This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
File: SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json)
Hash identifier: HRCjqpOSHKoT1lFfOM+QXvCRAJYR4e7bJN107c51RXE=
Subject key identifier: 7C:EC:17:81:67:99:FF:6D:48:6F:46:BD:31:0A:56:CB:B4:68:14:09
Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
Certificate issuer: /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
Manifest number: 1F
Signing time: Sun 25 Jan 2026 01:48:25 +0000
Manifest this update: Sun 25 Jan 2026 01:48:25 +0000
Manifest next update: Sun 01 Feb 2026 01:48:25 +0000
Files and hashes: 1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: Dat8KoKxqnBxp0E+PcFqCtuyKz/keGcNNonb2od5DrE=)
2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: 6w+qBhaQP14zy72YyydEIPq0/gA1jmSu65E6u7NcIZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Validity
Not Before: Jan 25 01:48:25 2026 GMT
Not After : Feb 1 01:48:25 2026 GMT
Subject: CN=69757669-76d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:b9:97:ad:79:61:50:04:71:b8:62:e9:97:
94:04:36:67:79:63:a1:e6:36:5d:4b:7a:bd:53:81:
9f:ee:60:f4:f6:6e:f3:db:b9:57:b2:76:63:e9:70:
da:93:0d:07:32:a7:9a:53:01:c8:01:06:b2:ff:3f:
95:01:1f:c6:2a:c9:f4:00:63:5a:0b:ce:4e:f9:0a:
69:65:e4:2a:2c:a8:a4:a4:d3:c3:94:16:1d:55:6e:
db:07:01:14:9e:97:d2:2d:33:80:4f:07:c2:f9:ed:
2f:74:47:39:23:c4:33:40:2e:60:c0:4d:36:16:10:
4d:55:69:e6:3b:8e:d5:b3:8d:dc:e0:91:e9:ca:a5:
cb:16:81:d5:87:4f:6d:db:1a:64:09:d2:15:12:36:
85:a8:1c:33:ab:2f:29:83:88:c8:11:82:9e:d9:1c:
30:3b:29:26:9d:5c:45:0f:54:62:56:08:41:5d:78:
11:3a:87:b2:ac:79:92:2b:c1:b8:5b:8a:87:09:35:
56:b3:96:1d:07:05:bf:0c:2e:ed:25:b3:f4:8f:9a:
f4:0a:ae:be:fd:58:79:75:32:98:6c:0a:df:d1:c1:
1b:94:df:28:a2:36:25:e8:6c:ac:43:36:87:b8:fd:
92:e5:df:36:b7:90:c0:b1:c5:bd:c2:75:c9:04:45:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EC:17:81:67:99:FF:6D:48:6F:46:BD:31:0A:56:CB:B4:68:14:09
X509v3 Authority Key Identifier:
keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:fd:a6:96:4a:e0:6d:04:24:ce:41:f5:24:5a:43:63:2c:27:
5e:cb:26:43:56:86:84:7c:13:77:d9:d2:93:02:58:2b:57:d5:
10:d0:ca:89:ce:88:82:64:b2:3d:26:d0:3b:6b:36:84:4d:ae:
d9:b6:f1:5b:14:4f:4e:4a:12:64:13:84:a2:89:cb:a8:f7:24:
32:1f:8a:76:f0:c3:93:85:ff:66:71:73:18:64:71:cd:57:60:
19:10:40:50:5b:83:e2:20:11:c0:92:19:38:c7:0a:15:f8:64:
db:f2:91:73:be:c9:4c:66:d0:9e:e8:60:d2:1d:f1:c2:bf:e1:
fe:fd:31:0a:0e:de:78:d4:0e:b0:b1:79:01:ab:66:13:1d:44:
2d:15:32:06:21:11:8b:68:3f:f9:c6:ce:90:f4:81:0c:05:d8:
7f:52:32:69:40:c7:2f:0f:89:8f:33:e4:56:14:fb:15:d6:be:
c7:f3:fc:cd:a8:72:00:7b:43:d9:41:8a:9c:f1:93:4c:05:d2:
a4:80:78:7a:64:d8:ec:26:38:88:53:99:a5:1a:3e:ef:83:59:
81:d6:c2:01:79:c4:70:d7:55:f2:4e:fd:93:6a:70:0a:d7:86:
e3:7c:6d:79:69:bd:42:bb:f8:65:73:2b:00:f4:f2:51:7c:05:
a8:ba:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:08:41 2026 by rpki-client