This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
File: JfnbYAet9vV-xO_3piv01C2nXsU.mft (raw, json)
Hash identifier: f92ZhQQU3AguFA8AMRnwnQ+eindbNVdAp3o17hfrtJw=
Subject key identifier: 41:46:5B:7B:0F:D7:95:E3:A9:8F:4F:6D:C5:B7:96:D2:F3:1E:AA:A3
Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5
Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
Manifest number: 01A9
Signing time: Sun 25 Jan 2026 02:34:24 +0000
Manifest this update: Sun 25 Jan 2026 02:34:23 +0000
Manifest next update: Sun 01 Feb 2026 02:34:23 +0000
Files and hashes: 1: JfnbYAet9vV-xO_3piv01C2nXsU.crl (hash: vME4Gu2jud40Zr81zMGzYUohDmXOTmsRQg++WGS2Z/k=)
2: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (hash: mEWfsTcA2IvJ08SERafVpG79nAxQN7WQ08fS/psaf1M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl
rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3F79, serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5
Validity
Not Before: Jan 25 02:34:23 2026 GMT
Not After : Feb 1 02:34:23 2026 GMT
Subject: CN=69758130-ffcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:cd:71:a4:93:8a:c2:30:49:71:30:95:d7:
6d:b3:bd:1c:44:bc:44:c9:e4:17:0b:7b:0c:05:50:
5a:eb:65:f3:4b:b4:ca:54:de:36:63:a5:15:bf:bc:
81:7d:60:58:16:aa:0a:7d:82:07:fa:45:7b:6e:fd:
64:31:b9:f9:27:c9:32:41:1f:0e:57:8a:67:87:37:
cb:f7:86:10:87:75:3f:6c:f7:ac:f2:d9:37:26:c1:
5d:10:73:26:a4:df:74:a2:c1:66:51:d0:de:79:0d:
e4:c3:51:c6:68:04:e3:43:c9:31:34:4c:7b:dc:72:
c9:40:32:54:ab:05:b5:d9:30:ae:e4:de:51:5b:94:
35:d6:1d:c7:dc:ff:50:18:6c:2d:86:6a:29:d0:7f:
96:45:5e:3a:d5:6c:b8:71:31:2e:27:af:21:ed:4c:
67:33:5c:d0:4c:b4:8e:8a:87:21:db:b2:02:aa:ec:
61:5a:b4:33:24:d5:03:6a:81:82:16:3e:3f:58:cd:
5f:3f:c2:72:c2:79:bc:86:9c:1f:af:63:ec:69:ac:
c0:3a:9d:bb:76:e0:da:7a:cd:e1:b8:07:a6:32:38:
25:e8:93:18:45:50:25:b7:e0:eb:aa:83:4d:87:21:
ae:e7:4e:79:14:77:74:e1:8b:24:9e:9c:c7:b8:e3:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:46:5B:7B:0F:D7:95:E3:A9:8F:4F:6D:C5:B7:96:D2:F3:1E:AA:A3
X509v3 Authority Key Identifier:
keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:dd:07:c3:39:cb:08:1b:6d:66:04:2e:23:61:ab:f8:7b:8c:
51:6e:13:c7:9e:1f:69:ec:a4:26:57:6d:76:35:81:e9:48:d7:
44:33:13:d9:c8:2d:af:4f:9a:02:0b:de:85:b4:db:b8:ad:2a:
45:1d:cf:b1:e6:90:c2:9e:6b:32:75:97:f2:ba:57:d9:d7:05:
d4:8f:b1:ad:67:7b:6a:35:f5:19:64:6f:17:76:30:9c:90:d1:
6b:32:c2:47:be:c9:92:4f:17:67:47:2e:b0:f7:54:d0:63:b6:
ef:17:0b:df:06:25:8e:1a:fa:0a:ba:8d:44:e5:41:50:74:30:
94:5b:0e:96:8a:80:45:45:fe:f3:d7:72:e5:04:ad:f7:3b:f1:
34:f9:bc:26:c8:73:55:ec:2f:8c:34:73:e4:dd:96:70:34:ad:
2c:5b:15:5f:87:7c:ab:42:a8:82:fb:97:92:bd:7d:40:30:c4:
3a:20:95:5f:32:a6:54:c2:07:85:6b:f8:0a:21:52:a7:16:6f:
79:b4:86:fe:19:54:52:09:68:c4:37:2d:4c:b3:0c:01:fb:19:
02:40:e1:37:8c:26:a5:58:bf:82:c4:60:44:66:d2:ae:61:1c:
ae:62:a4:d0:08:67:dd:56:ed:cb:90:5e:26:a2:89:a0:fd:a6:
0a:c1:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:13 2026 by rpki-client