This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json)
Hash identifier: vHA+lPN7VwkUDHKzbiY/JfbcbnmpGZEhWgknRSXT9uk=
Subject key identifier: 6A:BC:86:60:3E:F0:6B:08:7F:61:BA:2D:02:53:EE:72:60:FA:F4:4E
Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24
Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24
Certificate serial: 04ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
Manifest number: 04E2
Signing time: Sat 24 Jan 2026 23:01:15 +0000
Manifest this update: Sat 24 Jan 2026 23:01:14 +0000
Manifest next update: Sat 31 Jan 2026 23:01:14 +0000
Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: CSXvR86koYnf+qgSPyBXbW+K/2bbhWM3EY3r//L+SpM=)
2: 05F05A76D07B11F08779390AC4F9AE02.roa (hash: SKDCF5+Rd2qukuCq1g9abzS9N2w0YYh01qL+F+bWIjY=)
3: 178FCB6AE8AC11F0B6F09D7D576F56BC.roa (hash: ZzJpUKtICRqREKaG/iDLM+4AxhvNZvZ/7pGK89GC6Zw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl
rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1261 (0x4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24
Validity
Not Before: Jan 24 23:01:14 2026 GMT
Not After : Jan 31 23:01:14 2026 GMT
Subject: CN=69754f3a-0514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:01:72:1a:e3:af:8c:a9:0d:5a:26:b2:84:
b7:32:1d:a0:d4:10:1d:21:9d:bc:09:54:97:20:a1:
64:84:81:5e:e1:d5:d1:f7:86:97:e6:8e:f0:f3:ac:
e4:13:f6:3e:fa:ca:ab:2a:2a:5a:77:7f:14:c0:91:
ed:09:e8:94:74:95:16:71:2f:33:ef:cb:a4:af:cd:
91:9c:79:b3:4f:24:30:cb:46:9b:53:40:27:36:f4:
e1:e8:ea:cc:a6:48:b2:65:19:ca:86:7d:f9:a2:c3:
d9:30:10:c4:69:2e:4a:1a:ba:1d:2c:ad:f6:07:fd:
19:04:22:7e:26:bd:08:df:b1:54:79:12:18:dc:de:
c3:72:20:13:90:54:81:d2:fd:ca:09:94:5b:2e:f6:
8e:f4:cf:c9:f1:5a:de:2a:55:94:a2:c6:10:23:95:
02:78:f0:53:86:a3:3a:5f:13:92:02:d5:0e:1f:9e:
88:94:69:55:5c:03:96:79:96:b8:e0:51:cf:58:95:
af:98:38:73:94:4f:0a:17:a4:9d:1b:b5:d5:18:1e:
31:f3:27:ef:f6:71:35:18:57:ae:75:84:4b:dd:6d:
bd:50:c5:bb:b3:9e:13:80:9e:a6:5b:af:b6:b4:15:
64:91:db:59:8e:8c:5c:5c:58:7b:8e:10:60:a2:55:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BC:86:60:3E:F0:6B:08:7F:61:BA:2D:02:53:EE:72:60:FA:F4:4E
X509v3 Authority Key Identifier:
keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:c2:c7:f4:d1:d1:58:8e:d2:f1:e5:ab:15:cf:5e:dc:02:c4:
be:f3:34:3d:cb:ca:73:02:5d:27:e4:70:6c:51:35:9a:48:f2:
b4:f6:16:4d:ae:49:a9:0c:38:81:b5:a3:80:04:d4:31:0b:1e:
bc:33:5d:43:1f:c9:60:f1:2b:68:22:4d:01:52:12:fc:1a:cf:
1a:cb:d3:74:d4:73:7a:e8:0c:80:e6:d0:53:5b:d5:fc:54:79:
36:12:9d:ad:1f:1f:53:f1:8e:4a:71:10:f4:53:40:3c:6a:aa:
54:8d:ec:dd:a3:e0:ed:16:86:15:e9:d7:13:59:af:61:4b:be:
5a:d9:32:e5:64:3d:09:f5:9d:b2:88:60:60:8b:18:8b:9e:a0:
e4:5a:00:25:84:f5:d6:c0:0d:6c:41:80:04:51:f4:0c:e8:07:
dc:d2:b1:9c:48:3f:c4:9d:36:fc:f1:21:a4:f0:f3:e8:0c:76:
54:8b:11:0e:52:24:e4:65:6b:b3:e6:42:f2:a4:21:6f:42:29:
0f:3f:51:1f:c2:27:e4:ab:91:53:7c:1f:db:23:5a:b2:a7:14:
05:ad:81:af:6f:2b:6b:e0:84:d7:d1:e8:ed:e1:8c:de:0d:9f:
fd:6d:b0:0c:f0:95:02:3e:bf:a9:79:6b:32:aa:db:92:62:bd:
a3:02:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:10 2026 by rpki-client