This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json)
Hash identifier: OCkO/itS8ne0ymsHDArxN5pQ+vy09+k++H7Zba84+mI=
Subject key identifier: 98:37:F1:3A:95:C0:5A:71:8D:C8:18:3B:31:8C:60:92:77:9D:75:ED
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial: 02E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
Manifest number: 02D8
Signing time: Sun 25 Jan 2026 00:33:25 +0000
Manifest this update: Sun 25 Jan 2026 00:33:24 +0000
Manifest next update: Sun 01 Feb 2026 00:33:24 +0000
Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: hQ0DgTLloVf+7jI9Z/nLa5e0TzpG51FycSS41cUji7Q=)
2: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: ZMuXU8x5oSWaUY/w5FJOwLEX4Eyd5ZHjHOMaRrHb7zk=)
3: 834FFE88679911EEB8243436C4F9AE02.roa (hash: 2l18e24CMiHud0NJE3O3nns7nMxFpBn60Kr5He67lRQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738 (0x2e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Validity
Not Before: Jan 25 00:33:24 2026 GMT
Not After : Feb 1 00:33:24 2026 GMT
Subject: CN=697564d5-2981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:94:fe:53:19:67:26:79:83:25:b6:0a:1a:
26:e1:39:be:61:8b:e8:2d:e9:0e:0b:47:91:af:bb:
95:e5:7d:b5:33:37:87:18:f2:2e:38:bf:7c:7c:77:
a8:0c:8a:54:06:04:f7:2a:f2:21:2b:f2:a6:6f:e7:
e8:dd:5c:04:86:3e:f6:52:57:6b:ae:4f:7d:71:06:
ba:24:14:ec:c1:b0:ad:d7:8e:ed:8b:3a:46:cc:3b:
59:a4:66:34:60:8a:35:d5:28:ff:6b:26:43:69:3b:
2d:ea:4b:40:e0:a4:30:1d:86:b0:4f:38:66:64:0d:
b7:70:72:c5:2f:b9:a8:42:c3:b0:bc:7f:78:88:0c:
a5:3b:3a:64:cf:9c:1f:f8:73:93:46:fd:c3:11:1c:
53:5b:16:a0:55:8d:10:20:27:e2:ad:62:03:6d:ff:
01:cb:10:0c:af:0c:6d:c3:95:da:a4:3d:73:8f:a9:
64:c7:58:a1:53:e4:58:bd:8b:29:6c:e4:fc:91:70:
0a:52:d6:82:e5:a5:8a:6c:45:c2:a3:6f:59:33:3b:
3d:67:77:3f:80:95:51:eb:d8:97:c3:70:8d:83:9d:
a2:21:93:04:05:14:de:80:bb:e6:70:d1:ca:ed:fa:
bb:f9:4a:1a:69:15:4f:68:a0:96:ad:69:87:a4:90:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:37:F1:3A:95:C0:5A:71:8D:C8:18:3B:31:8C:60:92:77:9D:75:ED
X509v3 Authority Key Identifier:
keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:db:d7:8f:3d:16:b2:29:42:2c:ef:b4:ef:6c:c3:c3:e9:cf:
99:ca:5c:12:1f:be:11:e0:e2:c2:8c:70:5c:2b:b0:24:c0:3a:
95:bf:49:ba:ff:24:38:94:28:bb:7a:24:1f:29:25:c5:e7:94:
6e:91:76:1a:f0:d2:0b:38:a8:73:48:59:29:f6:3f:d3:4e:fd:
17:c9:17:83:13:b7:b8:d4:f2:20:7b:15:d1:4b:65:fb:51:c8:
8a:c6:ab:f5:10:ee:60:4c:71:19:62:5e:77:8f:f3:5a:de:25:
65:5b:e6:53:9c:41:97:f8:62:21:2b:99:30:0c:65:9a:e8:49:
64:53:e2:fa:fa:5a:d2:b3:01:42:52:b5:49:9c:90:ce:28:65:
50:97:47:a1:c1:e6:8e:ea:9e:d7:ff:97:87:1d:90:37:e6:73:
3b:5e:85:9d:26:08:52:c1:03:07:69:77:2f:82:33:e1:f6:93:
da:21:e4:db:3a:af:bd:52:4e:10:9f:a5:91:e7:3d:71:87:8e:
6c:d8:78:fc:5e:57:f3:52:0d:f6:55:da:82:64:3a:8e:31:50:
78:49:94:86:43:20:6b:78:27:2a:2d:8e:63:ce:b0:de:8f:be:
8d:9b:6c:68:d7:07:9f:e3:e3:60:1a:6b:49:5a:1a:6e:91:35:
05:f5:a9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:36:51 2026 by rpki-client