This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
File: X45P1KbdY15DeC5aBVYiyrJlSjc.mft (raw, json)
Hash identifier: RpjGswIwJIIAnysc0APkE/l4n1v4tYDCC9bwQOcQuIw=
Subject key identifier: CB:13:1F:8B:44:C0:EF:45:AA:A8:C2:A4:61:F0:57:32:32:51:01:E7
Authority key identifier: 5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37
Certificate issuer: /CN=A91BCF31/serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37
Certificate serial: 097B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
Manifest number: 0973
Signing time: Sat 24 Jan 2026 19:31:10 +0000
Manifest this update: Sat 24 Jan 2026 19:31:10 +0000
Manifest next update: Sat 31 Jan 2026 19:31:10 +0000
Files and hashes: 1: X45P1KbdY15DeC5aBVYiyrJlSjc.crl (hash: oBmxqeQu1y4aLDIctI0sYzYzwu7NWcS9WgnAMgqJATA=)
2: B757FF4EAB8311EA9983D717C4F9AE02.roa (hash: vF+3jtePHsbwMW7GFk7Eys2kw6qOXJ50sYtNC1K6B7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl
rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2427 (0x97b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCF31, serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37
Validity
Not Before: Jan 24 19:31:10 2026 GMT
Not After : Jan 31 19:31:10 2026 GMT
Subject: CN=69751dfe-ba4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:e1:76:a6:fd:4a:b7:18:d1:59:e9:c0:b7:
e2:1f:d0:d3:b9:bf:e2:5a:99:45:f2:42:55:bc:95:
f3:79:42:19:d0:0a:a6:45:e8:29:a6:71:af:92:33:
a5:2e:13:3b:37:b9:ca:f7:31:82:bc:e6:d9:dc:93:
b2:61:c4:61:d8:d5:2e:34:e6:54:5e:ae:a0:cb:1e:
76:7c:66:7e:17:39:8e:82:0d:51:10:71:78:02:2d:
cc:37:c7:c7:28:30:a2:02:8b:bf:ef:40:bc:f1:69:
f4:14:49:ab:56:78:98:14:23:ba:1c:d8:d1:b8:46:
a4:7e:ff:28:e4:75:4d:c9:c0:f7:13:f9:8a:05:33:
a5:1c:7f:7a:f7:0e:d2:3d:cb:13:e3:da:4b:b7:0e:
e2:e9:7d:00:c1:69:a8:49:05:85:8a:01:00:a2:6a:
66:32:f3:9c:37:3e:ad:2d:e7:d7:4e:9d:bd:27:0a:
dc:cc:0e:7e:94:62:99:a6:de:5d:13:d8:1c:7c:70:
aa:74:02:32:2c:87:5f:c1:3e:f5:58:cf:69:e5:65:
ad:13:5d:37:ba:a7:cc:8f:38:97:d9:ff:e7:ab:fb:
98:11:91:2d:7d:58:2d:a6:26:b8:78:55:05:3e:d7:
da:39:3a:7f:11:6d:27:4a:f1:20:3b:dc:5f:e1:32:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:13:1F:8B:44:C0:EF:45:AA:A8:C2:A4:61:F0:57:32:32:51:01:E7
X509v3 Authority Key Identifier:
keyid:5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1c:ec:4b:d7:f8:19:45:67:93:66:a0:d9:ce:9a:9a:74:ce:
44:02:ef:f4:96:7b:08:ee:89:24:b7:bb:bf:30:3b:67:98:a9:
3e:86:f7:39:cb:b6:dd:0b:a6:f8:b8:9b:ff:5e:4b:29:4e:0d:
16:a7:15:6b:b0:02:d1:a7:c0:c9:c8:d9:85:5d:2d:9f:dd:12:
48:10:8f:c1:b5:b9:4d:59:19:c9:6e:e6:35:21:4c:37:6b:e9:
34:a9:5d:8e:84:9a:3d:8d:05:9a:59:be:e4:a5:c2:1f:78:e2:
98:cd:ab:7d:e9:05:54:cb:6e:9c:85:4d:69:e0:20:f9:d0:08:
52:4e:e7:1a:e7:58:cd:9e:07:ba:75:6c:e8:33:60:58:a9:f3:
3a:1a:6f:49:a5:74:1f:c8:48:55:3a:fc:b8:ca:b1:aa:7b:35:
bc:a6:ef:3f:15:b8:31:a8:9c:0c:8d:9d:ad:7c:ab:3b:94:85:
1b:ea:93:81:fe:09:52:91:80:41:5a:db:b0:ad:4f:cf:1e:f8:
74:c8:01:0d:e9:79:6e:de:de:f5:4c:25:ff:fd:29:2b:40:4c:
51:37:de:91:fa:88:4f:14:0f:b3:0f:b5:6a:a0:be:6f:a2:8c:
e5:86:5f:7e:38:b4:d6:ab:77:89:40:bd:de:f9:8a:a5:f1:22:
1e:70:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:02:17 2026 by rpki-client