This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json)
Hash identifier: eh44B4fF+UUQAFRMa3T4rb8LhBgvkSS3zqoLPD+4PLs=
Subject key identifier: BF:96:7B:DC:E0:C8:8A:9D:28:EA:DE:58:B1:41:C0:97:DC:B3:80:5F
Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78
Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78
Certificate serial: 0E23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
Manifest number: 0E1F
Signing time: Sat 24 Jan 2026 17:28:59 +0000
Manifest this update: Sat 24 Jan 2026 17:28:59 +0000
Manifest next update: Sat 31 Jan 2026 17:28:59 +0000
Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: um3dfH5DME+PDNXr+TGo8bt4zGeG2v9EmoN/ENRNxs4=)
2: E64999C258D611ED86C99945C4F9AE02.roa (hash: DQ+JErFx/tRloLusNXusv2s1HWOBWc0JnN5N02SFoik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl
rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3619 (0xe23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78
Validity
Not Before: Jan 24 17:28:59 2026 GMT
Not After : Jan 31 17:28:59 2026 GMT
Subject: CN=6975015b-e0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:ab:60:fe:18:d6:21:99:c2:31:2f:9d:94:
82:79:b4:54:18:f5:74:69:e1:23:34:39:02:fd:d2:
82:8d:46:7a:04:ff:eb:75:e5:73:87:d1:2d:5c:58:
e6:e7:e6:7e:7d:3a:2f:fa:4d:57:68:85:b8:3c:cb:
fc:27:a2:d1:88:f9:78:4f:8f:63:c9:f9:3f:05:ca:
1b:e2:ff:71:c9:82:f6:50:ae:1f:04:e1:9f:48:77:
0b:31:77:c0:d2:ee:9c:9b:d7:a5:9d:14:e0:df:61:
cd:d9:e9:5b:8f:ff:ce:58:06:6e:3b:05:20:5a:27:
aa:50:81:43:80:50:73:bb:67:b6:5e:e2:57:f1:30:
e7:7b:fa:5e:af:32:3d:6e:3b:e8:91:45:96:cc:9d:
8e:f7:27:22:e1:9f:58:df:f6:4e:5f:88:42:24:85:
1f:76:b4:88:73:39:2c:c6:ed:f4:78:44:1b:bd:01:
34:3f:44:26:4f:6b:81:68:d7:16:e6:e8:d7:63:20:
83:bf:1f:6e:9b:48:69:3f:0f:83:a7:b8:2d:86:81:
70:66:3e:e0:d7:02:01:3e:fd:8a:7e:54:4f:c7:fb:
d8:b4:92:32:82:52:0f:b6:cf:e2:a5:fd:a3:7c:d6:
e1:ea:6e:8c:5a:2a:50:82:3f:0f:a9:a8:e5:bb:94:
20:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:96:7B:DC:E0:C8:8A:9D:28:EA:DE:58:B1:41:C0:97:DC:B3:80:5F
X509v3 Authority Key Identifier:
keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:ce:6a:ef:1f:a0:7e:bd:e2:8a:3b:5a:39:89:22:a1:11:b1:
0b:f7:f1:4d:46:bd:6c:39:e6:53:33:d5:64:72:ba:2a:5d:cf:
7a:dd:ea:a0:3b:3d:9f:80:7e:bf:c7:51:e0:48:4a:50:f3:7e:
ad:c6:15:3a:12:b1:7a:9b:de:df:da:b6:23:e6:f0:21:5e:66:
28:00:8e:36:d1:89:22:3e:90:d2:67:9c:bf:a5:41:2f:e6:47:
b5:b3:8d:53:7d:c6:03:f3:75:6f:b5:d3:c6:18:15:0b:9b:31:
65:09:94:97:1d:bd:51:7d:72:fc:b8:eb:dd:bd:29:72:67:57:
db:57:76:36:96:80:ef:43:7d:b3:3f:56:2a:ab:cc:03:18:fc:
ec:28:d4:d2:bb:87:10:c3:19:4c:59:23:64:32:10:e5:91:2c:
ab:3f:4d:66:57:52:4a:79:0d:ab:c6:8b:37:8d:f9:dd:33:0a:
a0:f6:cc:91:d8:27:95:d3:3b:5e:8c:86:c4:1a:87:a1:25:7f:
24:97:88:51:f2:8a:c7:d3:4d:7e:ac:a5:91:a1:3b:1b:87:11:
fc:1f:9a:0b:d2:5a:c0:b8:d6:2a:8f:b6:c0:f2:be:73:e1:df:
7d:d7:5e:29:e4:39:34:32:fd:91:43:df:d1:64:de:33:0c:99:
6b:93:7a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:45 2026 by rpki-client