This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json)
Hash identifier: oem6g+AFdMiEIZnl9GhyidA+iQQ2bcTTSofbo7EPUDg=
Subject key identifier: BE:08:9A:51:D1:85:2B:50:F1:83:AF:0E:BC:F1:C0:C2:2D:2A:1E:E3
Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60
Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160
Certificate serial: 077F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
Manifest number: 077F
Signing time: Sat 24 Jan 2026 19:48:30 +0000
Manifest this update: Sat 24 Jan 2026 19:48:30 +0000
Manifest next update: Sat 31 Jan 2026 19:48:30 +0000
Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: UAXrv2hwY+os6EL03zdg2hCBtk1t7dVQatpwCPv3Crk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl
rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919 (0x77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160
Validity
Not Before: Jan 24 19:48:30 2026 GMT
Not After : Jan 31 19:48:30 2026 GMT
Subject: CN=6975220e-d783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:e3:35:81:49:94:b9:ba:08:1b:9a:3c:b2:
73:71:37:b1:ea:03:36:40:01:7f:6b:48:ab:db:0f:
bc:d3:a3:ba:1e:fb:29:ac:56:a8:0c:69:78:aa:dc:
8c:af:4a:7b:c9:70:48:74:f6:bc:1a:fd:e1:d6:b0:
c7:3d:1b:08:21:35:63:1a:e3:62:26:6a:f2:18:06:
f7:27:fa:15:97:34:fe:0e:03:eb:ca:d7:2d:55:6f:
d8:99:1d:7d:05:b1:67:23:52:f2:11:40:16:03:07:
e1:27:8f:be:de:8b:b1:17:68:7a:16:e1:f4:02:26:
3d:af:69:11:46:10:6c:a8:29:80:34:99:54:a1:da:
b3:ab:15:b9:20:6f:cb:1f:b4:f7:02:02:81:97:74:
26:33:84:7e:b2:47:10:e2:4f:40:d7:b5:19:3b:53:
36:b6:2e:9f:86:88:1d:b2:51:ac:1d:2e:29:c3:43:
ce:5e:cc:ff:26:17:49:1f:2e:e2:02:63:72:25:44:
90:69:c1:df:0a:c6:bc:ba:33:43:d1:e4:e8:b7:7a:
18:f7:a7:8c:f9:48:2a:51:40:8a:8e:25:db:ac:ec:
6b:3d:98:4a:c3:b9:b5:81:54:4c:35:40:61:2e:b3:
6b:2b:71:a4:9d:8e:fc:15:ea:71:e7:07:5f:70:e5:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:08:9A:51:D1:85:2B:50:F1:83:AF:0E:BC:F1:C0:C2:2D:2A:1E:E3
X509v3 Authority Key Identifier:
keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d5:4c:e5:4d:e9:40:e0:c8:0e:d9:fe:83:c1:05:ee:44:6b:
a1:bb:a8:c2:95:84:b1:cc:e0:17:79:a4:85:d2:09:91:88:a2:
25:c8:93:d5:c1:59:ca:21:b9:7a:28:70:53:b0:d2:69:6e:87:
5f:e0:26:40:00:06:9a:0c:49:55:26:aa:b2:c9:67:ae:9c:72:
45:a0:2d:77:64:a9:7b:f5:b9:7e:56:d7:91:94:67:d2:97:0f:
8b:e7:0d:1a:03:8c:cc:98:02:c9:b0:82:76:54:a3:32:fe:74:
c9:a4:e3:f0:a5:b0:6f:32:80:c1:5b:ae:22:10:3b:de:4a:4d:
81:72:65:fb:4c:d4:bd:7d:6b:cc:52:7f:41:bb:d2:61:e8:43:
ae:a9:9c:74:41:34:6e:4b:40:13:c9:0e:bb:ed:f2:be:8e:d3:
67:3e:f4:b3:60:f8:f1:73:58:7f:89:49:84:e4:85:f5:fb:14:
79:bf:dc:68:52:b2:c0:70:2d:4b:4f:57:cf:66:07:25:9e:5f:
f1:fd:40:8c:1c:49:52:b6:ff:c6:f6:8e:5e:d1:6e:ce:e4:9a:
aa:24:88:31:95:80:57:98:e8:46:6b:44:47:5e:eb:96:72:09:
eb:1b:b2:b6:be:d6:59:90:d4:d7:fe:1f:fb:ed:3a:02:d8:ba:
74:9a:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:16:44 2026 by rpki-client