This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
File: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft (raw, json)
Hash identifier: Ub344CNp4fQBySordcB3O5mEqjmVLEoS9zy00oF46i4=
Subject key identifier: 9C:AE:0A:CF:FB:3E:23:E0:83:97:30:66:5A:F1:CB:AC:E6:13:BE:69
Authority key identifier: F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA
Certificate issuer: /CN=A91AF3E2/serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
Manifest number: 0114
Signing time: Sun 25 Jan 2026 04:10:33 +0000
Manifest this update: Sun 25 Jan 2026 04:10:32 +0000
Manifest next update: Sun 01 Feb 2026 04:10:32 +0000
Files and hashes: 1: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl (hash: fDv6FxOj17IcHVFR6jtByLDgm+53sh2HwcTOQffBcCo=)
2: 3B5B829EABF511F08C00BC38C4F9AE02.roa (hash: Gd8+TlZwI+CWI44n+3dVbfrQ9bdj7BmOFxbH2WqP5KI=)
3: 50D93D94459A11F095E57A12C4F9AE02.roa (hash: lyi982HtKiog06ZDmqBvveNUhmcMavwQ9wBsxDa+hxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl
rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF3E2, serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
Validity
Not Before: Jan 25 04:10:32 2026 GMT
Not After : Feb 1 04:10:32 2026 GMT
Subject: CN=697597b9-ff6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:7b:fd:12:76:8f:bd:8e:36:09:27:f3:40:
85:e4:73:8e:d5:70:28:82:f0:0d:0d:9a:86:29:90:
7e:53:ac:99:79:d8:37:16:be:f5:67:84:8f:af:cb:
a3:fe:a3:74:16:c9:a1:9d:fe:7d:52:66:dd:3e:8f:
2b:4a:1c:8e:21:a2:77:8c:89:17:1c:fb:63:b5:91:
81:47:92:5e:79:54:a9:8e:e0:23:19:94:8b:d2:d4:
de:3b:13:fd:9e:d1:88:5c:13:0a:d9:ef:90:85:f9:
4f:ee:fd:74:c1:f1:ab:93:17:be:7b:b7:06:57:ca:
bc:e9:89:ef:1d:80:87:f6:83:8b:49:eb:82:44:22:
ef:1f:19:36:3b:44:17:4b:45:2c:1d:12:30:dd:49:
37:f6:8a:94:f9:da:ce:7c:e0:9a:b6:6e:2a:26:b1:
4a:97:17:cb:a2:b5:31:58:cd:8d:56:20:c4:81:77:
fe:0a:22:df:6d:80:9d:31:33:3e:71:c1:bd:14:e2:
91:47:5d:77:09:51:c8:ab:78:62:81:8e:73:eb:fc:
81:b7:b2:51:70:d3:7e:e0:95:33:3f:59:73:ec:27:
ad:e1:79:5c:d2:31:51:ad:7d:04:bd:15:18:8c:e7:
72:fe:49:22:80:25:73:62:38:1e:16:1b:8e:b9:b9:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AE:0A:CF:FB:3E:23:E0:83:97:30:66:5A:F1:CB:AC:E6:13:BE:69
X509v3 Authority Key Identifier:
keyid:F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6a:e9:08:3d:47:38:54:2e:2f:a5:40:b0:b8:92:ca:01:bd:
0c:32:a1:82:f9:f9:7f:ca:b3:49:09:65:3c:b0:59:ab:47:7c:
fe:81:ac:65:9f:f5:3e:5b:a4:fa:d9:e8:7f:25:c2:d4:e7:73:
30:7a:e2:84:53:9f:d2:bb:d4:1a:7c:33:9e:33:11:34:32:04:
f4:86:1e:db:de:f5:d6:42:f8:3e:06:91:fb:d1:e5:2b:76:a3:
a3:64:85:7a:4b:b7:e2:c7:77:77:aa:8a:be:4c:6a:2f:ad:ae:
c2:55:44:7f:c3:b4:b7:5d:e6:93:8d:d1:f5:72:06:b0:b4:a5:
c7:e3:e7:c2:08:7b:9f:13:f0:0b:6a:1b:36:54:91:5b:84:14:
13:34:73:8b:d9:de:34:c9:3d:f2:b7:cc:fb:b6:9d:4b:7d:d1:
63:9a:7a:37:84:5d:91:c0:1c:32:d4:47:57:4a:e9:f3:2d:ea:
ec:47:f0:a8:f0:3c:e1:69:8c:2b:60:e1:ed:d4:a3:7b:bb:51:
ec:ed:f3:91:7e:e9:c9:b0:02:dc:65:1f:c9:63:bb:dd:47:62:
40:0b:cc:26:45:da:f4:8f:b6:70:08:c0:34:f3:45:d0:7b:11:
dc:cc:e7:ef:39:33:95:44:be:da:18:1b:1c:34:c8:50:5f:15:
4d:4b:a5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:09:33 2026 by rpki-client