This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json)
Hash identifier: T+pvExVok6m2WpRCCzqtIV14y3PCBnA64/zqINRpozI=
Subject key identifier: 86:CF:C5:68:F7:B2:E9:69:C6:DF:0A:D9:57:2F:95:0D:49:24:D0:32
Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Certificate serial: 03BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
Manifest number: 03B5
Signing time: Sat 24 Jan 2026 23:51:22 +0000
Manifest this update: Sat 24 Jan 2026 23:51:21 +0000
Manifest next update: Sat 31 Jan 2026 23:51:21 +0000
Files and hashes: 1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: vqNmLqR7PP1lEVYLTJXCtiAxSLGBy6WtTbFTCHRFeUw=)
2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: AvM4EHFc35a+/i0JOm+PYVnypM/t1zc/v7lGdHSDzQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954 (0x3ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Validity
Not Before: Jan 24 23:51:21 2026 GMT
Not After : Jan 31 23:51:21 2026 GMT
Subject: CN=69755afa-29eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1f:b6:80:5d:dd:5f:15:55:4f:0c:30:9c:8a:
73:49:5f:19:dc:90:a3:42:fc:ea:7a:9d:39:2b:17:
5e:af:d5:7f:8b:f0:5e:6e:82:e4:7f:f3:03:a9:04:
53:0f:3c:f8:55:60:8c:dc:3e:f5:cb:2c:81:6c:f3:
98:80:d9:d7:16:87:4e:29:54:04:fe:34:f8:6d:40:
3d:21:15:c3:79:56:b8:52:f9:27:ef:8d:55:f2:2e:
65:5b:89:49:cb:32:02:e8:3c:b7:72:45:84:4a:bb:
8f:47:8a:89:0c:20:1d:1d:20:ea:46:13:de:fa:fc:
89:59:87:13:9f:82:cb:6f:5e:bb:10:1c:17:89:4c:
15:a8:a7:53:ae:f4:3c:43:46:f4:c0:07:bf:8a:ae:
a7:e8:eb:94:0e:ed:ce:46:a7:fc:33:1f:fd:1c:79:
00:10:d2:d9:e2:13:e6:bc:66:87:c0:10:67:e1:6d:
8d:a1:60:07:f8:e9:bf:7b:9a:1b:17:fb:13:49:bb:
a9:29:92:5a:13:a7:b6:f7:f3:0b:89:51:0f:a3:bf:
7e:6a:40:c2:d5:95:af:88:79:5e:75:4a:ca:f9:9a:
d0:5e:f0:0f:67:5e:0e:6f:e6:33:02:d9:51:2a:1c:
61:2b:28:23:35:bf:cf:c8:e5:26:21:58:dc:42:cc:
b7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CF:C5:68:F7:B2:E9:69:C6:DF:0A:D9:57:2F:95:0D:49:24:D0:32
X509v3 Authority Key Identifier:
keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d7:77:b0:fd:db:43:f4:1a:1d:4d:f1:9f:10:5a:9d:b0:5d:
24:4a:f9:a7:cc:48:e8:b5:7d:84:db:ed:7a:7b:54:c8:04:0a:
0e:e6:32:c0:56:2d:6a:f5:35:bd:13:0c:59:b8:3b:cb:b4:e6:
ec:0b:b5:08:01:96:02:a5:1d:82:1a:a7:9a:4b:0f:0c:62:c8:
ba:bb:b0:a5:7f:0b:14:0e:a7:b8:65:1a:29:0e:0e:ff:41:cf:
94:8e:0c:ab:8a:14:46:ce:c5:40:f8:5d:c9:15:59:f5:60:77:
4b:78:e9:86:e8:69:4c:29:d3:08:b8:bc:6a:6f:7f:19:a2:f8:
68:53:34:9d:60:0d:7d:a6:f6:d2:15:e4:f9:13:cd:38:3a:92:
b9:fa:d4:2a:79:83:47:f2:e7:dc:53:1d:99:09:17:5b:c2:a2:
25:42:d7:27:71:64:53:b9:b4:9e:cc:0f:7b:ee:4c:6d:71:44:
14:75:22:46:c2:ee:4f:e4:a6:2e:89:57:d8:b7:3e:d1:b3:a4:
f5:3b:be:93:a3:81:f1:ba:9a:f6:c2:c1:35:9b:b7:55:a1:43:
78:fe:01:07:47:55:df:e0:04:ae:06:2b:62:8f:ff:9f:b0:19:
d0:d3:3e:b4:1c:56:9a:3e:f5:8b:ed:c1:66:56:9d:47:af:b6:
f2:3a:4a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:10 2026 by rpki-client