This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
File: b814Gaj5P69A0OOH8htG6E3p1ws.mft (raw, json)
Hash identifier: pjphA0jGA5jvm3AOu/BD0uapIfXtw3ja8UkBz6dYIF4=
Subject key identifier: 90:31:DA:B1:E2:41:09:92:F1:5C:1E:8A:D8:BD:93:B9:D1:2E:B4:8B
Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
Certificate issuer: /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
Manifest number: 01A2
Signing time: Sun 25 Jan 2026 02:37:37 +0000
Manifest this update: Sun 25 Jan 2026 02:37:36 +0000
Manifest next update: Sun 01 Feb 2026 02:37:36 +0000
Files and hashes: 1: b814Gaj5P69A0OOH8htG6E3p1ws.crl (hash: knDJxR3HjpkRXdhgChdroaTrVSrp4M25lgmBxESTzUU=)
2: 5D98833C77EC11EEA06F373BC4F9AE02.roa (hash: 2U1GUUuHz/HspZCAbX8MNYKTWmtmGMuAJscXPNynpMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Validity
Not Before: Jan 25 02:37:36 2026 GMT
Not After : Feb 1 02:37:36 2026 GMT
Subject: CN=697581f0-5dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:b7:e7:fa:f5:e9:24:ed:9d:11:62:73:68:
c8:7a:06:8b:a3:7a:99:cd:cc:13:e5:1b:b2:03:7c:
7d:7d:92:0c:62:ec:be:61:8b:e4:b4:98:7b:ce:d5:
cb:9a:f2:99:18:c8:64:73:c5:51:c9:06:c0:a4:6d:
93:09:4b:a3:bb:da:7f:b8:e7:9b:6e:da:3e:9b:4d:
bc:e9:2e:9e:45:2b:d6:1a:70:fc:f6:7c:86:c8:7c:
bb:dc:97:b2:8c:47:c8:b8:51:63:e7:fe:4f:00:cb:
65:95:84:ee:32:37:f3:67:fa:4a:62:18:60:fa:2c:
83:5b:03:b9:3c:1f:72:e2:76:a8:48:20:91:f7:99:
65:d8:54:46:b2:05:d3:01:bb:2c:70:6d:f5:5b:ab:
4d:9a:ed:7c:c9:39:45:eb:ec:bc:c9:90:ee:5d:01:
27:7d:69:c4:44:6e:cc:d0:53:18:ad:cf:55:24:b3:
de:d6:f8:29:de:0f:90:7a:f1:4a:40:6c:d4:ea:ad:
da:44:43:3b:9c:d0:ea:23:89:2c:8a:2e:e9:ca:d8:
88:42:01:3a:0a:f3:c1:58:e7:51:ce:a1:c9:23:d5:
bd:e6:6d:1e:70:2e:73:ae:4b:6c:5d:b6:e8:12:2b:
2c:e9:14:56:ea:54:de:23:05:7b:e8:95:c3:c3:b8:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:31:DA:B1:E2:41:09:92:F1:5C:1E:8A:D8:BD:93:B9:D1:2E:B4:8B
X509v3 Authority Key Identifier:
keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:49:95:26:c8:6c:e9:16:01:5d:e6:30:35:2e:73:9c:bf:e1:
69:df:9c:6e:6b:34:34:13:38:82:bb:48:67:8c:b9:39:5c:dd:
d4:ae:4f:65:c3:08:29:c1:60:ea:3f:4f:b6:bd:13:47:19:42:
a8:7a:4e:4a:11:aa:2c:df:6d:bc:ac:71:cc:4a:65:6f:c6:c4:
47:2d:7f:30:87:7a:41:bd:c3:68:49:c2:f4:5a:e4:0d:4c:8b:
22:34:db:9a:b6:5f:7f:83:59:cd:9c:94:40:23:c8:ee:64:30:
a1:e5:d8:02:5e:5a:a1:9d:5a:ee:9d:cd:87:6f:a3:0c:46:1e:
33:9e:06:52:17:39:2b:9f:10:f5:56:67:1b:7e:bc:7e:99:a4:
a9:a6:6c:77:e0:9f:37:bc:61:d1:42:1a:93:e6:64:35:43:b1:
3b:0b:23:aa:4f:5e:1d:8f:03:a5:45:0c:d2:cf:1a:69:57:11:
0a:d4:47:27:ea:53:ca:70:4f:e3:72:e3:bd:01:1e:13:a7:e5:
9a:68:a3:66:2b:30:00:8f:47:73:ae:13:a9:22:cd:76:34:3d:
f5:da:33:e1:2e:b6:c8:10:99:76:f8:35:bf:fd:02:da:3d:87:
d6:0e:fc:f5:5d:d7:a9:b8:75:e0:2a:d4:e5:64:49:ad:01:24:
bb:1e:3a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:18:38 2026 by rpki-client