This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json)
Hash identifier: XCcdJetRMmxjv6Vxj3tW4yT7aYjM4dpRmIw2giQMbro=
Subject key identifier: 3C:84:11:9E:D7:CB:AD:08:0E:2E:B7:A2:B8:10:9C:CC:EB:22:D0:E7
Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50
Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50
Certificate serial: 1112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
Manifest number: 1A3B
Signing time: Sat 24 Jan 2026 16:59:41 +0000
Manifest this update: Sat 24 Jan 2026 16:59:41 +0000
Manifest next update: Sat 31 Jan 2026 16:59:41 +0000
Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: QS7/bVUhBIlpKTTKLhKWxo4MFmALuIpZQV+/+eO+nu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl
rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4370 (0x1112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5073, serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50
Validity
Not Before: Jan 24 16:59:41 2026 GMT
Not After : Jan 31 16:59:41 2026 GMT
Subject: CN=6974fa7d-31ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:5a:c1:c9:70:d9:76:f5:2b:be:01:3c:a9:
0d:c4:5e:8f:52:68:6d:57:af:a6:ce:9d:0e:ba:9d:
91:2a:da:20:05:aa:6f:79:97:e3:db:d5:0e:e9:55:
ca:7e:24:e5:58:40:e4:85:94:36:5e:42:96:44:b9:
b7:05:27:82:38:8a:56:8b:f2:96:26:c9:6f:59:2b:
bf:24:4e:db:e8:21:11:65:4a:ca:4e:b6:51:fa:45:
5f:13:5b:a1:77:47:8b:ec:22:0a:20:1f:35:f6:66:
1e:07:31:14:5e:e9:51:5e:a9:29:0b:77:ab:0a:45:
1e:64:2d:89:23:25:c8:cb:eb:d9:da:40:d6:4e:19:
80:e4:e8:ed:68:8b:d6:64:d6:5a:16:1c:9a:ee:4b:
7b:e3:bd:60:7c:9d:bc:8a:44:41:c3:4d:cb:77:9b:
9c:c0:e6:2c:d0:83:f2:38:d7:aa:39:bc:61:ba:0a:
24:72:9d:2a:59:0c:ca:6a:fc:04:1e:eb:b6:6e:50:
84:4f:fc:6a:74:fb:68:43:cd:44:c5:63:c6:83:dd:
ca:7d:4d:c9:61:7e:19:01:b2:08:37:73:7f:91:9c:
69:40:6f:a1:89:9f:b8:a9:f4:7f:98:79:93:be:bf:
2f:b3:be:04:19:5a:e9:15:f0:84:4b:d1:6f:f9:d4:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:84:11:9E:D7:CB:AD:08:0E:2E:B7:A2:B8:10:9C:CC:EB:22:D0:E7
X509v3 Authority Key Identifier:
keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:47:4d:56:54:37:c7:3e:c4:aa:b2:d4:b0:17:11:c1:aa:5d:
4a:2f:49:ba:1f:0e:04:a5:34:49:38:40:c2:01:8e:c5:19:9a:
e8:40:ce:be:7a:a1:e3:4e:77:23:e3:84:58:3e:5c:cd:c0:23:
a7:c7:28:d7:d7:40:f5:aa:77:3d:9e:67:f4:93:01:41:0b:13:
28:6d:ee:53:a1:e3:fc:07:1e:a2:5c:0b:e9:0a:99:5c:59:8d:
11:b0:46:34:c1:2c:96:d5:86:4f:2d:48:a7:47:9e:34:58:90:
cb:23:3a:c9:db:d9:ef:34:00:ea:85:75:06:40:73:a0:9b:5e:
ec:de:67:3f:c0:2c:6d:eb:ff:60:8d:ee:20:13:5d:4e:40:4b:
07:0f:57:61:b3:db:d0:b1:d8:78:aa:81:07:f6:f3:14:85:63:
31:f3:21:f1:3a:ea:23:12:06:10:95:5c:06:c0:a8:92:2b:00:
71:38:71:db:dd:85:14:70:cf:87:c0:11:95:75:a0:51:6d:56:
4e:65:0c:f5:b6:f1:fc:bd:f4:2a:18:f0:f6:4e:a2:3d:95:06:
2d:67:61:f0:f8:d7:c6:8c:20:64:68:e1:c5:43:09:2c:d8:04:
db:bc:73:a5:b5:83:73:d2:fa:dc:34:45:11:d9:d1:7e:3c:e6:
50:b0:54:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:20 2026 by rpki-client