This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json)
Hash identifier: SOuu2kZOv0/iUWn1X5BWHoyOm0UU+jz6YsSKfTE3hPA=
Subject key identifier: 0D:32:CA:6D:40:40:FD:A2:0F:FA:50:35:9E:38:DB:4F:57:80:1D:21
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial: 1EB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
Manifest number: 1E96
Signing time: Sat 24 Jan 2026 15:52:37 +0000
Manifest this update: Sat 24 Jan 2026 15:52:36 +0000
Manifest next update: Sat 31 Jan 2026 15:52:36 +0000
Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: FPhDEOkk429G5UhJbIbqASU8ovQCq3pw44cHaZZqdOo=)
2: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 4P/xIWjkOZt+s6V/SN3xcWLg6ZfxIlwRFodBInoaJSg=)
3: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: XAUpnIWVoo2gP76XF78PGBVOZx+0l56I4zT3vqwFcwU=)
4: BD314CEA619711EE81211277C4F9AE02.roa (hash: 16s8rqQL7ZS3OY13WYasSB/OdPD3K/KWoSmSDxk1MUc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7864 (0x1eb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Validity
Not Before: Jan 24 15:52:36 2026 GMT
Not After : Jan 31 15:52:36 2026 GMT
Subject: CN=6974eac5-087f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:f7:6e:b3:7c:83:52:f8:86:39:f0:da:e0:
07:1d:6e:63:cf:85:2d:b2:1e:dc:1c:85:c3:8e:81:
4d:97:1a:ce:1b:f1:3d:c9:c6:ab:89:70:a0:e0:16:
64:d2:f2:dd:b5:39:73:6e:64:86:2d:35:b0:a0:36:
c9:b2:48:ea:0c:2c:ad:fe:27:5f:90:ac:81:96:6f:
29:14:5c:8a:53:0b:93:d2:89:5d:b5:ec:69:48:d4:
90:ef:40:43:69:7c:de:34:02:8c:8d:22:11:cd:f5:
53:83:69:8d:a4:d2:bd:0a:ad:b1:b4:34:c5:8e:7a:
80:69:4e:37:e3:18:cd:98:87:25:50:c5:d3:e6:6e:
d1:76:ff:2c:9e:9a:ec:bf:6d:84:a6:b7:34:2f:86:
85:d7:68:69:47:c4:ab:5e:06:f3:0f:a9:b2:05:ba:
1e:85:99:8e:12:83:dd:c4:f8:ed:ac:9d:ce:cf:e5:
23:a2:25:47:58:0b:62:af:e4:60:de:ed:d9:bf:2b:
36:d9:4d:41:54:bf:86:98:da:81:b1:2b:5b:85:54:
6e:9e:6a:d0:b2:65:02:f0:f7:02:34:f8:bd:95:ae:
10:e3:3a:3d:0d:aa:23:87:29:c6:c2:6b:43:8c:44:
9f:51:40:8f:b3:56:ec:25:70:cb:94:fb:c6:64:98:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:32:CA:6D:40:40:FD:A2:0F:FA:50:35:9E:38:DB:4F:57:80:1D:21
X509v3 Authority Key Identifier:
keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:39:40:f6:e5:05:6a:95:3f:b1:e6:17:9b:e4:41:3e:ed:a7:
fa:8d:cd:71:77:95:e6:6e:ac:b8:a7:ea:60:6f:02:ea:8d:20:
0f:60:5c:70:40:b7:75:43:e3:27:d5:f9:a9:75:57:5d:c1:d3:
27:93:b1:54:c4:17:fc:9e:75:81:0a:f8:d0:a7:64:fe:ee:45:
c5:5b:3e:e5:d1:fb:02:8d:19:55:55:5e:e8:8a:5d:64:70:92:
93:06:72:e2:f8:3c:c3:4d:82:35:02:30:a6:3c:3e:ef:d9:55:
fd:b0:ef:4f:6d:7a:87:71:c3:13:2f:c0:77:8e:cb:43:39:bd:
36:0c:f4:0b:6d:75:80:26:b1:78:1a:36:40:86:74:fb:0e:ec:
32:c0:37:ff:ec:f2:7f:da:77:c4:af:5b:04:49:2a:64:5a:c3:
31:07:26:29:b2:2f:a9:3f:ba:53:a5:48:1b:d0:fb:e5:83:7b:
14:1b:47:1b:59:34:e3:f3:78:c6:11:3c:f0:64:6f:a8:ce:6f:
59:e6:33:46:34:94:02:dc:89:9d:b2:8e:9f:4c:c3:73:85:d3:
ef:5e:b2:24:44:1a:8f:5a:3f:ca:d2:7e:fd:d8:fb:c7:c8:60:
dc:7a:26:02:96:dd:fb:75:c1:13:f4:62:a8:7d:8b:8e:b8:a9:
af:2e:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:26:00 2026 by rpki-client