This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
File: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft (raw, json)
Hash identifier: 4HsTzsVmGsBlKth3SVI+arw2gqBO3CXHOd8csjEuLWo=
Subject key identifier: BC:60:68:79:C6:06:76:87:83:9E:88:6C:B6:DB:D9:B4:7B:20:9E:A1
Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F
Certificate issuer: /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
Certificate serial: 056D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
Manifest number: 055E
Signing time: Sat 24 Jan 2026 22:36:50 +0000
Manifest this update: Sat 24 Jan 2026 22:36:50 +0000
Manifest next update: Sat 31 Jan 2026 22:36:50 +0000
Files and hashes: 1: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl (hash: 1OFcWqyy1xCzl4vheREcN0Jf6vQtIThj/2LC7oUT1JM=)
2: F719961A1A8611ECB908E939C4F9AE02.roa (hash: K4Tk1pgMDNh5SKenYzBLQtmFUIf8LUH33Tf6G2W39As=)
3: B3883EE61A8C11ECBD6CCF18C4F9AE02.roa (hash: K6zEQIX3Xs70jZXyUBIkq7itCCV+/w4+T7TPTazGJDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl
rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
Validity
Not Before: Jan 24 22:36:50 2026 GMT
Not After : Jan 31 22:36:50 2026 GMT
Subject: CN=69754982-b896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:1e:b9:ab:f2:a0:a7:3e:1c:03:2d:9c:83:
f8:fa:fd:45:1b:b6:23:b6:19:60:1d:7f:d8:1e:ad:
63:b4:3b:b7:76:62:cc:32:7b:0a:f3:ec:c9:01:86:
7e:11:8b:c9:c6:c7:ae:6e:0b:c3:4a:ea:2e:22:c4:
c6:b3:37:4c:f3:05:af:37:66:ac:d8:1b:fa:97:aa:
b9:a1:a3:89:3c:dc:4c:67:15:a1:2e:89:51:75:ea:
9c:dc:99:70:df:2d:16:63:d2:64:ea:ea:7f:80:ff:
f7:de:4b:37:9d:28:9c:af:65:3f:f9:78:ac:35:b1:
39:86:3e:75:fa:85:94:42:c5:35:cb:42:ff:d0:9e:
e2:51:ed:e2:e2:3f:84:ab:29:c0:44:42:dc:8f:9a:
73:60:b1:11:43:31:d3:a6:0f:ab:b3:7e:92:d3:5e:
f8:e7:92:cd:a2:8b:82:cd:d8:22:c4:34:c0:f0:85:
e3:c6:23:44:3a:64:af:82:5c:ab:1d:a7:75:07:2b:
cd:12:a1:71:5e:16:94:3c:25:a2:b0:f6:36:32:46:
25:0c:e1:22:76:ad:73:38:b1:18:4b:cf:65:cb:a2:
fb:40:f0:84:0c:44:f3:f7:e2:6e:cf:eb:30:18:60:
ff:10:07:48:20:35:0b:2f:cc:aa:8f:4d:4d:08:60:
ce:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:60:68:79:C6:06:76:87:83:9E:88:6C:B6:DB:D9:B4:7B:20:9E:A1
X509v3 Authority Key Identifier:
keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:17:b6:a6:0c:bd:16:50:33:0c:08:7c:93:22:b5:da:81:cc:
19:3c:c6:75:c6:8b:ee:7e:33:22:82:1f:f3:c7:1e:0e:37:af:
fd:fe:39:78:36:78:62:09:7f:91:49:4c:b6:65:00:3e:9b:ff:
6d:6d:e8:56:ba:02:c7:f0:6a:00:d5:43:08:2f:f8:a6:9a:23:
22:54:bb:e4:16:65:bd:23:7a:ee:69:2a:0e:ee:63:96:be:dc:
05:04:1d:51:ea:af:78:86:55:58:cc:ff:e6:d9:7a:04:95:59:
4f:5d:b2:c9:7f:f8:1d:48:dc:73:f4:d1:0c:2c:e7:e8:b4:ff:
7b:1c:a5:f1:97:82:ea:12:2c:b4:37:1a:79:f0:f7:a8:f5:a7:
df:7a:67:81:0d:02:68:6a:5c:05:87:6b:f6:fc:33:57:e5:58:
65:69:7e:0f:6a:8a:f6:f2:aa:62:79:c1:70:8e:df:02:6d:09:
71:8e:f9:29:0d:29:e0:6f:0d:c9:d0:c3:61:00:44:0a:bb:c4:
05:23:64:1c:70:59:97:fb:68:6c:ff:0d:2c:e0:aa:e2:a0:b6:
fd:33:13:58:a8:36:6b:f1:b3:88:56:9f:5c:1c:c3:fe:3b:cb:
5a:6a:a9:30:77:12:6d:f4:b8:36:69:fc:d4:a7:2c:14:6d:8e:
38:d7:14:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:19 2026 by rpki-client