This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
File: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft (raw, json)
Hash identifier: cKHwK4K+MwDKav211hp0K2W0q2ifoPZeCZ4EMJcfQ0M=
Subject key identifier: 6F:BC:2D:F7:AF:2A:D0:88:C6:45:E4:9A:C8:57:C6:46:E9:77:55:01
Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2
Certificate issuer: /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
Manifest number: 0119
Signing time: Sun 25 Jan 2026 04:03:43 +0000
Manifest this update: Sun 25 Jan 2026 04:03:43 +0000
Manifest next update: Sun 01 Feb 2026 04:03:43 +0000
Files and hashes: 1: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl (hash: paAilmqYq3b691Lezn8JvlnLTtb1XgN63uOuiHvNAxk=)
2: CA8007604A3011EFB101441AC4F9AE02.roa (hash: tG+xEb4Bj22fmRv5Ap5El7N6H/BamXJAvudixhV4S5A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl
rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE814, serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
Validity
Not Before: Jan 25 04:03:43 2026 GMT
Not After : Feb 1 04:03:43 2026 GMT
Subject: CN=6975961f-ee7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:01:01:be:af:8c:5e:ab:77:6e:27:ed:5d:ee:
ee:72:e3:d7:eb:76:aa:dd:5c:2d:a4:cc:22:3c:d3:
55:73:c0:ee:d8:7f:f4:44:82:bc:8b:95:0a:d1:50:
b4:c5:46:d3:5f:b0:a6:02:70:86:9f:f4:53:d8:67:
3c:07:f6:3b:09:90:67:fe:df:d5:c2:28:c3:e8:84:
a7:f0:6f:f5:29:0c:16:e0:cc:50:7f:80:13:c6:ea:
ba:09:51:f2:2e:20:e9:cc:24:5f:d3:91:79:81:d6:
03:fe:dc:fb:48:d0:59:ce:17:5d:41:f0:ac:af:d4:
fd:06:38:2a:2c:8c:c1:cc:d2:c1:52:ff:b7:9c:61:
90:b8:e8:38:8a:ba:80:ef:ba:b3:2d:69:f0:7a:dd:
33:91:1a:b3:5c:38:4b:28:f7:8b:a6:2d:db:2b:a7:
7d:5a:a0:83:92:1d:01:e6:d4:fa:e7:d9:46:fc:5d:
48:58:03:7d:56:fa:e0:e9:de:fd:b9:89:73:73:5a:
2f:c6:52:98:41:ef:75:d6:c3:68:a3:53:50:60:a0:
1a:7a:25:ae:36:6b:6b:f4:0e:d7:78:79:ba:45:c8:
38:d7:97:84:a3:20:ec:a8:ac:7b:73:15:f4:2e:a0:
79:5f:67:ce:15:ac:39:38:13:93:f9:96:59:11:8c:
7c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BC:2D:F7:AF:2A:D0:88:C6:45:E4:9A:C8:57:C6:46:E9:77:55:01
X509v3 Authority Key Identifier:
keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bc:fb:8b:bb:3f:5b:5c:8b:77:c0:af:2a:fd:3b:9a:26:07:
cb:85:77:fa:68:16:f4:90:14:56:9a:09:3c:1e:27:35:5d:02:
1b:a6:16:e6:90:6e:8f:a8:71:b2:51:60:5e:66:c8:ed:af:90:
43:52:11:84:fa:e7:a5:39:62:9c:7e:60:8c:c6:a4:38:dd:bf:
ca:ec:47:43:b6:01:d5:d7:64:09:fb:36:eb:6e:57:ce:f9:4d:
f5:73:a4:96:65:61:46:6c:dc:74:d1:d5:b9:5a:9f:88:10:a6:
05:63:25:7e:e8:75:56:99:bc:d0:ba:85:b2:44:b9:fe:fa:ea:
9c:0a:a6:46:45:7f:ae:9c:84:e7:70:d0:eb:5a:d1:d4:7a:50:
a3:fe:98:5c:4b:98:5e:26:e9:5b:04:d5:c8:4e:cb:02:76:7e:
a5:3d:27:47:c5:e5:d8:e9:34:3c:7f:e4:13:d8:8a:30:d0:49:
4f:d5:81:0c:97:22:77:0b:d9:ae:b3:6c:90:20:d6:b7:30:07:
57:38:07:47:ff:7e:cd:c2:fc:52:e3:d6:fc:70:f7:6c:26:76:
01:6c:95:d5:28:6a:a6:50:98:bd:86:8e:13:48:58:b9:ef:87:
05:32:29:c1:7c:8c:73:cb:36:b3:58:f1:11:bd:89:b5:57:3e:
fa:f2:6e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:14:26 2026 by rpki-client