This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json)
Hash identifier: m+NWJc6Ael43AMI7VWGD7Sxx8DYVBNzj8tEyvm0E/uc=
Subject key identifier: B7:B2:20:DB:88:46:EA:3F:77:56:2E:30:44:A4:EA:66:32:46:00:57
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial: 3561
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
Manifest number: 3534
Signing time: Sat 24 Jan 2026 14:35:28 +0000
Manifest this update: Sat 24 Jan 2026 14:35:28 +0000
Manifest next update: Sat 31 Jan 2026 14:35:28 +0000
Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: bJ9sqW5g3zS+4+zMN8/JsHi69dc1VtDt2WFqgx0GoiE=)
2: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: YTAhLYofQ5bGqpN1MRJJdGJjIa93aOaav1SZOkx9D70=)
3: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: tRzHmoCM5bp0eiCAe2WTWAhqYkb98p9OjQpa6ZuzTto=)
4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: 2sM6dqjwFaWvanKsFaRgJilTOFHKXatSdEC+MoptC6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13665 (0x3561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Validity
Not Before: Jan 24 14:35:28 2026 GMT
Not After : Jan 31 14:35:28 2026 GMT
Subject: CN=6974d8b0-4b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:87:6d:54:67:b6:f1:7e:59:68:95:61:57:
0d:88:e9:5e:ce:46:20:39:8d:ae:f1:34:d4:2c:97:
f8:18:25:2b:69:c0:8a:a6:b4:9b:bb:ba:ea:7c:f2:
d8:6a:49:6b:b7:c1:65:c9:bb:2d:28:71:50:4b:a4:
5d:7c:b5:c9:67:bb:cb:19:68:a8:24:30:c3:07:df:
bf:da:c2:ac:39:99:62:fe:68:00:ab:99:13:ce:fe:
38:74:66:5f:ac:9e:78:8d:b4:a3:94:96:4d:ef:bd:
55:c0:8e:19:87:95:94:30:1f:51:84:12:2a:7c:01:
76:b4:f6:b1:17:ea:c9:c2:ce:59:30:7d:9b:eb:4b:
17:0b:c7:de:ec:59:2b:79:a0:2c:86:d2:a3:ba:09:
cc:78:fc:af:7a:1f:27:68:e3:fc:69:dd:43:25:4c:
19:e0:eb:9e:bc:be:a8:e2:40:58:76:de:70:95:52:
5e:a1:da:b0:f1:c5:af:0e:ff:dc:3e:64:d1:ff:5e:
ee:1a:48:69:fe:75:5e:40:7d:9d:f8:79:49:63:8e:
4f:b1:62:de:a1:65:b4:46:f4:e8:a3:4d:99:7b:8a:
7e:9a:d1:4a:d6:67:d9:85:ef:02:1a:54:27:10:80:
dd:75:33:87:79:c2:90:6f:51:bd:65:89:85:79:b5:
52:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B2:20:DB:88:46:EA:3F:77:56:2E:30:44:A4:EA:66:32:46:00:57
X509v3 Authority Key Identifier:
keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4a:9b:8e:3f:6b:9e:46:fc:cd:d2:bb:46:3d:5a:7a:13:33:
86:1d:27:5c:ee:ec:c7:ae:4f:9f:c2:e3:21:49:9e:f1:52:17:
b8:6c:b6:06:f8:bc:ea:07:10:a5:c1:35:76:92:13:f5:ae:b5:
14:6b:a6:d5:03:24:d8:16:4c:0c:81:2c:af:06:14:2f:7e:5d:
25:29:63:f9:14:db:41:68:a0:06:1d:53:42:f2:a5:73:05:d8:
e6:bc:8d:5f:b7:d3:da:85:27:80:70:08:d7:02:9b:05:6b:cf:
05:3d:16:c9:8f:23:de:6d:f9:7b:ef:a8:d0:2b:12:70:d4:4a:
f6:2a:17:94:2f:92:f6:b9:58:08:ad:40:c6:a5:ed:b5:92:d3:
ce:2d:c1:8d:8a:d6:42:2f:63:6e:45:72:de:5f:65:7e:ab:2e:
9c:0f:8b:85:c5:30:d8:d8:7f:fc:e9:42:f3:88:1d:f9:a4:94:
97:ca:06:f7:2c:fd:99:3a:15:20:8f:ed:3c:18:27:df:85:bb:
c8:b6:4e:1a:96:fc:90:fa:c0:50:57:34:55:4a:b2:92:72:8f:
02:2b:23:03:16:63:9b:3e:33:2e:a7:37:80:c0:62:ca:bf:1d:
fc:37:88:52:59:42:53:90:6d:42:85:27:fc:be:48:db:a1:76:
9a:b9:07:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:54:33 2026 by rpki-client