This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
File: S0QUrmheSI9CsbZH7qAd67DE86A.mft (raw, json)
Hash identifier: d4nU14/igX/LrmeUp5806Suiwdz9rsm5FViL1JO3zAA=
Subject key identifier: 63:91:C0:F1:47:D4:DE:B9:0B:53:91:CF:59:44:B1:CC:F0:B1:38:55
Authority key identifier: 4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0
Certificate issuer: /CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0
Certificate serial: 02F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
Manifest number: 02EF
Signing time: Sun 25 Jan 2026 00:27:05 +0000
Manifest this update: Sun 25 Jan 2026 00:27:05 +0000
Manifest next update: Sun 01 Feb 2026 00:27:05 +0000
Files and hashes: 1: S0QUrmheSI9CsbZH7qAd67DE86A.crl (hash: lANbIS/ETQWM1aNJafG8eD7yXQARLkLeKiPet3RQqMc=)
2: B3F935160E0F11ED89E89675C4F9AE02.roa (hash: 8I7nPLTDeVoMhzykvcKCBL+451nr6Q9YVLjV2hOP4JE=)
3: B4A58FE60E0F11ED89E89675C4F9AE02.roa (hash: FBxr1bp/bDFsO8jlJkOCsgnIk2eezT2CPgOBlkwcWnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl
rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759 (0x2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9B1B, serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0
Validity
Not Before: Jan 25 00:27:05 2026 GMT
Not After : Feb 1 00:27:05 2026 GMT
Subject: CN=69756359-66ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:09:f4:c1:27:61:28:55:54:6f:36:11:c5:
30:01:82:62:e4:16:b6:6e:51:ec:1c:f6:cd:08:22:
7e:20:72:ea:66:88:ea:cb:21:15:e7:dc:46:dc:32:
16:bf:a2:7a:ed:9f:28:11:ae:b0:9c:28:85:3d:e3:
dc:d1:98:e9:22:b3:eb:f9:7d:3b:38:e1:12:75:02:
0d:37:49:a2:4f:63:9a:48:47:87:68:45:5f:ed:96:
cf:8d:64:96:1f:6c:1c:78:c1:dc:d5:89:74:e0:bd:
48:39:e0:b9:3a:48:9e:c3:73:3b:de:cb:2c:de:24:
70:18:af:f1:47:82:d6:53:b3:39:17:c9:11:72:c6:
eb:cb:83:b5:1f:df:f9:94:e3:a4:71:3c:3e:5b:e1:
f6:40:83:af:26:9c:50:e8:7f:07:42:d4:31:42:9d:
5d:d4:b5:2f:24:8b:23:5f:1a:ca:24:69:92:06:7c:
8f:8f:be:87:bd:9b:4d:6f:b8:54:ea:14:80:30:12:
88:2e:f2:d9:82:77:56:75:a3:05:7c:07:02:51:c2:
6f:51:77:19:17:5b:2f:7e:6b:9a:3c:24:98:98:90:
b9:76:1a:37:32:a3:dd:e7:ac:85:93:56:3d:f5:f6:
61:b4:58:50:28:11:f0:a9:bf:de:5a:9d:93:1b:8b:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:91:C0:F1:47:D4:DE:B9:0B:53:91:CF:59:44:B1:CC:F0:B1:38:55
X509v3 Authority Key Identifier:
keyid:4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:78:fd:e7:a1:27:99:f7:d6:ca:5d:7b:c9:ab:c1:0a:0e:ee:
b1:2b:5d:d2:ec:9e:4b:57:ff:e7:fe:e4:8f:3c:f7:4a:a0:e7:
bf:44:7e:85:f0:61:61:dd:b3:14:2f:84:11:f4:51:5a:bd:ad:
af:88:b8:15:d6:e0:60:43:c3:d1:af:f6:18:c3:78:68:09:1f:
40:5b:4a:ea:9b:c3:66:43:87:a6:af:86:a7:29:d6:9e:25:3f:
ac:79:c5:8e:9c:18:53:3e:ed:83:d6:c1:c7:a1:e2:5b:13:36:
97:6d:56:38:08:89:1e:78:12:53:2c:4b:43:83:19:d7:5f:df:
dc:93:2c:35:fa:16:22:13:db:c8:ef:2c:eb:c7:37:d8:65:8f:
56:79:77:c7:bc:89:f9:4c:3b:47:1f:f3:28:09:bc:e1:e8:9b:
27:c1:69:aa:34:1c:4d:c3:7d:73:85:e1:e2:72:e9:35:53:b4:
0f:34:97:50:4b:31:81:82:6e:70:2b:4b:27:9f:43:70:66:5a:
94:ba:9b:fc:7b:e4:88:f4:d7:c4:5c:34:a2:5a:e9:0b:49:28:
0e:d1:47:cf:60:f9:39:01:9d:59:b2:7e:3f:44:7e:54:0b:35:
3e:c1:19:b8:a9:ff:17:84:c6:78:65:fb:ed:07:dc:c6:68:92:
dc:66:d1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:18:04 2026 by rpki-client