This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
File: e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json)
Hash identifier: nWQu//NBu+gV/xaUjf31TpEV9LTTMWnKuSmfpIarI+8=
Subject key identifier: A6:03:0E:5E:56:CA:89:4B:D7:03:13:C8:AE:B8:9E:B9:A2:0A:B3:C2
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial: 0D4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
Manifest number: 0D2C
Signing time: Sat 24 Jan 2026 17:42:40 +0000
Manifest this update: Sat 24 Jan 2026 17:42:39 +0000
Manifest next update: Sat 31 Jan 2026 17:42:39 +0000
Files and hashes: 1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: Xemv/uVaxzFsLhyn6oZ3Jc2+dDM2haZxs/gROZtzNXQ=)
2: 98FA03FEF12211F0824B03824F6F56BC.roa (hash: syNViiddPgrptztOQW5Hcm1aP4N7pLsbiDy/2S6U/sk=)
3: D5FC2548F12211F0893A96874F6F56BC.roa (hash: DJXeKuUrBY1SuvYwb/SyM3yjoegdqn5cNt5Q57FPwrA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3404 (0xd4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Validity
Not Before: Jan 24 17:42:39 2026 GMT
Not After : Jan 31 17:42:39 2026 GMT
Subject: CN=6975048f-2b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:14:69:f0:d9:0d:e2:c4:02:22:7a:45:24:
4a:22:21:c1:66:bc:92:f6:b8:95:f6:1a:7e:1b:60:
b0:e5:08:c0:e0:57:5f:e3:48:16:7c:b4:6e:92:47:
ff:54:68:3e:f2:96:8a:c2:27:06:8a:f2:1a:64:c4:
5e:46:0b:7e:76:09:36:d1:79:32:d5:a7:c6:d9:49:
31:51:2a:58:ee:c5:36:b2:05:c0:84:c4:8e:ab:ca:
c4:e1:99:a6:22:91:ea:3f:1b:a8:09:4e:01:70:00:
51:bd:70:28:db:31:c1:14:db:3f:4a:5b:dd:86:ff:
5d:0f:23:61:db:5f:e1:c6:a0:fc:3f:9a:cb:33:54:
25:17:b6:e4:19:47:5a:04:2b:85:75:b9:a0:6e:d4:
cf:71:3f:b5:de:c0:b7:42:ce:80:86:c5:51:81:f5:
11:49:d7:3c:d7:6d:f4:4f:78:51:ea:ea:27:91:b4:
3d:0a:82:03:67:f9:da:87:3f:1e:77:1b:52:c2:c0:
14:c4:e4:2e:a0:70:1c:ca:39:77:1a:f4:0e:fa:71:
42:0b:e4:00:98:0b:62:61:63:72:bf:91:c7:be:14:
8c:f0:d6:75:e2:67:f1:fe:5e:00:4b:aa:98:2b:16:
4d:3a:82:06:c2:51:4b:c5:60:77:ba:5f:19:90:5c:
5f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:03:0E:5E:56:CA:89:4B:D7:03:13:C8:AE:B8:9E:B9:A2:0A:B3:C2
X509v3 Authority Key Identifier:
keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:87:a1:a9:06:75:59:fb:da:ec:2a:2d:01:aa:ee:5d:b5:60:
9c:2e:33:b7:94:32:11:ac:02:92:cb:c5:6b:71:de:c9:97:01:
f5:70:92:34:3c:ea:8b:09:68:b4:e4:ff:98:14:ee:e5:81:f8:
b9:d9:00:8a:b8:fb:08:b9:f3:29:96:30:e0:f2:5c:ff:83:ef:
8c:26:3b:2a:ab:22:d9:8f:4d:45:5b:6b:ed:a7:4e:d4:1e:06:
0c:5c:dd:7d:ff:78:48:70:0c:e5:7d:0e:1e:b8:45:c4:bf:9a:
bf:43:5b:8d:df:90:15:e5:0b:f3:32:90:5f:e5:0e:7d:7e:ef:
8a:4e:29:b8:0d:08:e2:4b:2b:d5:a6:39:7a:0a:56:dc:07:23:
6d:85:41:42:f4:08:f8:52:da:0b:a9:25:92:b2:91:a2:fa:0f:
22:41:4a:7a:e1:8f:5a:27:f0:bb:40:cb:4a:eb:fc:b9:14:ed:
71:aa:43:87:b6:6b:e8:60:72:96:08:9d:0e:5f:fc:92:fa:3d:
7d:77:6a:95:3e:b8:ee:e8:28:4c:b6:fe:a2:5c:72:4e:9c:4a:
78:7c:53:d8:1a:32:c5:83:de:20:19:19:45:c2:d8:c9:ef:d7:
87:c1:f4:fe:74:42:72:9a:fd:f5:10:a0:96:b5:00:49:d7:e5:
c2:b4:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:01 2026 by rpki-client