This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json)
Hash identifier: S0PZFOZHbqBN/6zwt5XmNX8lHJMP4YxNoVN/I37LQS4=
Subject key identifier: 85:B1:26:61:AE:43:28:A1:C1:25:85:AD:2D:1A:4A:58:77:91:EE:26
Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4
Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4
Certificate serial: 01C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
Manifest number: 10CA
Signing time: Sat 24 Jan 2026 17:17:41 +0000
Manifest this update: Sat 24 Jan 2026 17:17:41 +0000
Manifest next update: Sat 31 Jan 2026 17:17:41 +0000
Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: zymh1bTdm4sazVZjuG86RN3fZIJt/bON8144mkwAY60=)
2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: MZyOtnzSYRn5H5siK78kl2QRZxsNV35INBP6UfbHk9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl
rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449 (0x1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4
Validity
Not Before: Jan 24 17:17:41 2026 GMT
Not After : Jan 31 17:17:41 2026 GMT
Subject: CN=6974feb5-ca07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:38:ab:02:0d:74:1f:f8:79:34:eb:5b:20:
78:a6:d8:98:bd:68:e0:46:44:1a:0b:95:96:2f:51:
d2:ea:d1:79:91:c9:fb:41:3d:33:84:ff:3c:4a:6f:
ce:71:9e:bd:25:93:54:b1:57:89:12:88:8a:89:5b:
2a:ea:67:73:4f:0e:46:20:83:96:4c:69:cc:ad:78:
8d:55:c2:ff:22:ef:de:b8:79:69:c3:4e:6d:43:72:
af:bb:3b:78:1a:f8:1e:ed:bb:f9:9b:41:8a:72:6b:
98:78:89:a3:3d:a3:a9:05:b9:00:f4:b3:f5:d0:80:
ac:bf:1d:c4:8f:6d:80:25:74:98:47:aa:ea:e9:0f:
85:23:da:80:71:7e:60:fe:09:9d:17:8e:ef:99:ef:
66:ad:b4:75:dd:91:80:30:b1:de:84:43:78:1b:13:
29:d4:b2:b9:a8:21:f9:f7:e5:b5:e7:ec:2c:d0:5a:
a6:73:8c:23:b8:f2:a4:41:5f:f2:38:0a:db:be:ec:
04:44:a8:f2:4d:02:af:ef:09:bd:88:99:fc:75:e0:
d5:4d:1f:51:f7:4c:46:a2:1b:4b:09:86:c1:bd:e1:
b0:34:93:67:19:07:75:4f:7f:df:70:2b:6c:e6:4e:
8a:f2:06:82:cc:5f:41:7a:6b:74:a7:33:07:18:26:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B1:26:61:AE:43:28:A1:C1:25:85:AD:2D:1A:4A:58:77:91:EE:26
X509v3 Authority Key Identifier:
keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:c9:59:ae:f6:07:7f:28:72:7c:88:64:65:6f:ae:b8:b1:3f:
19:37:ef:09:44:14:46:fb:d6:e2:ca:f2:bd:aa:c1:74:75:89:
3b:59:a8:b6:d5:46:e9:d5:a2:31:d3:28:c0:17:e4:45:89:ab:
68:b2:4d:14:2b:60:cc:69:9e:60:08:4b:7e:3f:3d:4e:23:8c:
02:e9:f3:d7:11:a5:80:f8:36:91:ba:a9:a4:0f:65:a4:21:0c:
94:a1:27:cc:ed:0b:4b:73:32:23:6b:f9:f4:f9:e0:2c:a3:9b:
8e:5b:ee:46:ce:75:a1:43:c9:98:fd:85:a2:9a:ee:86:37:ff:
d0:82:19:cf:b5:69:f7:a8:8b:a7:a3:26:b1:d8:d9:b8:fd:22:
b9:7d:99:04:f9:67:00:66:25:ea:53:bb:22:6c:91:b5:7f:c3:
c2:b8:29:80:75:8a:2f:f2:10:48:3b:b7:cc:c2:36:db:8f:d5:
79:29:b2:61:cc:4d:12:35:37:67:5f:f4:53:f0:bb:0f:1b:10:
1b:e2:18:30:ed:38:41:4a:3f:77:71:70:2c:08:31:ac:2f:f5:
fb:47:cc:07:68:4a:78:a0:0d:e2:13:e3:db:e5:c0:c7:b4:2c:
82:ac:cf:40:5c:fc:8d:88:18:a0:c3:cc:ca:be:5d:ec:6a:7a:
98:ab:37:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:48 2026 by rpki-client