This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
File: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft (raw, json)
Hash identifier: nHJ2e4H9u8mXWeLyho7QhA9VYVFZ4CJWM5jxf6S48V8=
Subject key identifier: 07:F0:86:EA:D1:2D:8F:D1:C9:1D:BD:57:EA:AF:21:97:A3:69:73:A5
Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Certificate serial: 02F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
Manifest number: 02E4
Signing time: Sun 25 Jan 2026 00:34:34 +0000
Manifest this update: Sun 25 Jan 2026 00:34:34 +0000
Manifest next update: Sun 01 Feb 2026 00:34:34 +0000
Files and hashes: 1: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl (hash: DPys4VtpdwoE60NTrR5RKXcHHHCK405FJkzb1SJerFA=)
2: 97FE22F2DA4B11F0BA2C614F91D3641D.roa (hash: UyTmI2kW1DlwxdYRZqJBRQWAZxNLwJSCFQ/YlYMN28I=)
3: F2FD03E4CB3211F08B73F33CC4F9AE02.roa (hash: eafs/wPS9m35JWCg2L50cH9A4hVIgy6eQW+XBulFt7U=)
4: 1BB90D46DABA11F0A08D9BA06CD3641D.roa (hash: W208+/AZnsORqdbbJvVBW/6jMidrM1a1vXE+rl2w2zg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759 (0x2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Validity
Not Before: Jan 25 00:34:34 2026 GMT
Not After : Feb 1 00:34:34 2026 GMT
Subject: CN=6975651a-6a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:62:26:a1:89:51:53:a7:05:a2:43:36:2a:0a:
9a:e2:e8:2f:da:47:1c:1c:f1:b2:62:46:22:d0:f1:
a1:e5:72:37:63:f9:33:25:85:48:f4:af:9a:07:9c:
e7:70:77:c5:7a:c3:94:64:38:52:0a:72:09:d1:3c:
4e:08:a2:e3:2e:e5:ae:15:5b:09:e4:87:55:42:35:
76:7c:28:ab:79:c0:c6:66:b9:9f:61:13:c8:77:84:
01:8f:cb:86:ad:39:53:f3:4a:f5:1f:af:0a:54:8e:
6b:79:cb:78:07:ab:b7:e5:48:c1:5f:43:98:48:88:
b6:bd:32:59:7c:d2:de:1c:17:e5:25:71:17:4b:ab:
12:49:e2:c7:ee:f1:13:6f:c3:44:02:33:bf:3b:ac:
a8:99:53:71:ad:5c:17:59:59:ea:8a:cd:06:34:be:
df:15:4b:9f:95:1d:d1:ab:a5:10:1a:d4:41:e0:b4:
a1:13:f2:f3:02:4a:e8:5e:0f:5d:d6:bb:48:e0:1b:
fa:55:76:f1:61:ed:a9:78:47:24:5b:ac:f2:c5:51:
a0:8c:33:c2:63:81:e9:d9:ce:ac:8a:33:c8:e6:c6:
1d:ac:35:d9:3e:8e:8d:57:f3:35:bd:e9:77:d3:5f:
66:2a:f0:8f:f1:1a:40:36:9c:1e:83:21:e7:e2:be:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F0:86:EA:D1:2D:8F:D1:C9:1D:BD:57:EA:AF:21:97:A3:69:73:A5
X509v3 Authority Key Identifier:
keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a8:ad:63:18:db:c9:03:51:d1:f7:c3:ae:d8:f8:66:ef:8c:
a9:60:19:a6:78:92:d2:ed:26:e8:ac:bf:1c:f6:ec:45:52:d2:
0b:da:ed:cb:b8:a1:0f:a4:e4:b9:04:d3:e0:e6:63:53:62:67:
e8:57:4b:7b:07:d4:83:fe:09:48:05:cc:ba:79:a8:c1:17:6b:
81:bc:86:0c:09:88:3d:1b:a9:76:8c:dc:7f:6b:96:50:8b:2d:
89:c3:2a:01:66:62:68:b7:96:ac:fa:06:cb:63:1b:cb:62:af:
bf:70:7e:29:e2:9d:69:7e:ea:77:c1:44:7e:20:66:57:3e:bc:
a1:24:79:8e:ae:9f:a2:36:6f:37:ad:e9:00:a1:03:e0:7b:00:
66:a5:aa:f3:b0:ed:ba:ee:8c:97:09:a3:3f:8e:87:57:b6:1b:
ce:8d:a4:c4:d7:38:b8:a3:e6:16:10:ba:b4:2b:76:94:28:08:
b4:33:b5:7c:e8:1c:5b:8f:01:8c:b9:f6:f2:6c:d3:05:f4:6b:
8c:ac:80:30:bd:fe:6b:91:26:10:ff:47:a8:15:44:3c:15:e6:
50:65:94:ad:4c:34:c9:66:d7:67:6d:11:0d:44:ea:ec:23:8f:
6e:83:55:dc:86:76:a2:3d:4f:06:7c:2f:fb:6a:87:91:bf:5a:
d1:ca:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:09:09 2026 by rpki-client