This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json)
Hash identifier: cpkPSmVwG1GkQmhCU1wl3i0Yma6YKTr8N4t04ObxACc=
Subject key identifier: 2C:75:01:1C:9C:89:A3:0B:CF:C8:0A:88:36:71:A5:52:99:6B:2D:7F
Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
Manifest number: 011F
Signing time: Sun 25 Jan 2026 04:00:48 +0000
Manifest this update: Sun 25 Jan 2026 04:00:48 +0000
Manifest next update: Sun 01 Feb 2026 04:00:48 +0000
Files and hashes: 1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: h5HYlABzrLayPMmmIJKnL16Sn34V/JLRbb5W+RZLxiY=)
2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: /RtxCHmcoYhAEp/IYJhHHQwvy9mi2n2CrMQ44qEysso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Validity
Not Before: Jan 25 04:00:48 2026 GMT
Not After : Feb 1 04:00:48 2026 GMT
Subject: CN=69759570-dae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:4b:56:a9:c1:78:6d:85:85:0e:7b:30:a1:
88:6d:29:dc:4f:25:06:23:e6:4a:e6:b4:a0:89:0b:
7e:dd:d7:e0:e2:96:77:f5:1c:25:97:f7:d8:d9:8d:
20:28:6b:8f:d9:b6:91:ee:30:3d:65:31:9a:5d:58:
66:35:90:68:79:cb:e2:05:0d:57:ad:33:d5:3a:21:
d5:c8:04:dd:16:81:f4:1b:ee:b6:d4:4c:0d:3b:8d:
37:8a:ff:a2:02:93:ee:83:bd:dd:7f:a0:a0:e6:e2:
50:e4:e5:70:fc:ef:10:bb:26:44:2f:a4:5d:d9:fd:
3c:ec:fe:47:4d:25:1b:02:8e:1d:d4:11:15:18:b5:
30:a8:5e:6f:80:35:ee:f3:e5:27:ad:05:e3:70:a1:
56:95:00:9c:19:61:f1:03:9d:0b:e6:a2:af:f9:af:
c9:c0:d4:d1:a6:bc:16:92:b2:3d:b2:f6:1b:ca:5d:
d0:4f:f8:83:ab:9c:fe:72:46:55:86:ff:6b:b9:db:
b6:9b:13:a3:d6:bf:bb:82:d6:22:f0:5c:6a:c4:e6:
b4:1e:b3:1b:b7:5d:67:bc:3a:90:ba:39:b2:2b:62:
ce:8c:7e:f7:aa:a9:51:12:6d:46:f8:84:9f:c3:02:
ba:d8:ed:54:05:44:f0:28:aa:0f:dc:25:d5:14:0f:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:75:01:1C:9C:89:A3:0B:CF:C8:0A:88:36:71:A5:52:99:6B:2D:7F
X509v3 Authority Key Identifier:
keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:de:76:f0:12:03:fd:38:21:90:f2:69:d2:0b:02:59:4a:53:
84:f3:1a:36:5c:a4:0a:53:b7:60:60:31:f3:75:ec:98:4f:84:
63:b3:c6:ec:c1:a9:e2:43:02:d7:e7:fc:97:b0:12:c7:14:9b:
25:09:b5:bd:62:c7:db:44:8f:27:4c:4a:0a:af:e0:90:d4:4e:
7f:25:6c:22:64:48:42:e1:da:a4:d9:87:ac:39:db:3b:ae:77:
2f:db:e5:9f:0b:a4:4a:2a:4f:4b:c3:78:9a:74:f5:12:78:85:
57:4c:60:84:fb:d5:24:6e:44:2c:e7:fd:10:78:9b:ef:22:ee:
6e:99:9a:3e:64:4d:38:04:cd:6b:da:fe:9a:25:9a:c3:30:97:
9b:d2:41:99:50:13:e4:15:ac:3f:15:e4:1a:8a:b1:48:af:35:
81:07:27:54:8f:50:df:6f:53:58:eb:5d:a0:70:40:b5:45:36:
d0:a0:d8:5d:82:90:17:40:5a:9a:cf:4f:7e:a7:73:f8:bb:91:
c7:43:36:5a:72:f2:3d:9a:c6:6b:a0:22:c6:46:be:d7:15:e9:
47:ac:54:8c:23:64:a0:10:bd:3b:04:01:58:18:fb:a7:03:95:
1d:8b:dd:f4:5d:44:a4:85:1e:9f:ea:23:2b:a4:43:65:87:22:
67:bc:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:37:24 2026 by rpki-client