This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
File: 1Sj61Lh2q_twrziSIg8pPheRtrw.mft (raw, json)
Hash identifier: TOCiyH0yPwDd+gwH7iZLAtQq2oRRjLtM39sxHNCE3BM=
Subject key identifier: C6:62:1D:A1:CE:FB:B8:0E:74:E2:8D:E4:53:C7:F3:AF:D5:6B:CB:82
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Certificate issuer: /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial: 03BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
Manifest number: 03AD
Signing time: Sat 24 Jan 2026 23:55:03 +0000
Manifest this update: Sat 24 Jan 2026 23:55:03 +0000
Manifest next update: Sat 31 Jan 2026 23:55:03 +0000
Files and hashes: 1: 1Sj61Lh2q_twrziSIg8pPheRtrw.crl (hash: ds8sVgXoFI2MEXrLJ7jsHFkxOGb7x72uPz2jTAmhb4M=)
2: A0841A68D0D511EC81001E73C4F9AE02.roa (hash: RiHqUd66nfKg9bYuuoXV02nBPSlEq4ADYP42Ecnza24=)
3: C0E56FB2D56B11EFB540FB53C4F9AE02.roa (hash: fbrDSF5x4VvuEIAZikU3PfgDzKLrpZQ/e/7qrjWSoZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Validity
Not Before: Jan 24 23:55:03 2026 GMT
Not After : Jan 31 23:55:03 2026 GMT
Subject: CN=69755bd7-7756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4c:38:4b:21:66:0f:00:c3:d6:0a:76:15:43:
40:1a:87:01:da:c3:3d:38:52:4c:4e:3c:37:d2:50:
a9:55:ae:6e:7b:6e:88:a5:a5:fb:23:ba:05:07:64:
6c:35:e4:4d:1a:f2:d4:23:35:ec:8c:68:6f:94:78:
6b:84:27:52:76:46:a6:c1:6b:ab:e7:35:07:90:7b:
c1:7f:f0:38:cb:0a:02:d4:4c:92:9d:56:4f:af:b8:
eb:8c:2f:5a:b3:53:e9:f6:53:43:b2:01:3f:61:92:
93:3b:c9:eb:30:b9:e2:7c:a4:31:96:8c:c6:e3:f0:
ff:e2:d2:99:e6:b2:cd:8d:58:dc:b6:bb:2e:6c:2c:
8f:56:35:ae:6d:0b:0f:97:e3:53:50:39:16:7a:36:
ec:3c:e0:55:c8:bb:9d:2e:a2:7f:b1:18:44:41:65:
d6:de:73:41:9c:ef:14:33:1c:e7:ae:6a:57:bf:d5:
00:b5:e1:6b:98:bf:ec:32:58:ec:8e:53:bd:92:df:
54:98:32:f4:d5:8c:b3:6c:c8:fb:c5:a7:ea:2b:dd:
83:2f:d2:ae:52:5c:40:26:44:04:a8:b6:b0:cc:88:
8e:7d:01:e4:fa:c9:c9:6c:96:70:64:da:b9:ed:90:
84:e5:7f:e9:45:22:f3:89:51:99:ec:92:e0:89:b1:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:62:1D:A1:CE:FB:B8:0E:74:E2:8D:E4:53:C7:F3:AF:D5:6B:CB:82
X509v3 Authority Key Identifier:
keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a3:9d:83:43:64:09:73:c0:4c:83:b7:0a:bf:51:50:ff:bb:
4d:8f:d3:b9:6f:2a:f7:e2:0f:7c:6e:c1:83:18:55:02:3d:07:
c0:6d:6a:6f:d4:2b:73:6f:c3:f1:97:24:ec:90:8b:82:66:a4:
63:ef:eb:83:66:cd:c2:a5:02:0e:a5:92:ec:70:73:91:b0:b9:
a9:fc:65:94:44:f6:11:66:5f:e3:31:d2:03:a0:5b:2b:c4:dd:
d6:fe:23:9f:b0:c7:2d:20:c7:30:e9:cb:90:ef:5f:09:ef:83:
0a:1b:ec:ca:7e:df:1c:e5:8b:84:4b:b4:89:d6:c7:a7:05:6c:
8a:f0:26:16:22:47:76:02:f7:83:69:ef:a4:f4:db:84:01:19:
87:dd:51:bc:ca:d2:98:01:89:1a:7d:2f:9c:cd:19:a3:b4:8a:
35:71:df:80:eb:0a:54:0c:e9:de:b8:7e:c6:b1:50:3d:86:96:
2d:13:b8:09:07:54:9c:a1:5a:b5:bf:1e:02:4c:d8:72:55:87:
9e:1c:fd:b9:48:55:10:fa:69:f6:90:18:2c:dd:a5:71:16:34:
78:b0:75:8c:42:98:8d:af:d4:2f:89:3b:20:2c:69:ed:a0:a8:
6f:78:8d:ff:8e:1a:a2:9b:be:c9:b1:c0:1a:c8:6a:c7:53:2a:
ee:7d:30:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:10 2026 by rpki-client