This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
File: 1sP4E3joVAB4unmUQu7b7HgOD3s.mft (raw, json)
Hash identifier: v4fu6y+p14Qd0Ntak1kR+ui6+ftn8aJq9AwRIT8KYYE=
Subject key identifier: 48:64:77:42:19:EA:97:02:C5:E8:5C:93:09:6A:90:62:3D:6C:5B:53
Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
Certificate issuer: /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Certificate serial: 1BC7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
Manifest number: 1BBD
Signing time: Sat 24 Jan 2026 16:02:12 +0000
Manifest this update: Sat 24 Jan 2026 16:02:11 +0000
Manifest next update: Sat 31 Jan 2026 16:02:11 +0000
Files and hashes: 1: 1sP4E3joVAB4unmUQu7b7HgOD3s.crl (hash: 58DKOY4pgEs6tLoMtDSZCsUcMW2RxX9dnsiYBUsYLMk=)
2: 020A31F812B011E7A7C42661C4F9AE02.roa (hash: XaEt+47rBdBuIr1qA7i6V/F+AJaSo/IaiolwteWY5gM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7111 (0x1bc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD5, serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Validity
Not Before: Jan 24 16:02:11 2026 GMT
Not After : Jan 31 16:02:11 2026 GMT
Subject: CN=6974ed04-ca7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:18:a9:ff:43:11:c3:9b:22:42:c4:0c:03:a0:
6e:e1:f0:ec:42:b5:28:dc:b8:66:92:fc:fb:ca:9e:
ed:f9:87:97:24:2c:ea:94:18:85:da:f1:ec:df:9c:
c2:79:d9:38:48:19:4c:be:d1:50:36:6f:6d:2d:f7:
53:df:0a:b8:d7:d6:e8:8d:01:ee:2c:58:a9:2c:77:
7f:29:01:0b:33:98:22:40:d9:02:6c:61:c1:12:89:
f5:8f:07:23:36:a3:26:72:46:5d:ee:85:ad:85:77:
60:46:1d:91:ed:14:7b:9d:04:92:fa:77:9d:37:06:
ce:11:5c:39:11:6f:62:17:20:49:21:c5:1a:56:9f:
e7:6e:2d:9d:e4:87:27:42:a0:9a:ba:58:0c:db:64:
c7:74:6c:22:6c:a7:a9:c9:47:f1:68:9a:39:12:36:
8e:01:10:fd:bc:cb:99:2d:31:99:a1:26:f2:90:99:
0f:35:11:e1:b6:49:59:df:3e:c6:e6:b0:8c:0b:3f:
ae:cf:49:75:41:34:ef:6a:09:f1:4b:68:fc:10:45:
ae:50:fb:c3:07:bc:b6:25:a1:ef:cd:75:80:cd:3e:
fd:6c:62:ae:13:be:e0:37:e1:e2:39:f1:67:c0:8b:
94:47:1f:7c:97:7c:dd:5e:31:60:43:4e:9c:a9:28:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:64:77:42:19:EA:97:02:C5:E8:5C:93:09:6A:90:62:3D:6C:5B:53
X509v3 Authority Key Identifier:
keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d7:a9:2e:b1:47:86:c9:49:e8:86:f8:a4:3f:28:cf:50:10:
91:df:18:34:d0:22:99:59:94:4e:1b:ec:c1:97:1b:2e:95:37:
22:12:42:e2:d7:45:26:58:82:6e:86:fa:2c:16:86:75:bb:3c:
e6:1d:37:f8:99:38:07:a6:e2:b2:78:fe:5b:fd:b0:79:42:81:
b9:ba:36:8b:46:bb:ee:39:72:1f:e4:bb:9d:ea:0d:a0:11:89:
85:f6:44:b7:d5:be:3d:f5:d1:21:bf:16:e3:33:59:17:a9:59:
fb:99:ef:be:c5:e1:77:f1:89:5d:d5:e6:fb:b3:30:16:4c:94:
77:4a:1d:05:b2:5a:78:75:e9:36:6b:48:dc:cc:f0:f9:36:0d:
f1:5d:e4:d0:1f:9e:b5:05:92:c3:04:a9:f8:57:7f:17:ca:c5:
47:8c:bd:84:29:75:dd:1e:0a:b0:34:4e:d5:e0:de:f2:d5:54:
51:77:d7:ea:f1:b1:40:94:ca:b9:a4:41:58:b0:32:88:80:6c:
81:ad:95:ed:9d:36:76:54:e5:34:ed:a8:24:ac:d3:7c:04:b6:
ad:c0:95:50:ae:4a:78:96:dc:07:98:b5:41:9b:68:58:81:99:
d9:be:ed:61:60:2d:9d:b4:52:fe:e1:8c:6a:30:f1:a3:13:bf:
61:63:c1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:42 2026 by rpki-client