This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
File: vUxEHwLHrdQvpiQugzHZP1nlGDo.mft (raw, json)
Hash identifier: vD+2Gyq1FtCFUJnqrxoQ2RkHD5xLra5fgw/zyQmim+0=
Subject key identifier: 34:50:17:89:92:64:BB:F7:7A:3A:64:E8:64:D8:8D:35:A0:16:C8:0E
Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A
Certificate issuer: /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
Manifest number: 0249
Signing time: Sun 25 Jan 2026 01:13:11 +0000
Manifest this update: Sun 25 Jan 2026 01:13:11 +0000
Manifest next update: Sun 01 Feb 2026 01:13:11 +0000
Files and hashes: 1: vUxEHwLHrdQvpiQugzHZP1nlGDo.crl (hash: +mVxtPs295mrvgMaGwE2xS0BlD3Vhh4Wez6VLOWRXxc=)
2: 7A5433D6A37811F083057A2CC4F9AE02.roa (hash: Azo/7D1+QWPIasd8atIdZkcvQFSHPMDV++2Sw9E53SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl
rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C67F9, serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A
Validity
Not Before: Jan 25 01:13:11 2026 GMT
Not After : Feb 1 01:13:11 2026 GMT
Subject: CN=69756e27-9bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:18:cf:2b:32:a5:3c:21:a9:2a:f3:5c:14:
79:40:a4:1b:97:8b:5c:eb:4d:63:e7:9a:78:9e:51:
4c:0e:0d:33:64:67:b9:6f:2f:e0:12:a1:b4:fb:12:
d9:17:9b:ea:a6:ec:c3:94:61:8e:d2:42:76:32:5c:
49:ac:da:54:55:63:f0:a3:37:4e:b7:5d:84:0c:1c:
f5:ba:d0:b6:04:d0:b1:b1:76:ad:2e:ce:0b:e6:73:
29:ce:a6:cd:4b:fa:8d:cf:ca:0c:41:78:9e:b8:4c:
8f:15:bd:31:fa:1a:01:8a:79:42:7a:9e:df:c8:a4:
d4:47:1e:bd:8c:9d:b1:a1:c7:06:c9:05:91:15:6d:
39:6a:7b:70:7a:b6:3c:cc:31:9d:5c:d8:86:31:fc:
11:c5:b3:7f:19:0e:e6:c6:93:10:c4:90:7a:5f:7b:
7e:d0:af:38:5a:76:bb:4f:ba:a5:bf:17:2e:8c:75:
00:36:4c:f9:8f:fc:2a:c8:42:a9:c4:3b:4a:72:86:
91:d3:d0:0e:8b:31:66:ee:c8:c7:c3:2f:69:fd:f3:
ba:70:d5:2c:ce:71:0f:ec:e6:4e:b0:35:53:3b:74:
61:75:a6:82:40:46:f2:ce:01:02:e3:f6:35:e9:31:
db:17:6f:42:62:87:ff:3c:53:7b:95:e8:28:e3:f8:
6c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:50:17:89:92:64:BB:F7:7A:3A:64:E8:64:D8:8D:35:A0:16:C8:0E
X509v3 Authority Key Identifier:
keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:ff:89:d9:48:fb:29:54:a7:da:9b:3b:d9:de:2e:f9:1b:cd:
c7:d6:d6:69:d0:b9:ce:dd:48:10:8e:1c:71:8f:00:17:02:1e:
49:83:1d:8e:6d:8f:15:e5:dc:39:4f:c0:1e:da:28:a3:44:a2:
a4:c2:a4:dc:d4:cd:8b:c4:57:68:61:07:8d:6c:ba:88:0f:b0:
b1:0e:f8:0b:04:e0:67:92:ab:ef:9e:34:29:5f:c6:cd:48:7e:
f0:62:14:9a:f5:15:ec:ff:fb:f9:f0:e8:ad:06:d1:dd:ea:45:
dc:63:3b:3c:07:bc:5d:38:30:58:a0:21:b8:c8:0f:ba:e7:5a:
3f:ef:ba:08:6c:62:d3:65:10:f9:c6:04:bb:37:5b:7d:f9:16:
31:24:19:49:fe:a9:35:a0:11:3e:89:ca:62:d9:79:ba:ad:e3:
42:92:72:2a:7d:f8:08:ef:f2:09:12:08:6f:06:a4:af:36:0c:
ee:5c:1a:50:bc:d7:5c:0d:cb:38:8e:bd:0f:74:f6:dd:f2:ed:
ab:f6:22:86:80:fb:f4:a3:3d:5d:c5:9c:6b:f7:e0:75:d9:5b:
f8:78:4f:e8:81:7e:58:42:db:0c:d3:57:66:e6:43:63:51:8e:
15:93:c7:a5:7b:02:dc:cb:ce:20:8f:0a:27:d9:ec:77:0f:90:
ef:b3:9f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:06 2026 by rpki-client