This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
File: Ci5d8bLD15feoVNn-qncOITNGzM.mft (raw, json)
Hash identifier: 82r3PVgZy2xxysHYYjfPesd9lxYFwqIdbvNTVEX7+sc=
Subject key identifier: 55:31:40:91:CB:1B:31:00:00:E8:0B:30:98:8B:9C:D7:E2:33:0A:CF
Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
Certificate issuer: /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
Certificate serial: 0DFE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
Manifest number: 0DF1
Signing time: Sat 24 Jan 2026 17:31:04 +0000
Manifest this update: Sat 24 Jan 2026 17:31:03 +0000
Manifest next update: Sat 31 Jan 2026 17:31:03 +0000
Files and hashes: 1: Ci5d8bLD15feoVNn-qncOITNGzM.crl (hash: 7B1aWiqYeg6diwQ01AF3zx28FfDIPObUbM7wmAGXvmc=)
2: 4EEE01FCE15611EF9560323EC4F9AE02.roa (hash: qzPpZiT9U/bUzj4/60Erq/BTG14/8QM1oz2zYozWp6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl
rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3582 (0xdfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD096, serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
Validity
Not Before: Jan 24 17:31:03 2026 GMT
Not After : Jan 31 17:31:03 2026 GMT
Subject: CN=697501d7-e985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d1:82:77:99:b2:cf:c6:4f:2e:0d:ea:59:a2:
a7:f7:53:46:f8:d8:c3:4c:5d:20:33:cf:da:a9:34:
8f:7e:73:bd:3c:2b:da:bc:9e:1d:8e:22:cc:84:85:
48:35:46:d4:11:fc:f2:11:e3:4a:a0:b9:41:91:db:
dc:e5:ed:71:7a:fa:1b:45:78:8e:97:f7:7e:bd:3f:
98:da:62:83:95:c2:0e:c2:c9:d4:79:a3:f7:c6:e8:
cc:2f:12:e5:4a:f7:3b:88:62:ca:55:e7:5c:c6:05:
00:af:5c:a7:33:15:7f:68:84:b7:59:e0:41:0d:1f:
3c:a4:ef:f1:d0:94:86:a9:f2:5c:1b:f3:e3:9f:11:
b4:a7:e8:ef:ac:00:1e:54:a3:35:a2:77:b2:3e:d4:
af:48:a2:29:48:57:e3:4e:cc:db:f3:d9:e0:01:78:
fc:16:44:fb:7d:9f:11:15:89:28:f5:93:e4:20:14:
29:a4:4a:19:62:57:4c:df:bb:a6:3a:44:98:b3:d1:
09:ca:2c:79:65:51:9e:43:ed:ec:2b:33:98:c6:07:
74:c0:8a:aa:ab:88:98:6d:b5:69:3b:d4:00:98:ce:
a4:ac:a1:33:2e:6d:b6:75:8c:ad:55:8c:fc:ce:fe:
d1:fa:42:1a:82:f6:b1:99:3a:ac:85:4c:0e:c7:54:
77:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:31:40:91:CB:1B:31:00:00:E8:0B:30:98:8B:9C:D7:E2:33:0A:CF
X509v3 Authority Key Identifier:
keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:d9:75:2f:4f:0a:49:37:25:c2:1f:8d:f7:fd:9d:80:62:52:
58:93:db:61:40:15:07:c0:5d:6b:02:b6:ec:c1:f1:05:32:d1:
cb:54:93:09:74:0d:21:d0:c3:3f:37:20:1e:81:6d:c6:14:49:
c2:b8:bb:c0:e8:ee:06:cc:aa:33:50:13:ff:39:26:98:98:31:
f4:ea:62:2a:7c:22:2b:d6:28:8e:25:81:2f:96:e1:ca:a1:8d:
a0:82:2c:d0:d1:fc:e2:71:6e:9c:6e:21:1f:54:e9:34:54:92:
4c:0c:5e:ab:ea:72:78:ed:8d:d6:3b:47:a3:2e:68:e9:61:b9:
60:bb:47:10:42:a4:f0:b6:4e:9d:e8:bf:96:ba:e2:8a:28:24:
40:56:03:ff:06:c0:29:c2:89:cb:f4:fc:54:50:db:1f:cf:8b:
f7:77:c7:fb:5a:0c:a1:31:83:49:4c:71:2f:0c:2e:7b:3f:c9:
07:d0:2d:50:11:f4:02:a0:8b:a0:8c:87:ed:ae:b2:47:9d:65:
20:8e:d2:7b:30:62:a7:4a:51:e6:a5:73:eb:71:cd:2e:0f:b4:
03:ae:07:b8:43:83:63:02:d7:5d:4a:2d:d5:bd:9c:d0:10:4f:
c9:f9:29:5e:d1:da:7f:e3:35:26:72:1b:09:ad:83:36:84:f8:
fd:e9:dd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:44 2026 by rpki-client