This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
File: vSMtmLoKMv17e4shg0wFGXb4ZGw.mft (raw, json)
Hash identifier: nu6yIzA6rrk7nKzQK8j5XouZxi0jE181k98XkuGOuUk=
Subject key identifier: C8:D2:D2:2D:DE:39:54:0F:DD:1A:EF:17:C4:B8:28:25:45:0E:C1:86
Authority key identifier: BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C
Certificate issuer: /CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C
Certificate serial: 063D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
Manifest number: 0638
Signing time: Sat 24 Jan 2026 22:00:27 +0000
Manifest this update: Sat 24 Jan 2026 22:00:27 +0000
Manifest next update: Sat 31 Jan 2026 22:00:27 +0000
Files and hashes: 1: vSMtmLoKMv17e4shg0wFGXb4ZGw.crl (hash: n/FEeGWp1wXVU9BiC0kMS5IWpgOLfeDUC2az83YZV2A=)
2: 008B17CEC2B611EB80F1B27EC4F9AE02.roa (hash: OtQrF2ELmU+GbG6fbMpToUTy3D5OXRRs3Yb8jPpEVe0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl
rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1597 (0x63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4D37, serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C
Validity
Not Before: Jan 24 22:00:27 2026 GMT
Not After : Jan 31 22:00:27 2026 GMT
Subject: CN=697540fb-ed1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:75:71:cc:53:50:a5:89:3f:dd:3f:9a:f5:
46:1e:e9:7d:f4:9b:a6:d1:a7:c2:9f:33:63:8d:f3:
39:8c:4e:ee:a4:da:1c:d2:87:f9:5d:9c:54:f3:a6:
b4:3b:73:28:cb:6a:cf:e4:a9:41:ae:43:3f:22:4c:
d5:ab:82:4b:ac:cd:c8:e2:7c:87:5d:4e:1e:39:ea:
10:ae:21:ee:27:f7:03:55:cf:53:83:61:40:b6:2b:
52:ae:17:c0:89:08:b0:c5:3b:db:80:bc:10:a1:f9:
4d:e8:8f:46:59:a7:6e:bd:ee:b1:e6:60:b5:81:9e:
69:34:79:2b:74:b1:0a:69:6d:42:89:a0:98:48:c6:
6e:17:34:72:c2:2e:b2:b6:92:36:6f:7b:4c:9d:64:
4b:e0:5a:64:63:a1:c4:fa:f3:c3:90:59:38:a6:38:
26:a2:55:f8:3d:82:0e:b0:28:1d:7b:88:c1:8b:ca:
f4:08:c4:4f:81:7c:b1:7b:6a:65:48:13:79:00:19:
04:be:54:aa:e7:86:8e:98:f6:58:f0:43:4e:c1:36:
6a:56:cc:96:f6:7c:0d:0f:f0:7e:17:c9:8a:1a:96:
53:4f:11:b0:06:5c:c0:11:7f:bf:61:cf:f0:7c:e6:
80:69:08:d0:0d:c4:a0:5a:1f:83:cc:93:43:8a:a1:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D2:D2:2D:DE:39:54:0F:DD:1A:EF:17:C4:B8:28:25:45:0E:C1:86
X509v3 Authority Key Identifier:
keyid:BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:85:20:1d:fc:05:8f:9d:df:12:a0:20:fa:8f:13:25:f9:06:
3f:31:5e:98:28:6e:ab:fc:d3:3f:05:fe:9f:ba:3a:71:64:df:
ae:42:de:27:c8:cc:90:f2:5f:e9:4b:a9:68:0d:0f:e5:c7:fa:
3e:bf:9a:60:04:ef:df:f2:94:15:3e:a7:34:bb:db:07:34:6b:
44:60:ae:1a:3c:06:7c:35:79:04:f6:c1:dd:03:db:36:f8:46:
04:f7:18:ec:86:8d:1d:62:9f:0e:da:7a:a8:a6:3e:c9:88:65:
bb:ba:10:64:fa:7a:d9:5e:38:44:63:c6:d4:d0:52:5f:85:06:
4c:cd:3a:be:f8:da:db:52:1f:88:cf:61:73:f2:b0:01:ab:df:
57:12:78:be:34:58:bc:ff:74:0f:65:6a:43:6b:b7:f5:4f:e0:
07:1f:99:f3:3d:d4:81:6d:8b:ed:1a:44:49:7c:15:0a:de:e5:
fe:a0:d2:4d:2f:bf:f7:60:bd:04:da:89:5f:f5:09:54:67:98:
6d:dd:cf:11:e1:2c:95:8b:47:d8:1e:f2:20:95:c2:f2:4e:70:
fe:69:3f:e1:9f:04:63:44:da:cb:fa:94:cf:12:86:10:e7:74:
de:0c:6a:e7:68:3a:b5:37:9c:37:7b:a9:3c:bb:2a:bc:36:9e:
b1:a6:4f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:35:11 2026 by rpki-client