This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File: mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier: sBPDf9UwY8k2lP2ZjxRaK+FHXuMo5xZ6XS4VMJfVuo4=
Subject key identifier: B7:C1:D3:AD:8E:1A:49:10:79:CB:4C:82:46:B3:66:07:3F:68:31:11
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number: 0253
Signing time: Sat 24 Jan 2026 15:52:30 +0000
Manifest this update: Sat 24 Jan 2026 15:52:29 +0000
Manifest next update: Sat 31 Jan 2026 15:52:29 +0000
Files and hashes: 1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: 7TEPS1YhdyXDtA7QUIUq1A12PCmWX+wgjSjh01jE8fg=)
2: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: DDQFrWham/U59GyXcADDkISHhTPDVVw43nsQI5/mJPk=)
3: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: QOYUSMPGM1+90C8A1BEomdU9Hz2wdTfmlCl8DZMPUHE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:52:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Validity
Not Before: Jan 24 15:52:29 2026 GMT
Not After : Jan 31 15:52:29 2026 GMT
Subject: CN=6974eabe-c8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:08:07:d9:0a:9d:92:04:05:f3:b8:67:79:
26:9f:aa:78:f3:2a:8f:ce:78:c4:ad:c0:e8:bb:4d:
0b:20:76:50:9c:f0:88:e3:f8:19:86:5f:7b:1e:55:
f9:86:bf:f2:f9:77:77:67:f1:cc:f3:0e:3a:1d:55:
b5:f0:ca:c6:95:a8:32:70:ab:e3:56:03:24:99:9f:
89:db:56:9a:f2:f3:ab:95:23:2b:82:d5:b5:3a:9f:
f5:74:a8:95:f6:58:c8:02:fc:07:7f:e7:ed:c6:60:
cb:60:e6:6b:a2:c7:63:b4:25:f6:3b:68:fe:32:1f:
f3:4c:8e:73:a2:13:b3:08:29:35:91:7b:90:5e:7f:
21:8c:18:95:33:a8:de:47:2c:6a:bf:91:77:37:e3:
ef:00:68:57:84:0c:ed:53:0c:ae:f2:ad:30:b5:d7:
86:bd:fb:4e:d3:ec:ab:7f:c9:4c:a7:fa:6a:d3:49:
d0:dd:50:b6:23:4e:84:cf:c3:88:de:65:8f:1f:f2:
7e:c0:f2:bc:dc:50:48:3f:60:cb:01:46:2c:20:59:
2f:e1:af:5b:80:92:f1:0c:3b:49:69:fc:2f:49:a4:
48:07:87:fc:1a:11:a7:24:51:ec:ca:eb:ed:5e:60:
3e:96:99:37:88:9f:48:dd:4a:4d:e7:aa:09:ab:41:
65:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C1:D3:AD:8E:1A:49:10:79:CB:4C:82:46:B3:66:07:3F:68:31:11
X509v3 Authority Key Identifier:
keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:2e:94:5c:81:47:2a:fa:ea:97:45:df:3b:36:11:2b:61:d1:
6a:1e:d8:84:28:ef:07:34:f0:29:82:d0:88:2b:3b:e6:fb:66:
99:63:be:2b:5b:6f:21:1d:67:a7:d1:6f:ce:a9:47:5a:8f:6d:
31:84:7f:54:d7:4f:f6:22:ee:7e:47:4f:4b:66:7f:9d:02:82:
f4:7b:79:e2:68:20:23:90:f4:1a:22:1d:fc:91:21:40:7a:dc:
c5:e2:6d:9a:7d:bf:a3:dd:f9:ca:52:41:80:b0:55:4d:44:f0:
9c:2d:d6:1a:fd:18:91:40:54:7e:9e:5c:7c:ab:ce:86:fe:7f:
90:d7:25:2a:0b:cd:e4:2f:09:17:5f:65:2c:6d:f6:f9:3b:5b:
a9:7f:85:57:05:ff:57:eb:0f:7a:05:6f:c9:04:a2:b1:d8:2e:
fd:16:88:0c:7d:36:9d:09:d2:a1:21:89:12:c2:09:db:6c:c0:
58:b6:b1:37:05:8d:40:2c:b2:e4:0e:80:e0:10:07:ba:93:aa:
a9:01:71:0d:57:33:44:25:4a:9e:78:06:cf:59:41:2b:d0:03:
6d:8b:eb:51:0a:fb:e5:c2:51:b7:f0:80:21:95:65:af:17:e7:
b2:6d:32:a5:08:7a:83:e0:c9:d6:26:50:06:f0:ac:0b:af:59:
37:e0:3c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:06:25 2026 by rpki-client