This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
File: P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json)
Hash identifier: BS0c7IxwW+cehysQz3Up+fBGAyVkXoIyIPDHRyzNQNY=
Subject key identifier: 76:B5:AB:21:4C:5E:0B:84:74:AB:E1:A4:12:68:B2:7C:5E:15:73:14
Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67
Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67
Certificate serial: 0CC5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
Manifest number: 0CBC
Signing time: Sat 24 Jan 2026 17:56:45 +0000
Manifest this update: Sat 24 Jan 2026 17:56:45 +0000
Manifest next update: Sat 31 Jan 2026 17:56:45 +0000
Files and hashes: 1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: yxwySCL0Uy9AIuAYL6eWA7r2FBzYpiKZA/PuBrwJZoI=)
2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: 78Vf6/fB7sknA1Wt2VtN9AZj7sBbXgPyMuxI8cL1zlU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl
rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3269 (0xcc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4D8E, serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67
Validity
Not Before: Jan 24 17:56:45 2026 GMT
Not After : Jan 31 17:56:45 2026 GMT
Subject: CN=697507dd-f62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4f:d3:f2:f1:b4:5e:b7:f4:e7:94:96:db:f7:
13:13:4d:ed:5e:58:d3:b9:91:b5:8b:81:4d:fe:08:
63:e9:84:fa:7e:d4:6e:a1:4d:84:6d:25:48:fd:36:
5d:7e:f0:ed:e5:e1:b8:7d:fb:19:5b:67:7d:3c:cc:
52:15:83:58:74:dd:e2:3e:0f:9c:66:f5:b4:f7:69:
5d:c1:86:93:4d:3c:82:4c:df:68:d9:ef:db:23:f3:
6c:bf:4c:02:9a:d6:6c:4b:c3:2d:08:5c:01:db:68:
41:ef:63:1c:70:17:0f:1b:ea:50:d9:b9:69:f6:f3:
97:38:df:85:bc:f5:1e:41:4b:d2:05:70:17:99:04:
2a:cb:76:dd:d9:ba:17:de:4f:0d:2f:7b:4f:d1:5a:
42:a7:43:e2:55:f3:6f:73:c8:b4:88:49:bd:5d:34:
ca:ab:53:e8:19:d1:1e:4c:b6:9b:8e:21:cd:a5:f4:
d8:6b:d6:05:d6:9e:f3:00:47:1c:1a:bd:b6:77:9d:
ff:69:5b:64:9f:6e:01:13:a4:95:49:56:b4:76:ba:
40:84:26:ad:71:b1:c5:c8:cd:f7:cb:6d:0a:21:1d:
fc:80:f5:5a:e5:20:12:77:da:a4:d1:bc:4d:dd:c4:
ab:3b:48:51:a3:e4:44:39:05:4e:fe:de:4e:9e:c4:
d8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B5:AB:21:4C:5E:0B:84:74:AB:E1:A4:12:68:B2:7C:5E:15:73:14
X509v3 Authority Key Identifier:
keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1d:2c:de:af:2a:80:15:b7:40:75:df:ea:4e:31:89:44:80:
ec:e8:1f:6d:48:55:99:d2:cc:24:16:58:f1:fa:6c:2e:65:0b:
bd:a1:d5:f9:8b:56:fa:1f:6f:57:e3:c0:97:12:f1:58:7a:30:
4d:c7:6a:3b:57:88:b2:a1:8f:00:16:1d:06:b7:b2:e7:7a:4a:
24:e8:72:0a:bb:15:29:4d:d4:99:a4:2a:03:ce:51:d4:0b:dd:
0c:c9:80:20:d0:a6:aa:b8:df:5a:56:21:7c:a8:14:5b:8b:c0:
fb:1f:e6:92:d6:8e:68:e6:5b:45:47:e2:df:f7:68:e8:bb:ee:
3e:30:ea:ad:b2:0b:64:7a:33:3d:4a:90:b6:e7:43:99:82:4f:
8d:7d:88:35:5d:99:83:cb:26:77:0a:2a:b4:ee:29:aa:5a:a3:
80:f9:e7:37:63:fc:73:a0:fa:c5:e1:bb:d1:1b:1a:22:6b:6a:
ab:20:20:ac:c1:9b:13:73:83:59:6c:83:65:a0:2b:d4:4a:28:
e1:ab:92:aa:84:8e:94:ca:a5:ee:50:aa:e9:95:41:73:df:b7:
35:e3:cc:c6:45:08:1e:d0:54:4a:a3:1d:3b:78:db:65:f3:98:
bb:34:62:00:61:ab:54:63:c2:65:e0:af:8c:e9:37:2c:b9:00:
70:21:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:01:31 2026 by rpki-client