This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json)
Hash identifier: VBJmgbUoMUkRpOug1WpUTwCLmzs6qh9XxaPf+OmFdgA=
Subject key identifier: 47:89:8A:A2:32:21:AA:6E:D7:F7:25:CE:21:A9:7D:9B:31:CF:B9:79
Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03
Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03
Certificate serial: 15A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
Manifest number: 159E
Signing time: Sat 24 Jan 2026 16:30:21 +0000
Manifest this update: Sat 24 Jan 2026 16:30:21 +0000
Manifest next update: Sat 31 Jan 2026 16:30:21 +0000
Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: PWgaU244Y12llBKGz29cA63n3+ZDd5O4ywC25mGqS1E=)
2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: UB3e/BzYZNzSWafIfT/8shx3CMwEAB4npfcc5DFGpRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl
rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5543 (0x15a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03
Validity
Not Before: Jan 24 16:30:21 2026 GMT
Not After : Jan 31 16:30:21 2026 GMT
Subject: CN=6974f39d-8b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:19:67:9f:b3:17:d5:3f:fb:c4:9f:1b:ef:
66:5a:6b:f1:95:fe:24:45:6a:6a:64:34:9b:b7:fd:
db:e4:de:b2:ba:5d:5e:c3:49:22:d0:64:ab:2b:d3:
73:9c:c6:24:4c:13:6c:66:1e:69:46:51:fc:00:bc:
37:d6:50:1e:14:ac:72:f0:db:8e:7b:9d:0e:60:a6:
44:4b:56:a0:89:b5:24:13:51:ac:75:fe:84:ad:a1:
63:85:fa:cb:ca:5b:74:58:39:5b:4e:69:f6:a8:89:
ef:a3:76:ab:63:05:59:57:18:90:1c:1c:86:d5:cb:
91:28:fb:f3:c5:14:1c:25:71:7f:db:48:a6:a3:fa:
8d:c4:09:02:62:44:68:96:35:a7:45:16:a9:97:07:
76:13:bf:45:2a:e4:7c:6b:5c:d3:aa:3c:03:cf:e4:
f6:02:14:c6:18:0c:ba:1b:e8:65:ce:01:64:44:30:
2e:96:5d:7d:e9:10:a3:aa:ec:05:d4:72:69:64:f9:
62:e2:10:c5:f2:42:f3:9c:74:b2:f6:3c:4f:bf:a9:
d9:d6:0c:7a:c1:1a:15:58:d9:42:08:39:8a:c3:c0:
23:63:d5:d7:3a:b1:32:46:0d:d5:aa:e7:8d:a1:31:
4b:1c:78:59:5b:53:c1:18:1f:a9:b9:91:15:8d:82:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:89:8A:A2:32:21:AA:6E:D7:F7:25:CE:21:A9:7D:9B:31:CF:B9:79
X509v3 Authority Key Identifier:
keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:94:4f:86:5b:21:a8:75:e0:7e:98:99:24:54:6f:50:6f:04:
f0:ef:67:f7:5a:93:62:6c:0e:9c:bc:f0:f2:73:45:5e:63:7e:
67:c2:3e:c0:77:c0:1c:33:45:18:23:74:17:7f:8d:ee:7c:fb:
9f:30:99:8f:69:95:a6:ae:3a:4a:c3:4a:24:7d:b8:bd:4f:01:
3a:51:76:e4:24:fe:2f:f0:c7:ad:d0:79:4b:ef:fe:4b:71:ff:
63:0a:4f:9a:41:18:21:8c:4f:05:2e:e1:9f:9b:7b:78:5f:cb:
dd:c1:6d:d7:ae:19:76:07:ce:cb:6f:53:34:7a:eb:3d:4c:49:
77:b8:c5:54:81:2b:72:e2:17:50:ad:f3:e1:e7:06:38:0e:74:
bf:27:47:12:0f:fa:cc:23:60:53:11:e7:1e:28:69:67:44:eb:
45:1c:43:67:b5:54:a5:f4:81:da:ab:21:76:e4:1c:b0:fe:38:
99:91:18:05:e4:94:7d:1b:7e:87:e0:81:51:aa:f6:17:f1:cf:
d6:8f:f2:94:ef:0a:b1:3d:32:06:6b:d2:76:13:b8:fe:d6:e4:
14:a7:5a:eb:e9:02:27:49:dd:dc:cd:22:dd:d2:53:74:44:b4:
18:91:54:d2:3b:24:83:1b:9c:57:0d:08:bc:0e:f0:1e:dc:08:
23:2b:ed:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:08:45 2026 by rpki-client