This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft
File: rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft (raw, json)
Hash identifier: LJxoVLKQs+mysAf6WDpRNQ8ruPJfaPJWlTcOqe5dpJE=
Subject key identifier: 6A:21:4E:76:CF:08:59:C3:24:16:1C:3B:A7:3C:37:AF:62:CD:C4:27
Authority key identifier: AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0
Certificate issuer: /CN=A91A95AB/serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0
Certificate serial: 3515
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft
Manifest number: 3DD5
Signing time: Sat 24 Jan 2026 15:05:37 +0000
Manifest this update: Sat 24 Jan 2026 15:05:36 +0000
Manifest next update: Sat 31 Jan 2026 15:05:36 +0000
Files and hashes: 1: rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl (hash: dJQDGsGQXwP+Lvg4NmM5io6S36iCyztWzJs7MQpMehA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl
rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13589 (0x3515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A95AB, serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0
Validity
Not Before: Jan 24 15:05:36 2026 GMT
Not After : Jan 31 15:05:36 2026 GMT
Subject: CN=6974dfc1-45f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:c1:6a:c9:10:86:1e:ac:14:55:dd:d5:e7:
37:93:41:11:d6:ac:5e:87:a6:fd:8b:a0:b4:f3:3e:
82:f3:5d:76:80:16:c2:f9:f1:9a:77:69:25:a2:81:
7f:18:5c:62:1b:48:63:95:a0:ab:9e:29:5e:ab:a6:
26:af:63:50:b4:4b:fd:33:1a:14:3c:b4:8d:ca:87:
78:e5:43:c6:09:2d:3b:a8:f0:4b:67:08:99:a4:de:
9a:15:4b:05:37:39:5b:94:8a:f4:e4:66:d4:d5:3f:
50:27:c9:c0:97:eb:17:58:4a:e3:28:e2:ef:5a:8d:
8e:f5:d9:8c:a8:ed:ca:2e:91:99:54:39:fb:52:85:
ec:f2:66:65:e4:6e:8e:d3:6d:a3:2e:a7:b8:a2:69:
46:e1:49:08:77:c3:ba:e2:7f:24:90:b3:10:cf:05:
89:eb:5e:fe:2f:1a:ac:81:f1:5b:60:75:ae:c3:e4:
92:9e:e8:35:37:56:2e:dc:0d:90:d7:aa:cd:67:10:
e1:1f:7c:61:88:3e:08:b3:87:4e:05:18:b1:ec:a4:
e5:d5:b2:f7:38:44:5c:44:34:cd:a0:96:70:f8:50:
43:51:d7:bb:4d:56:2e:c1:9e:45:e4:17:1a:1d:44:
45:5d:1a:47:a8:0e:64:44:19:99:c5:7f:5f:02:97:
65:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:21:4E:76:CF:08:59:C3:24:16:1C:3B:A7:3C:37:AF:62:CD:C4:27
X509v3 Authority Key Identifier:
keyid:AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e6:29:54:25:92:f0:d3:f4:76:f3:5e:2b:01:e5:57:ab:0c:
0d:3a:05:0d:eb:fe:1b:4c:40:b4:8c:9a:2c:67:05:4c:ea:9d:
6e:9d:25:33:ce:0c:bf:b2:11:75:d0:a5:f6:03:af:4f:3d:57:
44:34:22:91:93:10:a7:f6:41:f5:1b:f8:19:76:4c:ef:ab:d2:
26:c2:83:f6:eb:b4:bc:80:c2:c9:a6:93:52:b0:f2:03:64:7d:
91:eb:3c:6b:ad:36:72:3b:3d:32:0a:b8:63:e3:4c:14:f4:95:
f6:3c:e0:99:5f:57:b9:de:c6:8a:fe:fd:80:00:38:d9:4a:f5:
29:3f:ff:5b:25:67:30:49:e1:80:64:53:fb:05:7f:e9:21:44:
7f:93:6e:0b:e1:88:92:eb:65:c0:da:c3:02:99:cf:9a:c3:e9:
f7:58:a0:a5:05:3b:79:45:8d:95:19:e5:d1:06:7c:91:a9:99:
f6:af:59:d6:ae:9b:5f:27:90:a0:66:e2:a0:3c:8c:60:19:e9:
e1:0d:92:a2:5d:88:16:b4:3c:25:d3:e9:df:e9:72:1a:c6:09:
6f:01:77:e7:22:4a:a5:e5:3c:2b:f3:ff:00:04:a5:39:19:47:
68:d5:1d:c2:c4:7b:70:2b:be:ca:4a:b4:19:51:99:c2:6f:b0:
0f:7b:0f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:52 2026 by rpki-client