This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json)
Hash identifier: M/UYNnjHff2Oahx32ZwR/f4tNxa4Cuak0YLNli71ooY=
Subject key identifier: 4B:2B:3B:8F:2F:42:3D:A5:88:6E:38:02:57:F3:C1:13:B1:D8:E8:19
Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
Manifest number: 66
Signing time: Sun 25 Jan 2026 06:07:36 +0000
Manifest this update: Sun 25 Jan 2026 06:07:36 +0000
Manifest next update: Sun 01 Feb 2026 06:07:36 +0000
Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: p53sEEE/hz3h5X6otDJUHsIayRy4FFwHcWtrps84l0M=)
2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: SdgAZZ52cjGHFYLx6r6iySsbR8aD22mEVfk3u39V65w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Validity
Not Before: Jan 25 06:07:36 2026 GMT
Not After : Feb 1 06:07:36 2026 GMT
Subject: CN=6975b328-73b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:a1:33:db:6b:55:1f:db:09:9e:61:d4:eb:
e6:61:46:f9:0c:64:19:70:fb:6b:05:b6:64:93:91:
51:1b:b7:97:66:59:22:53:f3:c9:0d:fc:d7:53:f2:
8d:1c:e3:8b:73:64:a6:6f:2d:60:07:e4:6a:34:7d:
6e:11:0c:33:f9:2a:b3:59:fb:71:c3:d1:a8:4a:b6:
62:c3:44:1a:19:77:4e:75:56:8f:47:7e:83:9f:97:
57:2c:ab:01:ce:ae:ee:e4:aa:7d:a0:ba:39:ba:c9:
3f:92:74:fb:bd:a0:24:9e:dc:ad:57:0f:6c:f0:e2:
5c:f0:4d:06:cf:f4:f5:d0:c2:0b:9a:31:e2:1f:da:
29:24:df:53:95:9f:5e:4c:03:cb:00:bb:e5:4b:b7:
d8:33:f4:31:35:88:6b:b1:0d:41:a2:6f:3e:43:cd:
04:65:3e:a9:2e:32:f4:f5:14:07:2a:74:85:7e:e3:
1f:60:97:2b:a5:da:cf:46:a7:d8:6d:e9:08:0e:f4:
8f:b3:45:df:46:7b:1e:00:1c:83:72:c0:b2:5f:54:
6f:d9:d9:cd:0c:50:f0:dd:ef:e6:49:a8:92:f1:c1:
d9:4a:2b:65:bb:1c:82:85:74:f2:fa:72:67:bd:d7:
3e:bb:4a:8a:dc:26:3f:02:c1:d6:4f:bd:65:02:75:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2B:3B:8F:2F:42:3D:A5:88:6E:38:02:57:F3:C1:13:B1:D8:E8:19
X509v3 Authority Key Identifier:
keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:12:f7:c6:ae:ab:16:06:18:8d:2e:f6:88:24:66:26:ef:0e:
5a:90:4e:72:69:8f:2d:bf:b4:82:fe:b9:ff:ed:4b:ee:ba:d5:
2a:28:48:0e:3d:d6:d3:0c:8f:4b:be:bc:86:ad:a8:7a:38:7f:
98:2d:06:c9:7a:67:17:3f:93:48:0c:4a:a8:a7:cd:dc:c7:c6:
dc:3f:8e:01:ae:c9:d6:fa:95:07:26:cc:75:bf:f1:55:45:ef:
e5:be:cb:a6:64:51:bb:cb:59:9d:7a:22:37:f0:a3:f8:2b:6f:
d6:ad:9d:a5:6d:3e:43:8d:04:e5:07:cd:73:eb:c9:e6:0c:e0:
35:cd:02:2e:d0:e5:36:90:86:fc:ab:93:70:89:a3:fc:92:07:
6f:f8:f7:61:97:3e:e5:f9:7e:08:26:74:44:2c:1e:d6:6c:e2:
90:38:9f:4d:94:09:50:5b:7a:34:52:51:36:3f:1c:d8:b3:58:
87:51:61:a9:83:20:4a:93:70:60:cc:07:ea:70:46:9f:00:41:
06:e9:b2:a4:31:0d:b5:a7:96:cf:dc:ff:27:b8:bb:1a:d1:a4:
4e:d8:61:68:ee:5c:6f:34:00:1d:8c:b8:5d:95:90:a0:d5:b2:
77:10:cb:b6:6b:27:1d:43:d2:4f:88:21:4a:7c:65:6a:5e:d6:
1c:26:c8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:15:44 2026 by rpki-client