This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json)
Hash identifier: ncehg/S0WUEcTKDqEsYXXfoafVBOT/QbBR19mPGQL2Q=
Subject key identifier: 5C:C1:30:ED:08:6A:EE:2B:12:02:1D:B2:04:53:01:25:78:59:16:EE
Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
Manifest number: 017E
Signing time: Sun 25 Jan 2026 03:02:40 +0000
Manifest this update: Sun 25 Jan 2026 03:02:39 +0000
Manifest next update: Sun 01 Feb 2026 03:02:39 +0000
Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: uQRzIRvti8an6KCuiIgq9QHfJStClEdtkx9bR/3YjJk=)
2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Validity
Not Before: Jan 25 03:02:39 2026 GMT
Not After : Feb 1 03:02:39 2026 GMT
Subject: CN=697587d0-dd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:61:66:bb:c9:25:e6:7e:6e:96:05:3a:55:
36:b8:90:ea:b0:51:b4:fd:4a:d3:7e:d9:26:17:12:
4b:ae:da:a7:45:3a:85:59:c9:87:10:5f:12:80:b1:
36:fb:88:f1:c0:5b:c6:10:32:4f:1e:e1:a6:2d:0b:
c3:84:d1:30:ac:34:41:e5:62:c1:62:ea:00:d2:57:
6a:fe:3b:08:6f:23:d4:75:d8:7c:5b:64:5f:13:c4:
8f:cf:d9:01:fc:f7:ea:72:7c:45:61:3d:8d:25:6d:
eb:b0:a8:99:da:7c:d5:4c:99:0d:95:59:a0:e9:95:
f8:71:28:67:b5:5f:8a:67:16:81:7e:1d:fa:62:dc:
91:23:c9:8e:86:25:ff:dd:ea:ea:13:d5:3a:3d:f7:
78:da:44:83:88:71:cd:70:7b:e9:68:96:4d:bb:d7:
81:ef:b6:6b:6e:b0:6a:11:f5:00:0c:14:53:32:fc:
fc:0b:39:a0:54:11:47:fb:86:12:31:7e:9a:0b:37:
ef:da:81:2f:20:e1:9b:26:d4:51:a0:e7:f1:53:db:
6f:e6:6b:d4:3b:d9:3f:b2:d7:e8:0f:3e:cf:06:7f:
4d:98:b3:64:ca:90:5e:b3:bb:24:be:96:31:47:3d:
5b:66:fc:65:af:b4:83:0f:e3:01:8e:34:47:2e:56:
63:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C1:30:ED:08:6A:EE:2B:12:02:1D:B2:04:53:01:25:78:59:16:EE
X509v3 Authority Key Identifier:
keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:80:55:4e:1f:c3:32:ab:f1:87:bb:38:6b:ab:e0:b9:a7:1b:
76:49:7f:14:e2:fc:a0:52:a9:07:14:38:51:13:d9:0d:3d:b7:
0f:bd:4b:46:11:a7:e3:c0:8b:98:4c:73:1e:ee:95:4f:7b:b1:
ce:e9:12:67:03:0b:c3:13:a5:bf:d3:85:3a:b4:2f:70:f3:77:
b0:f6:af:c6:15:27:c3:97:4e:68:11:f8:b7:d1:45:dc:ab:d9:
f7:61:04:e8:be:fa:22:a2:00:d1:14:8f:41:73:e6:91:93:55:
43:50:b1:0b:f3:89:d9:9d:23:5c:c2:2c:32:5c:2e:4f:3f:c2:
c6:09:fe:7d:52:2d:be:1b:90:02:44:b1:41:2f:94:85:f2:55:
76:b7:55:44:39:dd:c0:56:87:4d:9b:95:f6:c9:19:1d:c3:3c:
43:56:56:80:75:55:18:7a:dc:b7:59:71:e2:ec:07:26:38:b6:
34:7a:bf:cd:22:c8:da:66:39:9c:10:29:ad:0d:58:8b:2c:e6:
44:bf:32:ee:6f:25:ef:d4:bb:55:84:fc:64:3f:92:d5:27:3a:
58:04:70:3a:ad:ab:3e:f3:fe:ca:53:f8:34:3e:4f:2b:9d:43:
ff:68:05:b1:47:6a:54:13:e1:33:e6:4a:5c:68:7f:73:6a:db:
dc:4f:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:01 2026 by rpki-client