This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
File: vY48wqk9XbzYQnUJc4oxS_kMiH0.mft (raw, json)
Hash identifier: EVEr2I0Jwn5pWiFs1pW7lp1LfbnBuIaaLEJZvmkn410=
Subject key identifier: 75:74:90:97:DC:A8:81:00:05:E8:8B:FD:0B:28:B4:0E:BD:97:56:9A
Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
Certificate issuer: /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
Manifest number: 2E
Signing time: Sun 25 Jan 2026 06:41:30 +0000
Manifest this update: Sun 25 Jan 2026 06:41:29 +0000
Manifest next update: Sun 01 Feb 2026 06:41:29 +0000
Files and hashes: 1: vY48wqk9XbzYQnUJc4oxS_kMiH0.crl (hash: R6E1Wmzgl312Kd9v75HIk1Dgmd0e6LdiZwVDeoGkfsk=)
2: E9A639DAB9EB11F0AE27CB70C4F9AE02.roa (hash: rEHYvI4H6kzy3QLBvK5c7/+2A8OlyxQVAExaC8Q6VxQ=)
3: 79734D6AB9EB11F095C2C735C4F9AE02.roa (hash: zTRiAtvXJqXVBRjtXMDww/8yB6SUllc65zHvKU0WltI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Validity
Not Before: Jan 25 06:41:29 2026 GMT
Not After : Feb 1 06:41:29 2026 GMT
Subject: CN=6975bb19-5145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:b5:1a:ba:f3:56:5c:11:ec:8c:de:c1:cc:
c0:fc:74:7c:9b:ab:9d:3e:77:dd:2b:64:b8:2d:f3:
58:d3:7a:a1:f2:0b:ed:e4:63:c0:c5:5e:ce:15:8c:
9f:9d:67:66:88:9f:1f:28:d6:c7:c2:55:81:31:68:
62:95:1e:f9:75:95:45:54:ad:e3:82:a1:33:b3:c2:
1d:c3:fa:a0:81:af:30:4e:8b:b0:12:c6:a3:3b:2d:
ce:21:1c:bf:a7:b7:1c:6c:3a:c8:b8:18:f6:34:86:
75:26:48:f9:a9:ab:45:2c:1d:6e:ba:a6:0c:3c:52:
4f:ee:4e:3a:25:ca:9b:97:66:eb:25:74:26:a7:07:
fd:69:09:a5:45:2a:02:83:2f:6d:e4:82:76:63:3e:
d8:4a:e7:3b:54:85:fe:fd:3f:4e:bc:7d:e7:e1:4d:
d5:5c:55:84:24:3a:53:a6:fb:74:33:a5:ce:81:ec:
0e:64:df:b9:a9:5b:bf:11:f4:eb:26:36:32:06:82:
d0:31:e5:4f:cd:a3:9f:ef:93:d9:49:2d:d3:08:ed:
63:6b:39:ad:85:be:78:f4:38:0c:be:ee:ad:32:d4:
8f:da:fe:66:be:14:d6:31:41:a6:f2:8e:c0:5c:31:
3b:66:bf:cd:94:93:ea:e6:34:a0:89:0e:f6:9e:7e:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:74:90:97:DC:A8:81:00:05:E8:8B:FD:0B:28:B4:0E:BD:97:56:9A
X509v3 Authority Key Identifier:
keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:16:5a:ed:9b:b7:83:79:40:cf:88:41:b5:47:c3:dc:95:87:
fc:b1:78:11:f5:f3:9a:bc:b1:d8:e9:9b:84:b8:f4:6a:98:4c:
d0:54:78:d6:c9:03:57:15:58:da:57:9a:87:11:fc:3d:2b:00:
43:aa:6a:ca:67:9b:9b:fa:a5:07:87:10:76:a4:30:04:77:01:
2c:87:7c:9e:98:cc:aa:5f:c4:7c:8b:56:0e:03:15:99:23:dd:
db:85:90:90:56:b2:4e:5c:0f:a8:7e:90:3f:05:1f:6f:80:4d:
df:e4:45:2b:43:c7:92:e7:c9:dd:5c:61:88:ff:56:72:e0:cf:
d7:ff:d0:9f:ea:99:99:20:b5:c2:f0:94:59:02:53:0d:b1:64:
e0:89:90:c6:25:26:36:b4:d2:a1:d0:72:12:d8:5c:f9:c5:49:
4d:ea:8a:e6:da:e4:25:6f:98:34:d3:bd:31:a6:55:11:83:90:
61:1a:59:c6:f1:3d:9c:dd:77:64:d3:eb:69:a5:f4:8a:47:6a:
99:e2:75:04:21:22:01:72:4a:e8:cf:ac:4e:39:97:e9:47:fc:
2d:0b:29:fd:8e:55:4f:be:cc:9c:b1:03:ea:18:77:f1:51:a3:
75:3f:c4:e1:95:c5:b6:f9:f2:6b:82:60:7d:1e:a0:64:63:bb:
bc:1f:14:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:15:50 2026 by rpki-client