This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json)
Hash identifier: TtSnVvgMCaSCLUDSK6kS1raUWh/Zo9fi5n8U9BydRiw=
Subject key identifier: A9:B7:A9:90:38:86:2A:5F:F0:A1:5D:67:FD:B5:69:5E:BD:3D:A4:2B
Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
Certificate serial: 0945
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
Manifest number: 0933
Signing time: Sat 24 Jan 2026 19:40:23 +0000
Manifest this update: Sat 24 Jan 2026 19:40:22 +0000
Manifest next update: Sat 31 Jan 2026 19:40:22 +0000
Files and hashes: 1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: uQtEUe5iJcFKM4wRSsWsD9KwIehAPaGdb0g8KHJ1+YQ=)
2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: mvHjKRsR67OiF4l27nqT2jDw9NacCXhSBbDkY8YiePs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl
rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2373 (0x945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
Validity
Not Before: Jan 24 19:40:22 2026 GMT
Not After : Jan 31 19:40:22 2026 GMT
Subject: CN=69752027-8251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:f9:d2:b0:19:3b:dc:2c:d2:8c:b4:bf:c7:
7a:86:fe:65:2d:d6:d1:e7:ca:98:0e:7c:88:69:93:
08:98:86:70:cd:37:66:77:1a:10:5d:12:8f:ab:00:
62:5e:72:10:66:4e:c6:73:68:01:2f:a0:c4:70:7e:
2f:7d:a0:5c:3b:86:8f:b1:9f:0a:d6:57:34:5f:8d:
5f:5b:17:bf:79:ee:07:1d:56:d8:79:2b:ed:3d:2d:
27:1d:3d:ca:98:a4:2d:90:7e:f6:44:9d:04:20:02:
c0:eb:fb:c9:03:cc:c3:b1:fd:c3:82:ce:d3:84:91:
da:a4:43:ce:4d:bf:2a:08:21:48:bd:90:5f:46:1f:
ed:e2:25:30:be:65:fe:50:c7:30:9a:71:35:3c:db:
a5:7a:0e:45:23:bf:7b:3a:e5:74:36:08:99:97:80:
22:82:5d:ee:31:82:91:75:43:4a:7e:f2:58:63:e5:
de:77:0f:9b:a1:89:63:35:55:59:79:f4:25:b2:62:
9e:b5:1f:64:95:e2:f7:90:ea:0c:c6:4f:9c:6b:65:
30:c0:d4:73:1d:0b:c4:50:aa:a6:67:00:32:8d:41:
de:ae:ef:bd:6c:9e:71:a2:54:82:8d:b8:ce:c6:1f:
fb:3e:61:fe:a5:8d:83:dd:7e:d9:b9:20:1f:bc:e1:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B7:A9:90:38:86:2A:5F:F0:A1:5D:67:FD:B5:69:5E:BD:3D:A4:2B
X509v3 Authority Key Identifier:
keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e8:1e:b6:85:12:4c:55:46:91:0a:a1:e7:06:2d:fb:5f:3e:
56:3d:eb:1f:35:85:65:7c:ce:ce:00:ad:db:1e:34:74:ac:0a:
f9:d8:a4:94:49:fc:82:64:90:8d:4e:d8:a0:99:a9:a7:85:61:
19:ca:ab:fe:67:80:05:52:ce:2d:e3:ed:b3:48:9f:06:a6:b9:
e8:a5:02:f7:95:9a:d9:34:22:07:e1:b8:24:5a:ee:25:1b:78:
4c:bc:71:0a:be:70:3a:64:d5:4d:9c:cf:d0:67:e9:c8:d0:02:
b3:50:9e:47:1f:77:20:f0:fc:27:05:26:6a:a0:1f:72:dc:98:
4b:5b:2b:7d:76:2b:45:c1:9d:14:c2:d7:21:12:6b:8b:90:3a:
73:da:c3:a0:6a:82:12:f2:bc:55:06:f6:36:ca:01:2f:61:b3:
1a:c5:e2:e0:d4:c0:eb:63:1d:15:12:6d:b3:10:0f:66:ac:48:
96:29:f8:ef:ea:77:a4:3e:62:61:28:f6:b6:bd:0d:61:6c:10:
25:95:a7:51:8e:02:9f:e9:4c:5e:71:1c:4c:fb:4c:58:39:37:
ff:f6:98:74:24:07:43:06:18:b7:1c:72:a8:cf:1a:bd:fa:70:
e9:1a:fd:54:df:8e:0b:c7:2b:78:03:bd:85:37:b9:62:b4:18:
71:7a:5c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:27:45 2026 by rpki-client