This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
File: 72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json)
Hash identifier: XNv4L1BEWF+pV1VFGTli2zxKZMu8ivQXcoTHCFZFlYE=
Subject key identifier: 84:88:12:F4:6F:17:A5:32:17:64:2B:08:27:74:D4:47:D1:92:B8:81
Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35
Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
Certificate serial: 0537
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
Manifest number: 0529
Signing time: Sat 24 Jan 2026 22:47:17 +0000
Manifest this update: Sat 24 Jan 2026 22:47:16 +0000
Manifest next update: Sat 31 Jan 2026 22:47:16 +0000
Files and hashes: 1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: QI/0dUaaoobwP7ywP7bOucU8GVVazbLxezonLultew0=)
2: DCEF2F3CFFD611EFA348445FC4F9AE02.roa (hash: ehKgJL5LpCf7RlyE1aWed3p9Jx0fKt/Hbu4XpQx0/fc=)
3: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: yboxuGYa7ria6kIKGtokstUujAuaxIezyJo4PlnmwrQ=)
4: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: RtF3QF7uJka6OGDIQWbUTerYNiAs2ytZrcxGiAE5oMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl
rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1335 (0x537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
Validity
Not Before: Jan 24 22:47:16 2026 GMT
Not After : Jan 31 22:47:16 2026 GMT
Subject: CN=69754bf5-0326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:fd:54:be:39:d4:90:fd:8c:53:18:2a:3f:
2b:40:24:7d:36:c0:73:27:0e:36:c0:f1:bc:24:16:
2e:e7:89:12:6f:e3:b5:76:ae:d1:7d:ef:d6:14:fa:
5c:17:92:e0:1f:a7:1c:b0:44:ac:77:98:b6:96:2c:
31:7e:0c:59:77:cb:be:ce:4d:19:c8:42:99:b8:43:
76:e0:dc:44:78:4c:de:67:96:5a:bb:f1:7b:bb:fa:
d8:85:d4:5b:98:c0:2a:62:48:0d:a8:78:a3:71:e1:
33:98:cf:50:cc:1a:d2:ee:e3:30:61:c7:e9:53:03:
8f:84:19:4d:4e:05:4c:08:c6:6d:35:00:ed:b3:58:
b0:35:04:22:57:e4:0e:c8:11:b8:43:b3:27:cc:fc:
a7:f7:dd:41:98:67:2d:4f:38:9f:22:b9:41:14:f3:
78:5f:09:35:0b:4f:54:f5:17:c7:47:32:1e:c5:e5:
1b:b8:22:f8:9d:76:1e:9c:bc:d2:b3:26:67:8a:25:
22:5a:07:30:15:42:23:22:f1:f0:d0:00:f5:53:d0:
f4:91:a6:d4:fa:28:4f:62:8b:50:3d:23:d5:51:ab:
76:27:bb:76:04:1f:7a:c9:68:48:1b:34:1d:a8:87:
02:4e:fb:ce:67:a0:bd:c3:6d:48:31:c0:8f:35:18:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:88:12:F4:6F:17:A5:32:17:64:2B:08:27:74:D4:47:D1:92:B8:81
X509v3 Authority Key Identifier:
keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c1:fe:43:fb:55:63:94:57:61:d5:a6:3f:d6:62:b6:8e:ed:
00:7c:ce:04:1c:9d:c1:e6:11:92:6c:64:af:d8:97:c2:91:36:
c9:07:49:74:66:e5:ee:da:a4:b8:93:7e:63:a2:8a:e6:08:33:
fb:ea:d5:8e:31:ea:10:e8:7e:6a:ae:16:5f:36:36:c4:b2:68:
01:32:d9:9c:d6:a7:5d:2e:84:a2:79:65:eb:1e:d8:58:19:3a:
cb:d8:4f:cb:25:94:29:8d:60:ea:a1:28:13:15:31:db:1e:c5:
66:24:78:81:b1:d6:bf:00:85:77:df:ea:90:3c:4a:0d:68:4e:
99:e7:73:98:bd:e4:96:de:c5:2e:67:85:fb:88:33:22:55:d4:
3a:d2:91:b3:45:4b:93:29:a7:50:0b:62:29:e8:40:f8:d1:78:
da:8b:4e:0e:b7:91:35:e3:7f:70:5f:aa:27:a9:00:a5:69:43:
4a:eb:69:c6:42:ee:bb:74:ea:82:a9:61:9d:f1:9d:0a:df:55:
f6:44:8f:84:c9:80:5f:81:f5:c8:14:1d:d6:e2:04:42:7f:dd:
49:53:3c:a7:6e:75:5e:f8:00:68:2e:49:e3:d2:f3:52:93:6f:
7e:3d:6e:c2:1b:8d:4c:fb:e8:20:42:c5:94:bd:3b:14:a6:e0:
f7:8b:a1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:24 2026 by rpki-client