This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json)
Hash identifier: qYgbN1/sv5EKW6inV9r1fq/U9LrZ6UqnMubCtWRBYdI=
Subject key identifier: 4E:9C:38:69:7E:48:55:BC:55:8C:9D:FA:0E:7B:5D:D3:87:EF:3F:02
Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0
Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0
Certificate serial: 0A6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
Manifest number: 0A61
Signing time: Sat 24 Jan 2026 19:07:21 +0000
Manifest this update: Sat 24 Jan 2026 19:07:20 +0000
Manifest next update: Sat 31 Jan 2026 19:07:20 +0000
Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: HosfIvyNiG13NRg3YxqdF6Cq+ZUFHGY4gJ4h2FrBGgQ=)
2: EE675FC27BED11EABD4A3A27C4F9AE02.roa (hash: qJ4Xg9nEOiVPnUmULztNOTN0r580BUywYygdp4on9WI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl
rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2667 (0xa6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0
Validity
Not Before: Jan 24 19:07:20 2026 GMT
Not After : Jan 31 19:07:20 2026 GMT
Subject: CN=69751869-39e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:a0:4d:1a:f1:d3:6f:cc:29:b3:1f:de:c5:
5b:94:9e:ed:56:e7:56:10:2a:8b:21:48:10:df:fc:
65:22:6e:64:fd:7a:32:c7:f1:70:1c:3a:57:c1:05:
0e:47:02:e2:6b:ee:9d:d6:a6:c2:25:06:cb:ac:eb:
2c:8b:4e:a9:2d:92:7b:3f:ba:88:bc:e5:5f:44:f2:
c0:09:aa:70:5a:05:02:48:72:7d:dc:78:07:a4:c3:
0b:5b:11:70:aa:fb:bc:95:86:18:53:8a:74:35:12:
23:3a:38:9d:3d:17:5b:48:fb:fc:b2:fd:99:a6:4f:
ad:fa:87:fd:01:fb:08:7f:b1:89:1b:f4:a0:bf:95:
65:fb:49:37:5c:34:bd:38:ff:0d:f0:be:82:c1:5b:
9c:3b:6f:45:17:20:c5:38:39:c8:d0:d7:39:ca:1c:
78:2b:48:61:b0:0b:20:24:86:4c:81:a0:ac:7d:4e:
d3:64:cd:9e:a6:7d:98:00:ff:0e:9c:44:a7:a3:f0:
65:fa:7c:76:34:de:4d:73:b0:15:c0:9c:9d:04:6b:
26:56:a6:a1:92:de:ea:66:47:c2:d7:84:b9:f0:4c:
94:ee:fd:0d:66:9e:13:d5:88:2d:71:e5:c1:93:3f:
da:c2:85:54:ca:23:c7:c0:da:09:65:1b:17:f6:b6:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9C:38:69:7E:48:55:BC:55:8C:9D:FA:0E:7B:5D:D3:87:EF:3F:02
X509v3 Authority Key Identifier:
keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ca:f4:7c:72:dc:48:1e:8d:23:a7:01:51:3d:dd:7c:34:cf:
f3:e9:e4:4b:c0:fe:4a:45:6c:c7:24:52:14:75:60:37:86:93:
cf:1f:4c:3e:cd:47:91:2c:99:c5:f1:14:d9:42:54:51:22:5b:
0c:de:17:d6:3a:9a:6e:a2:0c:42:0e:f5:66:a8:a1:ca:8b:e9:
b9:6a:63:46:55:97:90:57:f9:a2:d0:35:ff:a8:93:46:22:55:
83:7e:9e:a1:68:ad:74:c4:02:bf:c4:ab:a5:d6:41:eb:5f:38:
1f:92:2c:2b:f2:3c:08:c0:d0:27:a8:3d:ab:a3:8a:88:77:a5:
fd:fd:9c:5b:9e:ae:87:50:03:1a:5b:41:da:bf:88:5d:31:a7:
cd:8d:a8:34:7d:3a:ef:86:1a:c8:96:85:c1:81:48:0b:06:4b:
4d:32:2a:66:0b:5a:dd:db:12:87:30:79:09:0b:aa:e7:04:ce:
6b:47:60:a6:48:69:88:17:b9:75:66:07:79:88:f8:5e:14:c8:
0c:65:bc:02:31:02:04:89:c4:b4:51:e7:e3:02:80:0d:b2:29:
a9:c5:33:a5:1c:64:3e:e0:bb:65:18:61:57:fa:ce:c3:cf:49:
74:f5:66:9a:04:11:df:38:15:78:de:7c:f4:6b:b4:ea:52:a3:
5e:56:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:01 2026 by rpki-client