This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.mft
File: 7AffwfGIh38OvP3gtIHMAiw0NrI.mft (raw, json)
Hash identifier: ZY++Hfl/+4brx1lqbp7qw+DL5H2cpvk9OF5qAnmvsxA=
Subject key identifier: 76:D6:E6:01:BD:25:B3:82:64:6C:7C:6B:92:CC:99:E6:55:CD:C6:2E
Authority key identifier: EC:07:DF:C1:F1:88:87:7F:0E:BC:FD:E0:B4:81:CC:02:2C:34:36:B2
Certificate issuer: /CN=A91BEE1D/serialNumber=EC07DFC1F188877F0EBCFDE0B481CC022C3436B2
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7AffwfGIh38OvP3gtIHMAiw0NrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.mft
Manifest number: C8
Signing time: Sun 25 Jan 2026 05:00:33 +0000
Manifest this update: Sun 25 Jan 2026 05:00:33 +0000
Manifest next update: Sun 01 Feb 2026 05:00:33 +0000
Files and hashes: 1: 7AffwfGIh38OvP3gtIHMAiw0NrI.crl (hash: ToGdGifwGOitg6uVT90sxoheWxZRNTg274YLJD/xjL8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.crl
rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7AffwfGIh38OvP3gtIHMAiw0NrI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEE1D, serialNumber=EC07DFC1F188877F0EBCFDE0B481CC022C3436B2
Validity
Not Before: Jan 25 05:00:33 2026 GMT
Not After : Feb 1 05:00:33 2026 GMT
Subject: CN=6975a371-d6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:67:66:40:e9:a4:4d:af:fe:1f:35:ab:43:
aa:1e:15:cd:88:a2:f6:59:c6:31:09:e4:18:96:ba:
fa:85:be:c6:ee:aa:f9:db:39:b7:fc:8a:3a:ee:85:
ca:e7:9f:4c:2a:39:9a:73:bf:72:83:7b:77:bf:90:
ce:0f:b7:38:90:29:e0:d0:7b:8d:ed:3f:db:82:1f:
c1:8e:16:50:57:ff:2d:a5:41:0e:8e:ab:10:db:f9:
ba:8f:69:99:9c:aa:80:34:45:dc:53:1e:27:92:3e:
11:29:d5:9f:4f:75:a3:c1:b8:cc:a8:41:c4:ad:a8:
3d:d4:5d:db:4c:78:1b:6b:28:1f:fe:68:25:9b:3f:
2b:e3:53:a8:09:e2:78:cb:cb:d4:d3:f9:5a:18:29:
4c:66:d1:ab:35:6e:af:33:f2:1f:64:84:7e:f6:c2:
a8:32:15:79:13:64:c8:ee:4b:ce:83:8a:e3:d5:9f:
af:dc:80:ee:eb:ed:3b:d5:54:80:d0:b2:3f:6c:ca:
2d:d4:2a:a8:66:56:d1:59:56:34:b7:30:83:79:66:
4a:17:9f:c5:f2:e1:95:1f:c3:74:e3:28:0b:0e:eb:
be:97:60:5a:d9:01:c8:28:89:96:8f:61:e0:72:82:
4e:96:a1:22:d3:3e:d9:49:0e:36:c8:6a:24:7f:db:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D6:E6:01:BD:25:B3:82:64:6C:7C:6B:92:CC:99:E6:55:CD:C6:2E
X509v3 Authority Key Identifier:
keyid:EC:07:DF:C1:F1:88:87:7F:0E:BC:FD:E0:B4:81:CC:02:2C:34:36:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7AffwfGIh38OvP3gtIHMAiw0NrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f2:d3:fb:af:d3:ca:57:48:32:95:28:f8:5a:fb:7c:b9:83:
cb:86:09:34:0e:e8:dc:f0:11:1c:31:6f:0f:f3:29:57:18:85:
d9:35:96:d6:16:3d:18:f7:11:0e:73:69:7a:fa:3a:17:79:ee:
4c:f7:b2:3f:45:df:ca:98:44:23:62:c1:11:7d:df:a0:96:60:
25:02:23:d5:3e:3c:30:e3:a3:45:99:d8:59:39:6f:f9:af:04:
07:35:0c:da:a9:a8:cc:e5:43:c4:12:b4:a5:15:8d:02:bf:89:
07:c3:6b:14:49:df:4f:9c:bf:27:60:9b:63:d7:8a:63:29:92:
c4:cf:d4:42:bd:1b:3f:fc:65:8b:34:47:c6:1d:7a:02:4c:09:
0f:ee:fb:44:ce:29:23:cb:16:12:ed:d0:58:1a:d2:3a:84:b9:
c6:ad:56:cd:b0:95:08:5c:5e:92:23:1b:c0:b6:5f:c4:c9:c9:
13:2e:8a:b4:fe:cd:ff:3a:0e:4f:ca:2c:13:38:7d:70:5b:c7:
f8:59:ec:8f:f6:f6:b4:4f:dd:f1:cc:cd:31:05:d6:c0:c3:91:
7a:ac:76:7e:9d:2e:44:19:c7:3d:91:3d:bc:f7:9b:a7:7e:45:
b6:6b:5a:7b:03:67:63:ed:67:ef:69:e1:ab:fa:c2:d5:86:52:
70:bc:65:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:03:16 2026 by rpki-client