This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
File: c27zV-8j8z6sB7J06l4_7A3-5Yo.mft (raw, json)
Hash identifier: hX4Rxqgbk23ZdJjQmTdeuw7JBvY/jDloX5jaqkVmqok=
Subject key identifier: 9B:B4:59:FF:EF:4E:C8:F9:46:B1:13:9A:43:48:48:F5:EC:8B:0A:33
Authority key identifier: 73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A
Certificate issuer: /CN=A91A4ACD/serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
Manifest number: 21
Signing time: Sun 25 Jan 2026 06:52:24 +0000
Manifest this update: Sun 25 Jan 2026 06:52:24 +0000
Manifest next update: Sun 01 Feb 2026 06:52:24 +0000
Files and hashes: 1: c27zV-8j8z6sB7J06l4_7A3-5Yo.crl (hash: bUlkbG5rFqMp4N4Uu+ci0rxwam/ifWcxEmDysrpW+Gw=)
2: B2A566E2CB9B11F0A4EC673AC4F9AE02.roa (hash: BhWD1D5F6AoX/OQx6FffsVqmMuMl5MOwH+BY0j+gdT0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.crl
rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4ACD, serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A
Validity
Not Before: Jan 25 06:52:24 2026 GMT
Not After : Feb 1 06:52:24 2026 GMT
Subject: CN=6975bda8-c9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e9:bb:e7:2b:4e:61:cd:20:b9:6c:43:6c:d5:
b9:c1:d3:b0:d4:68:4c:9f:88:b1:fe:6f:6f:9f:90:
19:b9:7a:09:18:e2:04:b3:5c:6a:23:ff:b5:0a:67:
cb:02:41:68:e7:85:e3:f4:16:df:e0:74:04:c1:7a:
d3:66:57:26:ac:9a:44:8b:d3:92:5b:60:c1:1b:c7:
e1:3b:aa:82:fe:0b:a0:d0:da:70:6d:2d:2e:38:01:
2e:6d:00:55:23:5b:6a:c1:74:13:bd:53:c8:26:c7:
a8:83:cc:b3:fd:c4:0a:34:48:a4:d5:58:04:69:c9:
16:4b:bb:d5:a6:00:bd:b7:d2:1b:60:39:88:7a:e0:
a6:c6:f8:34:13:61:4d:c5:f1:52:c9:cf:7e:2c:89:
63:68:72:3d:db:27:a5:35:30:08:cf:ed:55:cd:83:
b8:59:1f:cd:f0:40:77:92:dd:ee:3c:55:9a:5e:bb:
d4:52:14:e8:96:3a:92:56:b4:6d:51:9f:63:74:fa:
96:f3:4c:be:e7:eb:a3:35:c5:1b:83:fb:da:0e:54:
b5:8a:51:2d:bf:92:56:4c:ac:f0:24:4a:95:2c:48:
b6:df:97:36:55:0f:15:36:51:b8:e6:5f:6e:00:bf:
c7:68:12:f1:7d:c2:ce:35:6f:3f:ba:b6:35:ce:fe:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B4:59:FF:EF:4E:C8:F9:46:B1:13:9A:43:48:48:F5:EC:8B:0A:33
X509v3 Authority Key Identifier:
keyid:73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6e:cf:0f:57:2f:aa:44:5e:b9:42:07:dd:d2:3a:cc:ad:ae:
e1:fb:b8:5e:12:5b:73:32:f0:8d:72:74:1e:a6:ee:57:6c:5a:
d1:a7:5f:30:ec:f6:df:80:76:7f:6b:cc:ed:54:c8:d5:5f:ff:
aa:7d:33:4e:d4:97:f6:5d:b0:b9:86:2e:b6:3e:66:99:3a:6b:
10:93:5d:0a:13:ff:e1:86:4c:da:54:85:a3:a7:5f:33:dc:f8:
82:d9:fa:8e:f1:04:51:97:6f:42:06:ef:02:39:67:03:75:59:
e6:13:97:b4:70:3b:42:d1:d8:97:e5:8f:b7:7c:84:c1:8b:af:
36:f7:a5:e6:23:bb:aa:15:63:4f:a4:f0:3c:2d:c8:52:59:f0:
6c:3b:3f:a5:53:95:fb:06:55:22:5e:48:c0:a7:06:2e:95:51:
e4:93:fc:06:2a:07:2b:83:b5:e2:a3:f7:55:c6:78:48:b6:e9:
b2:ec:92:8f:99:46:8d:e7:4d:90:ca:a4:7a:be:49:bb:43:d0:
db:27:6d:80:4b:d4:01:4c:7a:59:93:61:d6:4a:0e:e4:3c:a1:
e0:9d:c2:52:5f:53:ef:e3:bb:f3:73:f2:c8:2a:cf:74:fe:47:
f7:c6:5a:7d:ee:30:d8:f5:45:bf:6a:de:44:e2:ae:67:58:c6:
d7:bd:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:39:09 2026 by rpki-client