This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
File: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json)
Hash identifier: /54In+BfbVeTSlnmUAlu4TkjKU930omH3x06oR74Ugo=
Subject key identifier: 74:A3:06:01:1A:59:68:64:15:AC:80:EF:1A:60:81:46:85:83:80:51
Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D
Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
Manifest number: 016C
Signing time: Sun 25 Jan 2026 03:10:57 +0000
Manifest this update: Sun 25 Jan 2026 03:10:57 +0000
Manifest next update: Sun 01 Feb 2026 03:10:57 +0000
Files and hashes: 1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: vygC0Q8T0eCib1/b7Uh4GI669vnlNeCBOnbW+9R87x4=)
2: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: u6J6SPSNjElCImZDre2hX9rdBiRV9plYfnlpPbtxhQc=)
3: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: hR3HemTX8sPR//njNhfSediG0DqzFMWVKhRmgOL4nRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl
rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9, serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D
Validity
Not Before: Jan 25 03:10:57 2026 GMT
Not After : Feb 1 03:10:57 2026 GMT
Subject: CN=697589c1-4aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9e:3a:65:e1:c5:47:88:fd:3c:bf:54:60:2a:
04:b1:9a:20:67:41:f4:58:0f:17:41:74:c1:67:3e:
8d:4d:e8:2e:b8:51:9b:17:df:49:90:77:ae:f4:e9:
50:9b:6e:3f:42:19:c3:b3:13:d8:bf:28:84:5a:28:
90:5b:95:3b:e6:48:0e:e4:31:8f:be:31:64:9c:13:
70:de:ce:8d:d8:1e:66:99:ad:52:a1:f9:71:1d:c0:
4f:cc:77:f1:f4:24:40:85:51:a3:22:16:40:47:34:
5f:19:9f:7a:8a:72:f7:64:14:bd:83:dd:ca:9d:f5:
e9:ba:21:44:59:0f:22:c2:9d:2d:15:f8:53:46:df:
74:9f:47:a9:51:5c:ac:80:46:56:97:3d:9e:79:a3:
73:60:a4:f1:7e:e2:7f:2f:44:c8:fe:d0:5d:24:29:
ce:a1:ef:ca:be:e2:30:4e:19:e7:e1:02:ec:1a:64:
a5:8a:5d:a3:84:3c:1a:85:af:d5:fa:11:cc:f9:fd:
40:5b:81:c3:9b:36:0d:d6:83:27:94:88:8e:0d:ab:
5a:55:05:49:ce:a7:76:31:fb:99:c6:20:62:c4:f4:
9a:dc:f8:3d:c6:da:b8:a6:3d:ad:46:92:c2:98:35:
68:6a:09:a8:22:c8:3c:72:7c:cd:c1:fc:8d:88:62:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A3:06:01:1A:59:68:64:15:AC:80:EF:1A:60:81:46:85:83:80:51
X509v3 Authority Key Identifier:
keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:6c:a8:c1:a7:c1:5c:65:83:87:e6:30:d0:57:33:18:d3:6c:
eb:17:5c:66:dc:f5:f2:e8:a7:15:c4:64:f7:fe:27:99:56:63:
55:2a:17:3f:aa:d5:ed:92:b3:34:0f:89:da:d2:c2:8f:62:3d:
53:35:e0:50:9a:5e:1b:ae:73:78:23:21:a0:46:e2:72:80:63:
16:25:72:41:f2:1b:d3:de:be:a5:25:3d:9f:21:3d:26:57:75:
7e:75:9a:f9:0c:38:91:53:af:1f:a3:b5:31:33:b5:09:94:aa:
7b:43:1e:24:fe:38:66:23:15:e5:fd:b6:2c:57:f7:c3:0c:c9:
ee:06:19:0e:4f:4c:11:30:af:ec:52:73:08:39:4f:8b:27:d3:
56:1e:40:7b:fe:6b:4a:7e:7c:db:03:82:27:7c:7b:de:34:3f:
db:0c:65:35:6c:51:f5:d4:a0:cc:06:cb:d2:13:d6:4d:ce:03:
a5:8e:ea:37:b5:ea:87:96:40:79:50:cb:59:47:0c:07:2b:ab:
06:bc:06:5a:76:f1:fa:c4:66:28:b5:44:87:cd:dc:54:a7:98:
54:21:08:63:84:c6:5e:05:7c:51:74:06:a8:39:0b:75:13:fb:
b3:13:22:50:0f:08:c6:95:d4:a3:bc:7c:16:d7:ec:09:6c:e3:
fe:7d:f3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:29 2026 by rpki-client