This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
File: 7JW4qElym6bvhCxjcarUrH2PIfc.mft (raw, json)
Hash identifier: uR2+HiiZIPHDqWv23nFLrt59pWl7IrZWtYvVi1MmAQg=
Subject key identifier: E3:F6:43:2E:BC:C5:2F:D9:4E:DE:3D:11:B0:E7:21:51:3F:04:77:51
Authority key identifier: EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7
Certificate issuer: /CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7
Certificate serial: 337F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
Manifest number: 3CF8
Signing time: Sat 24 Jan 2026 15:13:11 +0000
Manifest this update: Sat 24 Jan 2026 15:13:11 +0000
Manifest next update: Sat 31 Jan 2026 15:13:11 +0000
Files and hashes: 1: 7JW4qElym6bvhCxjcarUrH2PIfc.crl (hash: qAWAUhXF4Yn/7n7dl0cVDBkUkUwPZUnePBS6lwh15vY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl
rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13183 (0x337f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A759F, serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7
Validity
Not Before: Jan 24 15:13:11 2026 GMT
Not After : Jan 31 15:13:11 2026 GMT
Subject: CN=6974e187-c1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:36:b2:61:80:14:af:51:73:b2:46:fd:a2:
db:d5:61:d5:f0:e0:28:87:51:68:b5:1b:49:94:35:
b3:1a:7e:f5:23:15:21:f4:b1:2d:ec:f9:55:fc:4d:
fa:c4:08:63:8b:e0:ff:c8:18:0c:96:3f:9f:04:b1:
4e:3b:02:8b:60:32:8c:18:13:3f:74:ca:4d:77:a0:
5f:3f:03:cb:1d:f4:9f:3b:0f:38:1d:47:d9:bc:fc:
35:fa:19:e8:e8:23:aa:9f:e6:c1:47:b2:66:7a:3b:
ea:1e:e7:97:a9:45:bf:23:b1:82:b2:2b:c2:85:d4:
3f:3e:89:f1:5a:ec:74:d6:63:a1:a1:f3:94:d0:67:
ea:b2:2d:12:05:a9:e6:1e:ab:b1:b2:e5:68:4f:d1:
2d:75:98:60:0c:6f:3f:56:94:d0:d9:05:76:6b:31:
c6:27:35:a6:18:67:a2:15:df:59:fe:f3:2b:b0:df:
1b:d7:b7:aa:ec:6b:91:d0:d0:2b:09:0e:e1:84:0b:
a7:e0:d5:a1:12:ef:66:75:c7:be:1f:46:e4:a9:d0:
ae:99:64:6d:d2:de:b3:2e:b8:a1:45:48:35:68:ea:
26:44:2e:3a:bc:f0:15:05:29:18:2f:93:d9:46:d2:
35:8d:2f:c4:6c:d3:cd:a4:02:7c:4e:bf:25:f7:96:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F6:43:2E:BC:C5:2F:D9:4E:DE:3D:11:B0:E7:21:51:3F:04:77:51
X509v3 Authority Key Identifier:
keyid:EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:39:f8:2e:f8:e2:f4:a0:97:ae:3e:74:2b:af:9f:76:25:29:
b5:3b:47:dd:fb:12:81:95:08:de:aa:81:5b:b5:4d:7c:2f:37:
e7:d7:c2:76:3d:41:b9:c5:43:89:82:50:7b:1b:30:12:72:df:
bd:54:43:d2:c7:ff:61:bd:00:68:26:7e:db:e3:43:e5:ec:17:
80:cc:53:14:a5:ca:0d:26:1e:f5:a7:78:00:88:55:2c:2e:33:
11:27:4e:5d:21:f2:a7:f9:dd:a0:06:fb:74:09:14:b5:05:b8:
e2:71:06:17:0b:5d:a3:74:40:aa:4e:f7:b5:b6:18:57:b3:3b:
95:8a:1e:f8:4b:11:87:43:ed:43:d6:8d:70:e6:a8:2a:76:ad:
7b:73:ba:34:d6:60:32:5f:73:b4:3c:74:f2:34:d4:8e:48:3d:
98:01:0f:f4:a4:10:ee:f4:01:0e:13:86:21:44:be:4c:79:50:
fc:bd:cb:b6:67:e0:62:13:94:66:6b:f3:8d:5a:85:f9:39:1a:
5c:fc:4e:39:fe:bc:0a:cd:00:c9:b2:ea:9f:3b:9f:ed:ca:12:
8a:2a:c5:f0:31:bb:d0:52:69:d1:15:86:64:87:91:13:1e:02:
40:a1:e1:cc:cc:18:76:6c:93:06:be:fb:2c:15:fa:34:9e:2f:
6c:6a:bb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:11 2026 by rpki-client