This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json)
Hash identifier: DvTMWabpD6KbYQFLhav4VeHlR3Dst29gFlPhILtTOyE=
Subject key identifier: 73:1A:F1:42:7C:2F:CB:71:BB:59:0D:B4:4E:5C:18:E8:43:89:62:53
Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Certificate serial: 0D2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
Manifest number: 0D14
Signing time: Sat 24 Jan 2026 17:44:08 +0000
Manifest this update: Sat 24 Jan 2026 17:44:08 +0000
Manifest next update: Sat 31 Jan 2026 17:44:08 +0000
Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: Nl/zd0hLYqwEczZtR3pDqmQYmneaHm2Md08YkktpR40=)
2: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: rkTwGBJDEcILt7naFyYrumMd/+qJZboX4q6K9aobNao=)
3: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: Q8R6RdYUX7rY4VWbBZw5PBzAwbilsPbivqpkW+dr/Ec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:44:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3372 (0xd2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Validity
Not Before: Jan 24 17:44:08 2026 GMT
Not After : Jan 31 17:44:08 2026 GMT
Subject: CN=697504e8-4aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:6b:61:46:87:63:30:c9:ae:89:d9:3f:4d:
f8:a2:22:8b:88:5a:e1:9d:da:e4:62:52:cd:cf:ed:
96:64:af:1d:72:5d:a7:f3:9a:44:8a:43:2c:98:c7:
60:99:5b:09:2a:6a:41:91:32:d9:4b:38:cb:9a:67:
b7:59:ee:99:16:67:df:0c:f0:b3:aa:f0:5e:5c:9a:
f5:b2:a8:4f:1b:6b:93:5c:a2:60:47:03:53:d2:5b:
a7:92:c2:9e:f8:25:06:b5:58:f6:7a:e2:29:75:a1:
80:56:25:27:8e:05:cc:36:49:92:20:5b:4f:fa:53:
70:14:63:e9:a6:f5:a5:f6:61:a7:c2:d2:9b:b0:7e:
65:86:aa:9a:ad:c9:33:c9:9c:bb:36:53:85:33:af:
09:53:b6:e2:cf:9c:bb:9b:27:58:4c:2c:9e:ee:0f:
b5:55:59:1a:ba:7a:3b:cf:71:ed:71:7d:3e:10:05:
9e:22:6b:70:50:d9:ed:07:54:39:75:e5:7a:d2:ac:
a5:72:c1:8f:c1:49:f1:cc:9c:da:b6:53:e6:3b:d0:
41:22:2f:ea:6b:61:d2:a5:5e:1e:b6:b3:d6:5b:5b:
06:35:f9:0a:ac:94:88:a5:e6:bf:4c:c1:da:45:9f:
8c:5a:bb:13:06:9d:a4:2b:27:53:91:30:ec:cf:46:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1A:F1:42:7C:2F:CB:71:BB:59:0D:B4:4E:5C:18:E8:43:89:62:53
X509v3 Authority Key Identifier:
keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:fc:7b:89:fa:91:7e:a6:13:6a:e9:49:db:4c:7c:9f:cf:2f:
80:33:49:1d:08:c3:0e:0d:b0:47:cd:6f:fb:61:8b:5c:5e:25:
c1:93:3e:37:66:e2:b6:c0:e3:c2:6d:b3:d6:e2:00:87:04:7d:
90:a7:b1:62:b3:68:3e:79:dd:c1:93:63:86:8d:14:fc:eb:54:
8e:a0:ca:68:e6:21:90:f7:62:e9:53:f1:78:aa:63:4d:1d:bb:
02:27:d6:73:14:7f:12:52:46:72:dd:5e:14:1a:47:75:45:e1:
26:b1:8f:47:2a:0d:d4:91:e8:a2:2f:5b:ea:52:22:45:28:81:
96:ad:81:c6:77:e7:f9:8b:d7:f7:59:0a:1b:85:12:0e:e9:60:
37:17:51:c6:8e:6c:b0:76:cb:d2:ae:21:70:a1:ee:d2:e0:99:
da:76:63:2e:ba:55:74:60:ac:23:ea:86:f8:a4:13:c7:40:d7:
50:3c:f0:0e:e6:0f:47:f8:9e:a5:cd:15:e3:0b:be:87:6e:00:
83:f4:a3:e0:25:bc:60:0d:cc:45:ec:6b:53:dc:91:9b:64:54:
13:4c:ef:58:a8:67:24:f8:ab:bd:92:24:12:7f:8f:b1:e0:59:
84:42:32:1b:d2:fe:09:eb:e2:79:1e:76:a6:6d:6e:01:25:e1:
4f:c8:2c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:25:25 2026 by rpki-client