This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json)
Hash identifier: +jZMAphpx5WhgEHbWB7leXE8aPcuzy5T9FPdrcdBoAI=
Subject key identifier: 29:3C:76:02:D5:A5:16:76:A8:AA:4C:3A:0C:B7:6C:60:BF:F5:F3:AE
Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE
Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE
Certificate serial: 0929
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
Manifest number: 0928
Signing time: Sat 24 Jan 2026 19:38:55 +0000
Manifest this update: Sat 24 Jan 2026 19:38:55 +0000
Manifest next update: Sat 31 Jan 2026 19:38:55 +0000
Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: bkAP7DKz47hWxxI6MHxH1DVdlcv0agsXYsoTbTmJluw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl
rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345 (0x929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE
Validity
Not Before: Jan 24 19:38:55 2026 GMT
Not After : Jan 31 19:38:55 2026 GMT
Subject: CN=69751fcf-7257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:7e:c9:5b:10:21:dc:1e:45:b7:07:df:19:
73:5f:48:4b:3e:a3:90:69:bd:c5:99:c2:05:2e:4b:
fb:78:fa:88:86:f4:00:20:bd:97:36:57:1f:25:0f:
c8:2e:04:ee:03:df:55:5d:8c:37:40:1a:56:ad:20:
81:7e:43:40:a7:df:25:74:8d:08:cf:9b:aa:32:5f:
36:08:2f:2e:9b:0e:da:6e:c5:9f:62:4e:85:3c:cd:
a2:7d:21:ff:a9:ad:7d:a9:42:b2:22:d9:c5:74:b2:
21:47:9c:6a:6a:bf:f6:e5:b7:3f:53:68:d9:23:fa:
ae:88:ce:e8:07:ef:50:4c:03:e9:5c:1e:8b:bd:1f:
6c:8d:15:44:a1:34:fd:4b:c9:85:8c:7b:e5:a2:62:
64:46:69:99:f6:3d:2a:6a:d4:11:55:72:0d:a2:79:
e6:10:59:cf:e0:ce:cb:06:ea:f2:a7:b2:65:ab:82:
4b:3e:ce:4d:91:a7:5e:f0:25:c1:92:ff:ba:06:0f:
be:71:03:cc:00:99:a4:30:f9:38:6b:19:1f:e0:27:
43:85:0b:69:8e:63:dc:f0:23:af:ef:e2:ad:bf:2c:
0a:2f:02:f2:5c:10:25:66:3f:e9:c4:38:8e:63:5d:
8b:1c:5e:89:84:3c:28:ed:57:10:75:2e:67:de:d7:
d7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3C:76:02:D5:A5:16:76:A8:AA:4C:3A:0C:B7:6C:60:BF:F5:F3:AE
X509v3 Authority Key Identifier:
keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:95:c7:09:7f:25:f8:3d:7a:69:97:48:8d:44:9e:73:45:88:
cb:bd:2f:70:27:05:0d:3d:48:5c:f8:60:8b:0d:9f:fb:1b:0f:
88:6a:2a:73:8c:5e:f3:06:13:24:87:eb:c3:90:92:4b:70:60:
fa:61:cc:e1:a3:ca:20:a2:29:34:69:43:69:9c:5d:b9:11:16:
ee:e7:16:19:35:dd:bb:12:a3:a9:b2:86:8f:4d:8f:67:fa:95:
89:25:75:cd:8e:70:e4:82:a2:22:67:e7:8c:97:2d:48:40:2d:
58:65:05:24:d3:61:46:11:44:9b:0e:a2:ed:48:11:09:7d:a5:
7e:a3:9f:aa:d5:5d:fd:38:91:05:b9:4d:0c:3f:cd:1d:57:d2:
01:d8:f1:5f:4f:fc:ec:0b:57:a2:b0:21:0f:ea:2c:c7:eb:be:
d6:86:ca:4a:07:af:f5:c2:30:a0:8c:1d:29:8c:3b:29:8f:a1:
83:8b:5a:e8:16:69:bd:db:ed:24:f2:1b:dd:bb:1e:f2:99:08:
2e:b8:e0:d4:dd:93:ce:25:de:7c:03:84:7a:60:9b:98:90:35:
80:4a:32:16:57:7a:57:88:a3:f1:f4:d8:30:8b:6e:84:95:6c:
5c:bb:91:76:c1:56:84:bb:aa:a3:06:d3:69:a0:d7:47:12:ed:
cc:c9:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:16 2026 by rpki-client