:05:a8:2d:ba:db:e8:e1:72:f6:
dd:ba:50:92:4d:cb:31:20:17:ac:4d:93:d5:0b:dd:1c:00:eb:
a7:d2:23:c6:71:44:cf:c9:82:fd:ec:4d:fb:d4:0d:86:37:f0:
4d:2a:20:86:ba:f8:7f:b2:07:81:32:d4:13:0c:30:56:f2:20:
e9:a8:bf:50:18:c7:02:0f:73:70:aa:e9:83:7f:a0:11:9c:db:
4f:ce:e5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:03 2026 by rpki-client