This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json)
Hash identifier: ghy3mvjzLsuhiDlewWuLYLyfeAyVjkyaGFh4Op6Mtv8=
Subject key identifier: 4C:82:48:1D:61:A2:EA:D3:F8:6C:0F:3C:CB:39:91:5A:3D:93:68:82
Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Certificate serial: 0B5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
Manifest number: 0B40
Signing time: Sat 24 Jan 2026 18:47:54 +0000
Manifest this update: Sat 24 Jan 2026 18:47:54 +0000
Manifest next update: Sat 31 Jan 2026 18:47:54 +0000
Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: zaubIJ8V4WnoI4GrP1H7ZfWFZq1XF1g2sgp79C9cIC0=)
2: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: AlDXjMzrluQLs6V85p5i3jcfN6x00fmAUpJ1+5KxZR0=)
3: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: DR5F6HRqYYMo1uwv7ihEplZzpoKgREyzR6TXxsIOhyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2908 (0xb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Validity
Not Before: Jan 24 18:47:54 2026 GMT
Not After : Jan 31 18:47:54 2026 GMT
Subject: CN=697513da-fce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:ff:54:7c:f5:73:f6:9f:8b:90:d9:4d:58:
57:53:d3:ec:17:f9:8e:20:24:1e:38:5f:d6:21:17:
e4:26:9f:07:81:95:ab:3d:ff:7b:15:c0:10:f2:51:
5e:ea:6f:70:64:ff:0a:3e:04:ae:8f:c3:e9:4d:5c:
c7:e1:ae:2d:34:57:b5:88:e6:72:32:03:ce:21:7d:
e5:d9:7d:0f:2d:48:f4:fa:bf:86:02:bd:9d:7f:0b:
1e:f9:fc:7b:dd:f1:4d:bb:77:e4:bd:03:4a:2b:40:
b9:df:69:35:ad:64:5e:bd:64:f0:16:b3:5b:7c:4a:
6f:f9:a3:c7:5b:99:35:73:f4:aa:0a:c1:d1:53:41:
09:81:90:dc:f0:fb:cb:ec:33:8c:8f:ea:25:a5:1f:
68:ac:2b:a1:0a:ee:f8:87:22:e2:a4:e2:2d:08:f7:
ec:eb:2b:46:9b:fe:55:b2:8f:f2:d4:db:f4:8b:f8:
14:57:d9:73:98:63:bb:b8:7c:75:3b:2d:3e:d4:9c:
0f:6b:ef:81:6d:83:44:4f:6b:15:f6:8c:d5:76:01:
c0:ba:cd:53:cf:c7:27:0b:37:8a:e1:d0:cc:cb:91:
a6:20:43:97:fe:0a:ca:a7:19:bf:a3:4f:42:74:0d:
eb:a1:a6:ae:8c:f2:1a:df:8e:95:7d:3c:2d:06:a7:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:82:48:1D:61:A2:EA:D3:F8:6C:0F:3C:CB:39:91:5A:3D:93:68:82
X509v3 Authority Key Identifier:
keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:be:c6:15:c6:55:3e:19:ad:c6:f4:d2:7f:86:b6:c0:33:9e:
32:1f:db:0c:d8:6b:6f:f4:6f:38:03:30:82:a6:3f:79:88:8d:
df:4f:0c:49:2a:f6:83:63:6c:0b:2d:7f:13:f3:3b:e6:f9:ea:
ca:ce:22:25:7e:bf:7e:cb:26:b9:c6:d7:4f:1a:5e:68:a3:f7:
71:f2:14:aa:1e:4a:70:1b:b2:a0:0c:ba:1b:59:db:92:87:69:
2e:49:88:f9:96:1b:43:bd:20:42:db:54:f2:35:ee:46:f8:ac:
8b:a2:32:9b:40:a3:4c:00:49:79:d7:e0:fb:52:95:33:64:96:
00:d1:0d:c3:39:8c:ae:b5:30:f6:c6:4b:75:70:d8:a1:ff:fc:
ee:d8:b0:bd:d4:91:03:77:15:4b:2c:a9:9e:38:39:ca:d8:82:
ae:9f:bc:b8:1d:c7:a4:8b:6a:29:97:dc:3f:bb:4c:28:40:4f:
b7:20:98:cf:5a:00:0e:33:84:5f:4a:d6:ca:9e:a4:c9:73:ae:
ac:34:aa:1a:f9:fe:ef:83:35:9d:1a:38:d1:21:d8:be:e6:63:
0b:fa:b9:f1:07:22:41:7f:33:10:00:dd:a8:72:7a:1a:4a:cc:
c5:17:cb:d2:eb:a1:01:fc:e5:8b:86:6d:54:d3:da:59:61:34:
13:64:87:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:47 2026 by rpki-client