This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json)
Hash identifier: dr8y4d/3wW6kqnsOQVa4JQE8lvcPn+UWy0FZzNHoxwI=
Subject key identifier: 46:68:E8:18:F9:76:CD:BA:53:A2:81:E8:51:2B:6A:B8:96:E4:1C:2E
Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17
Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717
Certificate serial: 0231
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
Manifest number: 021E
Signing time: Sun 25 Jan 2026 01:48:23 +0000
Manifest this update: Sun 25 Jan 2026 01:48:22 +0000
Manifest next update: Sun 01 Feb 2026 01:48:22 +0000
Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: 3a8ezlMe6BaVQGdMr1ZKyk+4r2StMAS5bs758aMU/Gc=)
2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: FLWPyCCdfmecVu0JHu1esGWqwLx8eepgbZ0pVH/wRzU=)
3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: +KpPTrvUJ0fhW59fFGMaGeaxnMDX3lJjTA7XrEuSgaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl
rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717
Validity
Not Before: Jan 25 01:48:22 2026 GMT
Not After : Feb 1 01:48:22 2026 GMT
Subject: CN=69757667-e1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:62:38:71:c9:38:fa:b6:4a:46:90:d3:71:
bb:e5:49:b1:44:fc:13:1c:8c:c7:1c:47:d7:2d:10:
94:2d:86:1c:56:bd:7c:dd:bb:d9:37:ab:59:b2:e5:
86:04:c2:ad:9e:5c:58:13:f9:e9:fa:a6:b2:b1:f1:
b0:24:90:86:f9:e3:51:64:4e:94:b6:a7:50:85:a5:
89:49:51:7b:92:68:0e:ba:99:c7:30:64:24:38:c2:
6f:47:f1:c5:54:45:fa:86:93:01:5f:91:43:35:20:
66:9f:35:da:5a:e8:13:c0:58:7b:81:6d:53:09:12:
dd:4a:18:f9:4b:87:ef:91:90:17:fd:6e:f8:64:c9:
f2:7c:b1:6f:5b:ec:e0:7b:02:18:a4:bb:8b:03:ef:
ae:5f:b3:fd:0f:35:7c:f3:53:4b:2d:36:a7:98:d0:
f9:49:8e:5c:4b:b3:8e:12:d0:22:91:db:3c:7b:54:
e0:33:2f:45:c6:88:66:16:c0:cf:03:0a:8d:b0:a5:
61:8f:f2:9e:cd:0e:ca:e5:35:8f:57:36:c9:c9:0e:
64:b0:da:53:b0:f2:73:72:d9:2a:35:b6:7d:e5:9e:
a6:7d:4a:94:02:95:ba:65:2f:eb:77:85:17:04:0e:
48:f4:c7:a7:82:c8:32:b7:64:26:3a:cd:7d:f0:98:
dd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:E8:18:F9:76:CD:BA:53:A2:81:E8:51:2B:6A:B8:96:E4:1C:2E
X509v3 Authority Key Identifier:
keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:83:b3:30:52:bc:c9:28:34:5c:e7:4a:6c:e5:3e:94:3a:fc:
23:06:09:93:c3:1b:7c:f4:f3:b3:af:4a:6a:45:62:77:20:5e:
43:31:d7:24:da:bc:78:9c:48:a8:94:0a:2b:65:18:d6:5f:e4:
33:e4:04:df:4b:dd:48:1b:ad:08:d6:e4:97:c8:59:63:e8:d6:
40:9a:82:49:0e:ba:9a:1d:63:50:a0:fe:9c:d6:24:c8:e3:8e:
df:e3:e8:5d:70:d7:28:c8:91:27:27:a9:3e:08:22:e6:b5:62:
9f:45:97:cf:00:a9:39:d2:8c:e9:a4:87:5a:78:c5:75:6a:2b:
8d:01:0f:e5:be:cb:a4:65:34:ba:e9:25:d0:3c:fb:ca:21:7f:
f6:10:b4:66:39:b6:ae:cb:da:06:ac:15:22:a5:51:b8:2b:98:
2f:37:35:c0:eb:35:13:5b:67:6f:5f:6d:7c:9c:b9:ce:96:16:
c4:95:64:30:0a:7d:35:66:7f:bb:6d:6c:e9:aa:9f:28:ad:55:
09:18:30:9c:a6:14:3c:27:7b:4e:96:e3:c2:ee:1c:5a:0d:74:
9e:bc:2f:18:99:a8:60:9d:83:d1:dd:30:fa:65:10:07:08:8a:
8b:1d:fd:35:02:b3:1f:32:6c:06:3b:dc:ff:b3:db:d2:64:2e:
c1:11:ce:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:44:27 2026 by rpki-client