This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
File: S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json)
Hash identifier: CZFkn+1zVeiFfOJpi8l1qaHG7n1oIzLMxkLlWhn42yY=
Subject key identifier: 8F:F8:9A:26:F1:52:F8:3F:E1:EE:EA:94:AE:DB:EE:5A:A8:B9:0D:A4
Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
Certificate issuer: /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Certificate serial: 0703
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
Manifest number: 06FA
Signing time: Sat 24 Jan 2026 21:19:12 +0000
Manifest this update: Sat 24 Jan 2026 21:19:12 +0000
Manifest next update: Sat 31 Jan 2026 21:19:12 +0000
Files and hashes: 1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: epvjdRG774jMK55FkjwU286BGobw5Lfm1Vr9Q/Cv8uQ=)
2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: iVoQ4DzarwOJUrSELiNWak+s+ohZp/LfOai+uGXnZZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1795 (0x703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Validity
Not Before: Jan 24 21:19:12 2026 GMT
Not After : Jan 31 21:19:12 2026 GMT
Subject: CN=69753750-179c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:17:bb:0c:3b:f1:fe:7b:93:e7:2e:6c:30:
16:a8:e0:fc:67:e5:e3:89:c0:79:b1:cd:ca:6b:a4:
19:ed:16:19:1b:5b:56:c7:d9:52:35:46:e5:59:d3:
e3:c3:4b:25:17:93:b9:40:45:d4:44:35:0e:52:69:
22:62:dc:c1:ca:cc:a2:b5:65:96:0a:dc:fa:1a:50:
0d:80:33:45:53:42:72:80:40:c9:ea:d9:92:2c:46:
b5:dd:5d:2b:51:5a:36:79:b0:86:4a:c8:8b:28:de:
83:aa:60:33:3f:78:e6:e0:3b:8e:5b:67:87:a7:0c:
46:87:e9:45:c2:db:48:d0:10:d1:66:c5:88:47:5d:
84:40:26:dd:6c:4d:93:bf:a6:90:a3:47:b0:34:47:
7f:6b:a1:53:3d:22:40:b6:49:e3:70:44:77:61:59:
30:51:e8:41:da:47:08:88:ba:70:6f:cd:af:2e:75:
4b:4c:bf:1e:45:8e:52:51:79:9d:0f:bc:b6:5e:0d:
bb:ec:1c:7c:74:3b:8c:de:3d:0c:17:35:7a:6f:2f:
d6:36:28:11:8b:28:c5:71:f6:d5:f7:17:2c:aa:4b:
11:47:70:3f:29:cd:d8:3c:6e:43:29:5c:74:a6:85:
8f:b4:40:cd:fc:3f:89:f0:83:61:4a:80:3e:f8:46:
2f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F8:9A:26:F1:52:F8:3F:E1:EE:EA:94:AE:DB:EE:5A:A8:B9:0D:A4
X509v3 Authority Key Identifier:
keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:18:b4:a7:51:28:29:e4:ef:14:24:ba:1f:9a:56:d8:fc:e8:
b5:60:07:06:12:9b:a5:e7:ab:29:6a:8e:d4:70:31:fe:69:71:
07:47:50:a4:04:cd:59:5f:4e:10:01:68:e3:a4:5b:5e:c1:cb:
e2:e0:92:ae:84:d1:c5:7d:f0:ae:6e:5b:3d:b0:d4:2a:5e:a2:
be:e4:cd:3e:fc:fe:92:f7:0c:b9:cc:29:f9:a3:61:c5:ae:03:
94:57:57:ef:35:9b:fb:5e:c5:98:1c:50:10:c8:75:e9:27:6b:
0c:d8:4a:9e:f8:bd:ad:74:f3:be:46:60:c1:de:03:ce:8f:1d:
62:19:08:92:f1:f8:69:e6:25:ba:aa:4b:a0:16:8d:d2:0c:0c:
63:91:2b:b5:db:96:67:e6:09:ff:38:1c:60:be:68:5e:c6:48:
51:c8:79:d4:78:8d:86:a3:3b:f3:cd:51:99:16:5b:66:5b:98:
03:56:11:84:ed:ae:7e:32:75:77:d0:9a:a6:f4:d2:98:ec:05:
65:7b:de:34:fe:3e:44:65:1c:58:7a:21:89:66:9a:8b:eb:9f:
5a:05:3f:16:e9:bf:ed:6d:9c:4e:db:a8:49:3f:a3:3e:8d:8a:
e3:74:b6:0c:3d:dc:bb:e9:ca:1c:d6:d9:81:98:a8:e3:be:63:
b6:8f:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:21:39 2026 by rpki-client