This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
File: 96B_epkcIaJc05qyCt5Po7XgXRU.mft (raw, json)
Hash identifier: juO93hvYV7yDKHEiWv4iLZyzlSKJdQBZOnPKPt1kiZ4=
Subject key identifier: A5:A5:EE:2D:08:D4:22:66:38:7F:32:4F:9D:A6:95:E4:74:5D:3D:34
Authority key identifier: F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15
Certificate issuer: /CN=A91BEC2F/serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15
Certificate serial: 044B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
Manifest number: 043E
Signing time: Sat 24 Jan 2026 23:33:09 +0000
Manifest this update: Sat 24 Jan 2026 23:33:09 +0000
Manifest next update: Sat 31 Jan 2026 23:33:09 +0000
Files and hashes: 1: 96B_epkcIaJc05qyCt5Po7XgXRU.crl (hash: 5PUO0IHX334CRLI7kbX7N9XBgWM+U0Aqxqa079yDVtI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl
rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099 (0x44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEC2F, serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15
Validity
Not Before: Jan 24 23:33:09 2026 GMT
Not After : Jan 31 23:33:09 2026 GMT
Subject: CN=697556b5-8a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:15:67:1a:61:9b:25:1b:ac:29:09:d9:a7:
b2:c1:ab:4d:12:f8:83:11:6f:67:8c:30:1b:18:df:
29:c9:d0:70:ea:3c:88:b1:05:0d:39:dd:d7:34:4b:
1a:ef:59:f1:d9:ec:b2:8a:db:45:03:20:e5:2d:38:
34:01:52:ad:b8:21:19:1e:ff:74:51:aa:c4:75:98:
a0:a7:de:e0:c8:16:66:49:cd:ac:a3:56:d5:56:78:
a1:c1:88:07:19:bc:d7:44:ba:8d:0d:e0:b2:54:a3:
b7:94:d9:d9:54:14:51:6d:25:3f:d5:e4:0b:ba:3f:
f8:17:d5:64:bd:49:89:19:63:f9:26:6d:bf:16:fb:
47:f1:b5:07:22:97:41:75:a4:35:2d:ac:66:88:ca:
ec:d2:e4:97:c7:3a:e0:9e:53:b9:2f:64:ba:42:3b:
92:11:b2:76:ba:ed:a4:b2:28:7a:da:06:08:80:2e:
27:e0:db:09:d2:18:6b:33:b8:f1:9a:53:1d:94:c4:
fa:f7:82:8d:7d:c1:f6:d7:a3:74:58:26:e8:89:d2:
a6:fa:0a:37:21:f4:8a:82:52:57:5a:8b:ba:ae:09:
3b:29:94:bf:44:6b:83:37:14:d0:6e:e4:1b:62:f2:
25:e0:27:20:5b:64:0f:33:28:f2:45:47:56:52:ed:
d1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A5:EE:2D:08:D4:22:66:38:7F:32:4F:9D:A6:95:E4:74:5D:3D:34
X509v3 Authority Key Identifier:
keyid:F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e1:b0:ff:e7:d7:8d:85:bf:3b:e8:57:3f:c2:ea:a9:b8:3e:
72:60:19:ad:a5:be:bc:eb:34:65:a0:33:68:2b:67:11:37:4b:
29:6f:65:fa:86:3b:27:a4:77:20:fd:d7:f2:bc:23:84:a8:69:
44:ba:ad:48:9b:c8:6d:ca:a9:fe:d8:3f:c5:c1:7e:53:97:9c:
da:15:e0:c6:fe:76:e7:11:b9:7c:0e:83:15:72:1e:59:60:4c:
56:36:f9:f8:7c:f3:33:9d:c1:5e:04:dd:b4:5f:b0:6d:3c:d4:
8d:45:61:91:09:90:25:17:73:0e:b8:3b:b1:8d:4a:3c:34:45:
92:27:b6:65:b5:11:ec:46:f5:cf:06:e4:a4:ab:ff:9d:07:7c:
46:5e:5b:75:ac:db:12:26:b8:f3:33:d5:53:20:7a:e3:91:6a:
1f:a9:3b:7b:55:4a:6a:b7:f9:25:fb:3e:5b:4c:3c:1f:62:8a:
7a:c5:7a:64:df:1e:49:6e:91:42:85:ac:64:40:c0:87:6c:5b:
9f:7a:e5:6d:53:5a:57:06:85:8d:82:55:8e:d8:be:ee:b2:c6:
9a:94:cc:99:c7:4a:75:9c:1b:5b:dd:e6:3f:92:aa:99:d5:0c:
f5:52:d1:ea:57:57:95:6f:44:67:df:4d:79:78:f3:29:d4:ab:
bd:c2:22:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:01:50 2026 by rpki-client