This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json)
Hash identifier: J8XsssE5AReRTf7vCZD0I8tIFfLWBcdvq9iBkmNlmT0=
Subject key identifier: D4:EA:D2:88:0C:01:ED:AB:A2:90:4A:23:FC:A1:54:58:E9:B4:A1:51
Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30
Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730
Certificate serial: 2142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
Manifest number: 2C39
Signing time: Sat 24 Jan 2026 15:45:25 +0000
Manifest this update: Sat 24 Jan 2026 15:45:25 +0000
Manifest next update: Sat 31 Jan 2026 15:45:25 +0000
Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: cP6nMqkZ5hrDAL7cYV3dfhRGm7wprf8sGVj6so0CvCs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl
rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8514 (0x2142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730
Validity
Not Before: Jan 24 15:45:25 2026 GMT
Not After : Jan 31 15:45:25 2026 GMT
Subject: CN=6974e915-1aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:a5:06:6d:20:97:13:9f:f3:e5:90:78:ae:
d5:09:d0:8f:fa:1f:c8:62:27:05:39:6b:30:a5:e4:
ca:0d:21:1b:72:3c:c1:bc:d1:0a:53:30:57:65:e3:
ee:d8:86:5e:15:3e:06:48:08:84:bf:1a:ee:7e:28:
a5:cd:17:f6:e7:dd:72:6d:f9:14:ea:26:3a:fb:05:
90:f1:d6:a2:0b:57:87:c7:9c:88:69:ff:ac:e0:dc:
19:53:a5:57:f3:cb:60:a8:88:ad:e3:11:ba:fa:6d:
6c:ce:95:6a:00:ad:ba:f7:32:19:ae:7c:28:52:42:
b2:25:13:29:d2:43:fa:5d:f4:2e:03:68:60:85:34:
0c:15:c0:2d:6d:c1:1b:80:28:1d:72:4c:67:54:d7:
f8:e1:1d:fb:05:59:ff:f1:9f:c8:87:fa:3b:3e:fd:
01:1a:66:50:af:01:57:01:f3:02:b3:2b:ea:e0:6e:
97:f5:fb:a8:8e:f7:2b:51:34:0b:af:43:31:2d:00:
ab:20:ba:b7:24:82:1a:37:b4:1e:6d:35:eb:97:aa:
c1:3e:bb:ec:8d:dc:6c:f8:ea:85:96:dd:5a:12:04:
10:0d:b0:70:43:9a:1d:65:fb:00:20:d8:5f:f5:d8:
c3:6a:22:97:04:e2:4c:ad:ad:28:0f:73:50:50:e6:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EA:D2:88:0C:01:ED:AB:A2:90:4A:23:FC:A1:54:58:E9:B4:A1:51
X509v3 Authority Key Identifier:
keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:23:ac:56:d2:42:3a:74:92:1a:09:c8:b0:c6:fa:ec:e5:82:
d0:e5:95:65:b6:2b:10:3e:ab:34:0c:76:f7:dc:05:24:ef:0c:
df:a1:52:e5:2f:3f:52:04:d7:18:97:fb:a4:49:fc:9f:be:be:
f6:b2:6a:3e:2e:9c:3e:59:08:9e:f7:31:f4:ab:4c:72:15:2b:
05:c8:2d:96:44:7d:cd:ea:d4:42:d5:b5:de:6a:3b:5b:f0:dd:
be:d1:ca:f9:3e:95:f2:b9:bf:aa:d3:17:3a:94:88:1e:c3:ac:
b2:6e:41:3c:5e:9f:84:9c:a9:62:cb:1a:47:12:11:c5:5b:49:
c7:a0:cb:21:7a:61:bd:cc:b8:7e:7f:a9:43:9a:4d:c4:15:31:
1a:f2:cf:8e:87:75:b4:9e:f2:3a:48:61:10:72:b8:ca:92:5a:
da:99:aa:5e:b5:ec:d2:60:39:7c:f7:46:73:9f:cc:36:36:53:
d6:65:4d:2e:81:c1:78:e5:04:ee:e9:fd:09:8b:e0:eb:d7:a0:
c6:d9:f0:99:e9:44:fc:ea:f5:fe:1d:79:6c:be:81:d7:b5:f5:
37:af:28:e2:f2:d1:dc:51:7c:0e:06:81:f0:06:bf:1e:d3:b4:
45:59:26:fb:89:44:78:d8:15:db:f4:91:29:b0:6c:02:e0:6b:
8b:ee:d8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:22 2026 by rpki-client