This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
File: akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json)
Hash identifier: 0lx9Gr2nwZddQDWzcOCPSFHyMv22O+U5w3uPUxqh7YA=
Subject key identifier: 63:45:5C:24:97:EC:10:70:A2:5A:7C:2F:92:A7:F1:C5:0C:74:52:41
Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A
Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
Certificate serial: 0ABF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
Manifest number: 0AA8
Signing time: Sat 24 Jan 2026 19:00:51 +0000
Manifest this update: Sat 24 Jan 2026 19:00:50 +0000
Manifest next update: Sat 31 Jan 2026 19:00:50 +0000
Files and hashes: 1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: +bebnxdROPdMK8pbDamvybuUC5m3RFytx9QzoLIuEQ0=)
2: 6EE80A72F80A11F0BD0E5DB76F6F56BC.roa (hash: lI2EYgoHbcGwVYLsv0P0XEPZGw45hhWwxXQ6SO5/sFc=)
3: 6E71C43EF80A11F0BD0E5DB76F6F56BC.roa (hash: AoSWHnHeJHAZxbBNEmztO4nA3TtHta72R2db8WolK80=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl
rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2751 (0xabf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
Validity
Not Before: Jan 24 19:00:50 2026 GMT
Not After : Jan 31 19:00:50 2026 GMT
Subject: CN=697516e2-d267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:90:ca:ee:e2:c0:9b:ce:26:8d:b3:5c:a3:
f1:92:d0:ec:7a:c0:5f:65:09:1e:92:5a:55:2a:7a:
1f:9b:cb:95:3d:0f:00:46:f7:e2:a8:e7:5f:41:59:
0d:32:5b:81:82:59:73:c0:2f:3a:fe:12:c1:38:ea:
0b:a3:46:6a:3e:fa:63:66:6f:ff:d1:a0:18:3b:5a:
00:07:08:04:8f:ee:11:d6:57:04:f2:af:bd:8e:42:
e1:72:59:72:a4:03:f9:d0:77:95:6c:b3:e4:8b:82:
1a:a8:0f:09:52:12:71:11:c2:eb:28:b0:18:cc:ff:
9d:07:f8:dc:89:15:79:d7:45:31:7b:f5:ae:82:e7:
dc:2a:2a:b9:80:bc:24:0e:29:67:c8:50:d6:d4:e9:
8e:e4:81:8e:b8:e8:cb:d3:1a:82:8c:43:f1:51:fc:
73:75:b4:d8:a4:59:74:6a:40:a3:10:26:a4:e9:f2:
10:7d:96:2b:12:30:1c:1f:bc:88:8c:f3:ed:7c:29:
b4:22:4f:ab:ef:a2:d7:cf:f1:0a:34:c1:1c:73:d3:
65:04:49:cc:6a:8b:df:a9:28:7d:5c:ac:c7:fb:a8:
03:99:09:4b:e2:2e:07:e7:af:30:b3:83:b1:f0:35:
97:42:fa:b8:5b:b5:bc:69:ea:c2:67:f0:27:87:ae:
24:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:45:5C:24:97:EC:10:70:A2:5A:7C:2F:92:A7:F1:C5:0C:74:52:41
X509v3 Authority Key Identifier:
keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:1f:d7:ee:c1:ca:d9:d5:2c:85:27:e5:be:2b:bf:c1:9b:73:
7c:db:c0:c5:07:db:91:88:73:06:ea:af:2a:17:df:5a:6e:68:
9e:6e:4b:18:63:db:17:f9:76:4e:95:aa:a6:96:50:14:b9:ed:
26:7f:ae:7c:20:ea:fa:f9:ed:61:f2:82:21:63:8e:dc:0c:04:
ae:6b:7a:1a:3c:08:60:7d:07:6d:69:85:4f:10:54:a9:3b:57:
91:f1:fe:36:1c:8b:cd:01:87:a3:d9:0b:e7:92:d9:b7:f6:c6:
e3:f9:08:94:3e:3b:e4:be:77:25:44:d2:4d:25:60:10:bd:b9:
a1:d6:20:6b:4d:60:bf:0d:41:25:93:60:ce:6d:5f:26:77:db:
ba:b9:00:16:d0:b8:b6:05:8c:41:ab:ce:92:ba:af:90:41:a4:
4b:4a:f8:30:c9:e8:5a:96:24:4d:60:3c:07:e5:08:28:08:66:
71:3e:6b:d6:f4:c4:e2:78:76:bc:0e:d3:1a:7f:38:26:b2:9a:
8c:bf:fb:d3:2a:7f:24:a7:d6:63:29:e1:cb:95:4a:13:0e:a8:
43:c4:8a:b5:79:6f:92:bd:0a:a0:1b:9b:c6:f4:fc:cb:97:cc:
f3:f7:e2:04:8c:41:ee:df:98:9c:ae:0c:61:ec:1a:11:01:03:
e1:2d:12:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:54:47 2026 by rpki-client