This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json)
Hash identifier: xGMjjW6r0YfXt76HIjjb83NhpLVuDJ5IHIcia7ARhY0=
Subject key identifier: 55:7F:6E:04:DB:EA:E7:09:BE:99:7F:28:16:23:BE:D3:8A:86:FC:3A
Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Certificate serial: 0532
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
Manifest number: 0526
Signing time: Sat 24 Jan 2026 22:47:04 +0000
Manifest this update: Sat 24 Jan 2026 22:47:03 +0000
Manifest next update: Sat 31 Jan 2026 22:47:03 +0000
Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: lhhNNIbtEvdwWMWvvNRW7yjMLS7MfVVdabglqxu4Sjc=)
2: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: 4ooeZLcPwkHZ/ZShvap31EsyiH4g04EjDdlB/3H2WWc=)
3: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: IONLpqLbIWNcEINYfdYWnA0lQhPUSCbB7gozoJAI8ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1330 (0x532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Validity
Not Before: Jan 24 22:47:03 2026 GMT
Not After : Jan 31 22:47:03 2026 GMT
Subject: CN=69754be7-e81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:d3:6a:d0:4c:b5:96:3b:5b:2d:b2:f0:9e:
87:ca:2e:39:55:10:0c:94:80:ff:7d:9c:d6:9c:43:
53:57:84:c6:04:70:ba:f9:af:b0:e7:ae:29:35:9f:
e1:b7:e7:bd:8e:bb:58:be:32:f6:c3:84:79:ec:ec:
01:4a:a9:b2:9c:5c:4b:6d:cd:47:41:95:f7:5e:b0:
44:e5:08:2c:a1:58:66:a6:ef:ed:70:66:3f:86:c6:
af:1e:ee:8d:be:30:5d:bc:66:b7:cc:43:40:07:9b:
fe:bd:c6:80:d1:46:06:77:da:58:59:7b:68:2a:1e:
7c:09:4d:c0:bf:38:87:ff:5f:bf:fc:79:67:d2:c4:
15:c9:f5:20:ff:97:2f:c4:f4:b6:f8:37:f2:90:13:
b4:eb:f3:88:4f:c2:54:3c:2c:17:5c:72:6a:c5:e4:
15:2f:3b:65:e6:63:a6:c2:00:2b:45:e5:01:9f:89:
67:e1:30:5d:bd:78:30:ab:79:bf:0c:d9:88:92:bb:
44:43:cf:00:ae:84:23:55:e4:a1:4d:aa:bd:86:40:
79:b7:49:e6:0f:a5:12:37:36:71:5b:c9:9c:30:4c:
f0:50:b0:c2:a8:3a:df:29:5c:3c:2b:9e:d3:e3:ae:
22:ff:2e:73:d1:5d:ad:6e:83:e3:f1:a2:46:66:b2:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7F:6E:04:DB:EA:E7:09:BE:99:7F:28:16:23:BE:D3:8A:86:FC:3A
X509v3 Authority Key Identifier:
keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:24:08:fa:17:fb:ee:02:df:01:25:6e:af:d4:40:cc:c8:11:
6e:8a:e0:57:b2:ac:a6:9b:37:4f:e2:f6:c0:03:40:cd:d7:03:
d6:8e:33:2a:e7:33:9a:f8:fe:ea:86:a8:36:0c:81:64:9a:a7:
01:ca:63:9e:71:51:da:05:ed:43:41:9f:87:56:6d:89:8b:66:
28:74:02:ad:72:93:96:be:f6:05:89:ae:57:06:9a:db:d1:b1:
7a:84:b2:12:76:8f:5f:d6:86:d5:4a:a7:9a:5d:a3:35:93:a7:
c8:02:82:db:ea:bc:bb:ba:a1:cc:49:38:b1:4e:d9:6d:0a:3c:
b0:3f:df:58:7e:92:23:12:13:9d:07:d5:16:f0:44:09:20:bf:
99:89:fb:40:3c:6d:15:7b:26:fc:57:c5:59:7e:96:1d:96:75:
72:1c:cc:5b:ef:5e:ed:bc:44:38:50:e6:3b:06:45:74:aa:97:
67:3a:bd:de:95:99:51:ce:24:8f:24:16:cf:94:c4:c3:10:15:
3b:81:f4:56:e2:4b:bf:2f:3f:23:42:39:88:12:6b:6f:cb:9c:
8b:59:19:84:bd:b2:6e:27:93:b3:4f:e1:06:ce:3c:d3:4c:ab:
be:ec:e8:6b:6b:56:bd:84:ad:8a:30:45:8d:59:94:f5:7e:30:
35:3d:7d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:39:15 2026 by rpki-client