This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
File: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json)
Hash identifier: ddIoFE8ean009Majaib+G4W1TDkZJ6z6ML1sMlhTJ6Q=
Subject key identifier: FE:50:38:94:88:9D:7A:F5:55:C0:65:BD:7E:20:10:5D:CC:B9:80:D6
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial: 35C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
Manifest number: 355C
Signing time: Sat 24 Jan 2026 14:48:26 +0000
Manifest this update: Sat 24 Jan 2026 14:48:26 +0000
Manifest next update: Sat 31 Jan 2026 14:48:26 +0000
Files and hashes: 1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: /F0/x4x+696zTJ8r3H4Eba2bAEePgNQCKCo/WUluVPs=)
2: DDF4B0D2F08C11EEB70A1F76C4F9AE02.roa (hash: 3IhKk2ns73ug1cPcItokkvNYGQWI9rs7b4nF6YtsTSc=)
3: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: ZqgeyChgSkuAuEy8E4XBqCcFOmGTEjV9SXx7odN3pv4=)
4: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: 1mDu3Q1bdiSa3axtc15ZDTGlc4zW4OxSySLPwHbTbvE=)
5: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: vltJ7Buw53igWVIfCgs9blss6VeKEkgF9l7xhGZDnwo=)
6: D1EE6884F06C11EEA5BAA656C4F9AE02.roa (hash: 8K4hb6GJHcWswysfKKK+VFXlsdhKy8EjS5fIz+8731Q=)
7: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: oj9MA2Xl79Ulu/1U7XExVD59vw2GZhJkFrHTogIDTCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13761 (0x35c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Validity
Not Before: Jan 24 14:48:26 2026 GMT
Not After : Jan 31 14:48:26 2026 GMT
Subject: CN=6974dbba-ae09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:a7:48:ea:92:17:94:81:b8:40:e5:bf:95:
5e:34:91:78:9e:0d:a8:f5:2c:96:5b:8e:21:e4:e4:
16:cc:b0:e9:5c:54:a4:40:5c:d0:2f:9d:62:e3:5d:
19:93:60:ba:4b:8d:78:df:c7:79:09:a5:db:5a:61:
d3:f7:83:c5:96:b7:d8:2f:ae:3b:76:83:fc:0d:06:
7d:ab:3c:31:f6:23:47:14:a7:d6:ad:16:b1:76:6f:
81:9e:91:ee:e8:71:81:77:87:43:32:e9:a6:5b:6a:
03:93:68:e0:0d:ee:7c:08:d1:01:20:ca:1f:44:cc:
9a:77:3d:d4:ac:79:1b:1c:cf:64:f5:f4:38:3d:01:
15:ed:5b:60:d3:67:ce:bf:b7:79:17:ff:47:b6:d6:
74:0e:09:91:0c:cd:43:f0:19:7b:a1:28:cb:f0:b5:
1a:4d:52:f3:4b:f1:7f:c2:bf:ba:b7:68:74:b3:ed:
26:c1:cc:d7:90:bb:30:bd:be:85:67:3b:8f:3e:b8:
bf:b8:a7:5c:26:2a:85:d0:bb:12:bc:6d:84:5e:e4:
32:e2:72:78:84:a9:56:85:fa:bd:4e:1d:39:e6:1e:
57:ab:d6:29:c0:f5:aa:a2:13:a5:a0:ea:be:bb:c6:
78:eb:e9:2b:e4:5e:7d:9e:07:d1:76:f5:8e:db:a4:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:50:38:94:88:9D:7A:F5:55:C0:65:BD:7E:20:10:5D:CC:B9:80:D6
X509v3 Authority Key Identifier:
keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ca:3a:8d:95:79:3e:81:7e:d8:15:e3:2a:0f:50:ed:f3:c1:
d1:33:5f:9f:fe:47:98:4f:1b:27:8a:6a:43:1f:e9:0e:c5:f3:
74:6b:e6:24:23:0b:ad:7a:e3:7b:6c:5d:7c:67:5c:9c:d2:fb:
a6:86:7c:cf:43:ed:28:0d:45:e7:f5:4d:e1:99:4b:f4:ff:1e:
0b:51:92:4a:e8:30:a6:96:e3:7f:ac:27:07:2e:0c:e3:35:d2:
50:f7:78:2f:ae:d7:65:42:83:35:1e:38:d5:8a:8a:d0:40:06:
fd:4c:89:e4:b1:ac:4d:08:ad:7d:1c:4c:81:b9:fe:97:98:92:
1e:ec:49:0b:09:b5:19:4f:e0:9d:cf:4c:1b:5d:c5:03:94:c6:
54:23:a6:f7:fa:3d:62:02:5b:ba:88:c0:9d:8f:3b:66:18:62:
62:de:49:fc:57:d7:47:52:10:fc:d6:55:2e:d1:53:5a:47:99:
ca:e1:ef:7f:d4:b0:ea:f9:ec:ef:95:2f:1a:b5:ca:0a:3b:c8:
e8:0e:d4:6f:a0:74:1c:60:81:99:b1:06:dd:75:41:0f:c2:29:
0e:ae:cd:38:58:1e:d4:c2:78:6c:06:e4:30:81:ef:5c:69:34:
8c:d6:79:c0:92:38:5a:4c:a8:7d:73:be:bd:b0:24:2d:30:3b:
f1:40:8f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:28:45 2026 by rpki-client