This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft
File: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft (raw, json)
Hash identifier: y/PUq18MItocubZER0AqN9CpmR2aZ7oWbMPq4w8MRdE=
Subject key identifier: D5:E4:F0:45:05:79:41:7B:9C:CC:F6:A1:04:2E:8B:7A:15:60:DF:09
Authority key identifier: A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38
Certificate issuer: /CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38
Certificate serial: 027F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft
Manifest number: 0277
Signing time: Sun 25 Jan 2026 00:45:39 +0000
Manifest this update: Sun 25 Jan 2026 00:45:39 +0000
Manifest next update: Sun 01 Feb 2026 00:45:39 +0000
Files and hashes: 1: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl (hash: F3CpwY3iR2R/19/xpgc5YIH6xWcJrrRpPv4ImSrW9C8=)
2: A4E607B6B1C511EDA095B220C4F9AE02.roa (hash: s2xiERilHniPBU7K3pocYPgUsyBChLVZ5wfF7MhAq8U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl
rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8475, serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38
Validity
Not Before: Jan 25 00:45:39 2026 GMT
Not After : Feb 1 00:45:39 2026 GMT
Subject: CN=697567b3-90ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:80:1a:cc:14:c9:ce:89:cb:8c:b4:d1:da:80:
22:e3:f0:dd:f9:27:99:75:c1:c9:e9:ff:ec:d0:6d:
bc:d0:5a:e0:7d:29:1b:4a:19:a0:a7:1f:30:1e:e2:
c5:51:cb:27:e3:82:8f:30:e7:09:63:e7:2b:07:a2:
d9:43:db:ed:fe:fb:8d:67:98:3c:dd:5f:03:c0:5f:
4a:98:1b:f2:21:7c:e7:10:c9:a0:8b:23:4d:74:b5:
08:de:2c:0a:e2:43:bd:70:86:a1:b8:b9:57:2f:f1:
a2:da:27:02:c6:d6:10:15:35:8e:f4:1a:1e:3f:99:
be:8a:0a:f4:14:32:6a:64:95:40:1a:fa:d9:4e:7f:
3d:59:ab:c1:1a:5d:c8:32:b5:17:fc:b7:de:18:f0:
30:1c:8a:62:74:f5:31:c3:f7:79:3c:98:46:ba:95:
49:db:2e:67:0d:02:f3:0d:af:5d:76:5d:25:b3:82:
16:39:21:93:79:91:47:43:a3:70:55:ab:ac:15:dc:
0e:59:21:26:45:c9:70:60:4d:e5:76:48:4d:20:3d:
2a:b2:da:60:76:4b:35:d0:58:ba:6d:f5:e5:64:ca:
dd:3f:fa:dc:b7:24:99:54:a9:66:74:6f:50:57:45:
8f:39:d5:9e:f7:7e:0b:79:b5:cc:8a:de:2c:db:dc:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E4:F0:45:05:79:41:7B:9C:CC:F6:A1:04:2E:8B:7A:15:60:DF:09
X509v3 Authority Key Identifier:
keyid:A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:5a:fa:31:58:ba:c1:1c:5c:b8:5d:4a:df:61:21:b7:f3:87:
5a:ca:6d:fa:fd:81:4d:0e:0e:8f:7b:f5:61:df:40:f9:d9:0c:
56:14:63:2b:52:f4:1e:4f:52:02:e6:f2:ba:3d:13:dc:1c:b1:
e8:a2:85:24:c2:8b:13:0a:d2:b7:95:22:fd:74:0d:c6:b0:6d:
b0:23:06:e4:87:4d:02:a3:3d:7b:49:b5:d3:d9:f0:2e:85:5c:
5d:19:cf:b7:ac:cb:32:0e:76:f9:d8:68:fb:89:87:8d:ec:f1:
92:63:c4:5c:e5:5b:10:0d:80:49:c3:a5:d7:d8:22:e1:01:58:
c7:97:05:b7:c9:b4:10:46:6e:1d:8c:b3:99:04:c9:2d:9b:9b:
89:b2:38:26:99:f0:26:7a:f1:f6:d1:f7:b7:21:d4:cd:ff:2b:
47:b5:9e:29:50:26:4b:98:6d:27:4a:ce:04:3a:1e:c8:73:5f:
72:85:8c:ae:bb:90:32:ab:dc:17:ff:22:e5:42:22:70:9a:59:
e1:e1:75:db:2e:37:4d:7e:d9:6a:31:1e:09:49:fe:0c:85:03:
e6:c5:cc:58:f6:73:03:76:98:12:ea:db:93:a3:71:72:8e:9f:
c7:f9:de:2b:60:76:8a:cc:94:8d:36:43:ce:7f:f8:a7:98:bd:
62:2a:79:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:48 2026 by rpki-client