This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json)
Hash identifier: eYxFXKAiZds7wjwGqqHeacz9FTwUTH56Nfp4bgdBwOM=
Subject key identifier: BD:72:A1:4E:64:4C:A0:68:17:3A:59:70:AE:89:46:60:9A:E1:B8:2C
Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE
Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE
Certificate serial: 3537
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
Manifest number: 351F
Signing time: Sat 24 Jan 2026 15:05:26 +0000
Manifest this update: Sat 24 Jan 2026 15:05:25 +0000
Manifest next update: Sat 31 Jan 2026 15:05:25 +0000
Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: VhwASvO3McZhjnyI0DtdsAj9F4QbZass6BcJt5LZc2s=)
2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: jqlRAPGaEdmIwhXKVlJXO3tWNtos7YAe+HUzS0naVT0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl
rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13623 (0x3537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB, serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE
Validity
Not Before: Jan 24 15:05:25 2026 GMT
Not After : Jan 31 15:05:25 2026 GMT
Subject: CN=6974dfb5-5bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:39:15:b9:8c:62:01:c3:16:d0:eb:e3:02:b7:
6d:58:e0:5f:57:a8:65:36:c1:27:de:e1:98:53:66:
02:8e:9d:0a:4f:d8:96:54:67:f9:a8:d0:5a:f4:e2:
1e:c3:54:39:58:89:29:61:46:e3:0d:14:72:1f:a5:
e9:c7:79:86:5c:98:81:bd:9a:29:3c:7b:e3:ec:c7:
13:cb:8d:a9:85:81:43:8c:23:b4:4b:91:08:38:7f:
aa:fd:a2:51:45:39:cd:0f:13:4a:5f:c4:d9:8c:a5:
9b:88:c8:d5:39:2d:2b:b7:ba:5d:37:fd:65:d0:58:
e7:7b:b7:4f:86:0c:05:df:c0:ec:56:ea:6b:15:37:
09:85:77:24:4f:14:ff:5b:f0:f4:9a:cb:c1:8d:ae:
79:e5:0a:42:2f:a9:2e:20:6e:4b:38:ae:b8:89:86:
9c:d2:14:31:6c:f7:0e:a3:00:bb:79:ed:7f:fd:0b:
96:9d:81:08:ae:ce:7d:97:70:4b:0a:96:db:54:be:
61:32:b6:f0:c0:37:7f:a4:22:e7:05:6e:a9:8d:91:
6b:1d:f0:44:2b:52:1c:ba:61:02:96:8d:51:29:4a:
68:5b:42:d3:9f:b4:35:6d:25:2f:42:c0:3d:70:c6:
21:9a:39:27:c0:ea:4c:51:d2:24:68:bf:bb:46:e0:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:72:A1:4E:64:4C:A0:68:17:3A:59:70:AE:89:46:60:9A:E1:B8:2C
X509v3 Authority Key Identifier:
keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:16:ff:e8:93:63:6e:51:04:3a:40:c5:34:9e:cd:66:b8:c1:
4a:e5:37:c9:20:7a:9b:3f:77:f3:6c:d8:20:93:57:be:6a:f5:
48:cf:fa:2b:91:b2:84:a7:bd:86:46:a5:7e:8b:ff:09:8a:c6:
ee:4d:94:b2:18:ec:7c:c9:9a:b4:6a:75:c7:d6:ad:4b:9f:6d:
10:4f:93:e5:d4:42:36:0a:8c:0c:f9:81:a6:1b:9a:b0:fb:70:
e3:e9:d4:ac:44:3f:8f:da:79:7d:e2:ee:64:fb:43:98:1d:6b:
eb:9a:4f:e7:70:d2:05:ed:da:74:94:69:1f:7c:af:7c:eb:1e:
f0:c1:6b:e4:fe:a6:ae:48:f1:55:53:e3:f1:97:d1:40:3c:d4:
4c:4f:b3:a1:e7:3f:bf:62:32:17:47:da:0e:94:b6:09:a6:0a:
b9:0c:fa:b7:9b:b1:7b:4a:d4:d3:d0:7e:a2:01:55:42:84:f3:
bc:a4:b3:9d:7e:3f:6d:75:50:1e:21:70:3a:3f:90:d2:aa:10:
e0:0a:29:6f:77:5c:aa:d5:38:39:2a:14:7d:27:30:2e:a4:42:
8e:b7:3c:f8:c2:fb:95:57:ea:22:17:a7:47:88:87:60:4b:7c:
95:19:33:94:f2:4c:db:e8:c0:6d:45:d4:b0:de:ed:0a:2e:ea:
48:7b:ae:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:40 2026 by rpki-client