This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json)
Hash identifier: R/MCQUHBQy+z+OXo52azohnF8VXWNLdpf9O+I6zAk4g=
Subject key identifier: A5:39:06:3A:60:38:38:37:C5:A6:0C:11:3B:83:68:BF:0B:A7:7E:8C
Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
Manifest number: 017C
Signing time: Sun 25 Jan 2026 03:03:51 +0000
Manifest this update: Sun 25 Jan 2026 03:03:50 +0000
Manifest next update: Sun 01 Feb 2026 03:03:50 +0000
Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: tfuNjakAMwz6Ti7vQSvP//LPCVh28yhWMvB7YTyYL4s=)
2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: VWW3LG8bH56OHxKp9a6acMJUcTvLWrd2aS1b8cisvbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Validity
Not Before: Jan 25 03:03:50 2026 GMT
Not After : Feb 1 03:03:50 2026 GMT
Subject: CN=69758816-044f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9c:7b:a3:79:93:d0:ed:4b:83:ce:4d:83:27:
7a:4d:f6:05:7a:f1:44:50:a2:5d:b4:dd:f2:e6:99:
fd:c5:65:16:fe:2f:00:a5:94:aa:91:8e:fb:3d:78:
a7:9b:f7:5b:49:d3:a5:ca:ec:3f:eb:f9:55:bd:55:
9e:9d:1c:05:e6:50:69:17:21:2c:3b:48:f2:60:59:
47:23:24:a4:e7:51:df:a4:cf:3f:81:82:f5:46:85:
0c:67:9f:04:d3:16:3c:49:03:b7:ab:8c:6e:46:26:
14:60:24:3c:e4:8b:63:6b:2f:6c:6b:50:0e:dd:d9:
49:b9:6f:75:42:e3:aa:bd:a1:ca:e8:28:0d:9d:73:
25:6e:14:ff:d2:06:13:75:dd:57:5b:d6:92:7e:63:
f9:b7:01:61:a1:a2:89:52:d8:fe:63:e4:8b:c5:03:
f9:6a:01:fa:0e:e0:24:2e:e0:d5:e3:38:f3:05:de:
bf:75:f7:9a:92:2a:af:6a:64:ae:cc:bc:80:09:62:
89:af:e2:c0:e7:aa:b2:45:63:f7:a9:5a:d6:94:6d:
ac:fa:df:5e:26:c6:45:c3:37:8e:7e:86:9c:f0:3b:
bf:ac:0a:95:d0:24:fa:65:0e:0b:9a:24:96:14:b5:
88:c2:b1:1f:6e:80:80:39:cb:3f:a7:7e:39:3d:57:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:39:06:3A:60:38:38:37:C5:A6:0C:11:3B:83:68:BF:0B:A7:7E:8C
X509v3 Authority Key Identifier:
keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:92:41:4c:4e:64:54:6e:63:2b:2a:e0:64:ed:0c:ff:4a:b1:
83:25:02:b9:21:fd:ca:9b:6a:49:cb:d0:ba:0a:5c:ef:87:56:
16:22:e5:45:93:03:2c:ae:a3:e4:5e:43:de:a2:09:67:19:8c:
dc:5e:f6:ed:fe:2b:ac:93:ed:66:32:86:98:df:5e:ce:25:9c:
91:96:e0:fe:0f:a6:b6:fa:c6:ff:6b:43:eb:36:8d:f9:45:4f:
dc:35:b6:8e:71:93:cb:0c:7c:4c:16:43:56:76:f1:40:80:1c:
f0:15:06:96:63:47:ab:79:f7:cd:02:19:8b:ef:cf:d9:a1:37:
cb:6e:83:c5:2d:d9:97:e9:7a:3a:96:d7:f8:1d:df:e0:44:db:
5c:a2:82:a8:6a:87:e2:b7:74:32:65:dc:1c:ed:6a:b0:31:d9:
d6:c0:bf:cf:ce:81:91:7d:f6:19:c0:38:1a:97:ec:85:db:38:
a3:ca:75:11:d3:ce:2e:19:0a:21:aa:5f:c5:ea:f9:6a:39:e3:
2d:10:43:51:10:f2:54:9a:e4:ed:10:d7:f1:1b:12:77:d3:a2:
ac:0c:a0:3e:24:63:43:8d:19:a7:68:4b:5a:48:93:e5:50:ce:
ef:e3:fe:6a:8a:ed:e4:b7:e1:73:a1:03:bc:7c:1d:3f:e1:28:
9e:04:3e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:48 2026 by rpki-client