This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
File: x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json)
Hash identifier: RdnB8AJPUxk8hUmrAJ5kifrc4e1TnFmob1tEIbfpKUU=
Subject key identifier: 0A:FA:27:EA:2B:55:2E:35:49:6B:92:65:58:70:E5:42:17:FB:5F:07
Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2
Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
Certificate serial: 0734
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
Manifest number: 1447
Signing time: Sat 24 Jan 2026 18:03:14 +0000
Manifest this update: Sat 24 Jan 2026 18:03:13 +0000
Manifest next update: Sat 31 Jan 2026 18:03:13 +0000
Files and hashes: 1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: eFnAJS7Lv9IZQQy/3RF4D0ppk8BQSeT7g85G90+q0MI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl
rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844 (0x734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
Validity
Not Before: Jan 24 18:03:13 2026 GMT
Not After : Jan 31 18:03:13 2026 GMT
Subject: CN=69750961-e37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9c:d7:25:2c:c2:0b:90:cc:0c:6d:c9:b2:28:
99:96:30:3d:4a:9b:2e:2a:0e:73:0d:d6:41:e4:9d:
b0:97:1e:c5:49:c1:bd:da:a4:d3:0a:c5:b6:f8:70:
23:d3:9d:66:01:da:e4:7c:5c:7d:90:4b:b2:4b:8d:
8c:24:8b:5c:81:7b:f0:e9:ee:fe:73:f8:77:a6:2b:
1f:87:be:1b:ac:89:76:7a:87:3c:61:92:92:90:9b:
01:c3:c1:70:2b:ba:07:83:9f:65:a1:1d:07:4b:f8:
f9:b9:dd:19:9f:70:2b:b9:37:47:28:5a:85:8d:40:
35:6b:8d:73:db:a7:62:1b:42:70:d1:42:7f:80:26:
d2:6b:d4:69:24:10:74:a6:8e:a4:97:47:e8:cf:e4:
54:d4:cd:a4:d1:52:79:c9:57:26:d3:68:89:77:92:
87:a9:ce:79:b0:38:1e:42:81:a5:c3:ea:43:69:c3:
ca:a9:ad:c4:84:24:34:02:27:c1:83:d4:79:9a:51:
03:44:b6:15:eb:ce:2b:b5:53:a0:0b:9e:70:8d:f9:
ab:8f:3e:a0:21:10:bd:a2:10:07:54:ec:5f:fb:cd:
78:5f:e0:31:bd:42:92:44:52:cd:dc:9e:71:83:26:
e8:18:58:7f:cd:62:fe:df:c4:06:79:28:b9:ee:b1:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FA:27:EA:2B:55:2E:35:49:6B:92:65:58:70:E5:42:17:FB:5F:07
X509v3 Authority Key Identifier:
keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:79:03:aa:f6:ea:9c:31:a6:74:21:c1:e1:79:87:c9:63:7e:
09:0f:21:b9:45:fb:e9:e6:be:1b:12:3d:eb:ac:77:de:6b:0c:
70:df:f8:95:3d:2a:fe:8a:e4:a5:1e:09:8f:bf:fd:7f:23:ee:
49:9d:82:ba:ed:df:27:a1:c3:7f:b0:f9:9a:c8:34:cb:0c:fd:
b0:0d:a0:13:1b:aa:9b:38:94:8e:92:00:c9:15:7f:70:9d:33:
a7:61:68:e6:35:6a:86:c8:36:a1:15:d4:74:b2:f3:ed:e3:5f:
b2:3c:da:5a:e6:47:c2:63:1a:9e:5b:8b:79:12:89:de:e9:20:
22:27:76:68:7b:fa:76:60:84:af:26:ce:f5:cd:13:38:eb:9a:
c9:60:a7:df:87:1b:fc:ae:6d:db:ab:07:f0:19:83:06:03:24:
cb:19:22:69:e3:31:4d:33:84:fe:27:70:2c:d8:bd:0c:d1:71:
8c:23:7f:98:65:46:4b:ed:df:55:80:2d:05:08:59:d0:96:85:
3b:8b:90:86:77:27:c6:73:fc:a2:a0:2c:60:67:f8:b3:de:ae:
f3:4a:74:6c:8a:28:3f:ec:fe:21:71:a4:54:64:7d:f8:5b:ce:
f5:aa:1d:7d:5b:e8:41:dc:6a:c7:68:21:ea:22:3d:a6:1a:63:
18:5f:81:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:31 2026 by rpki-client