This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
File: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json)
Hash identifier: 3dBs+LpjuSxXQeOzjXI6SUrKL25fpyIC1Ud4a6lTTOY=
Subject key identifier: 9C:1F:41:A8:C5:5E:7A:95:4A:10:76:CA:B2:0A:51:91:BD:FB:25:10
Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Certificate serial: CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
Manifest number: 0F30
Signing time: Sat 24 Jan 2026 17:26:33 +0000
Manifest this update: Sat 24 Jan 2026 17:26:32 +0000
Manifest next update: Sat 31 Jan 2026 17:26:32 +0000
Files and hashes: 1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: MkINUWf2FBRnMOgzqAnECMzoVVjes0iMAPkwGmWF8tI=)
2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: Dfnpdx7fQvQO0Rh8jNA5Tx09pBgCccW2N8IKNsboZGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Validity
Not Before: Jan 24 17:26:32 2026 GMT
Not After : Jan 31 17:26:32 2026 GMT
Subject: CN=697500c9-75ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:94:84:d1:27:0c:6d:4d:28:a8:6e:95:5b:
dc:56:34:db:9b:2a:a5:3b:89:c2:30:ef:c8:d1:51:
55:21:1b:0d:a0:2f:45:26:ff:41:62:78:34:da:24:
e8:e5:60:66:b9:c5:b1:98:60:b6:51:87:b0:0d:0a:
05:94:fc:24:0e:96:cf:ce:ff:75:4c:08:d0:7b:1c:
38:b3:af:36:df:b2:40:e3:ff:c8:e9:59:75:9a:3a:
b5:28:34:f3:47:29:7b:eb:72:2e:78:4b:66:91:65:
6a:df:f6:49:90:ce:28:99:11:e3:0e:64:9e:2f:9b:
47:37:b7:01:60:be:4f:6d:d2:8a:16:73:99:d4:36:
a7:88:77:66:8b:ae:2d:b6:c2:fb:bc:14:90:12:c5:
77:93:7c:24:cb:5d:46:86:2e:35:91:15:2b:39:67:
62:2a:96:56:50:ed:f8:5a:f6:aa:9d:41:17:af:14:
68:dd:58:33:dd:00:cd:f3:4a:aa:be:69:47:c8:ba:
83:30:0f:52:3b:64:4f:59:61:fa:15:e6:e5:6d:fe:
88:29:91:d8:9b:3c:1a:0f:af:59:98:c6:47:cf:b7:
43:43:66:35:67:ff:bb:2d:86:08:b0:37:bc:b0:e7:
89:bb:46:33:71:71:e5:8a:29:e6:d7:80:ee:7c:22:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1F:41:A8:C5:5E:7A:95:4A:10:76:CA:B2:0A:51:91:BD:FB:25:10
X509v3 Authority Key Identifier:
keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:4d:4a:59:69:64:c4:c8:fe:42:f0:f4:58:67:33:81:fb:b8:
21:1a:93:f7:7d:7b:e6:56:6d:48:4f:3a:75:b0:9f:ee:7a:89:
4f:3b:03:c3:48:15:70:4d:e0:1f:50:89:02:9d:e2:58:52:e8:
db:f2:1d:3f:09:3e:16:d4:95:86:c4:17:f5:8d:ce:98:e5:76:
13:74:bf:1e:b1:99:40:03:f3:88:d8:a9:d7:2d:99:0d:d7:bf:
25:c9:1c:bf:f1:3b:b0:6b:e3:16:56:a1:11:de:85:35:1b:15:
5b:f6:b0:7e:d7:83:81:e4:87:9c:3f:64:71:c2:22:f4:77:20:
a7:8d:92:af:22:61:19:46:3d:72:e1:09:a4:b9:cc:97:6d:cd:
59:40:c3:1f:0b:31:a8:c7:ea:57:61:3f:34:63:0a:9e:b4:f3:
d3:b8:6f:e7:34:7a:8e:d0:5f:ee:34:5f:e2:78:71:59:1e:e5:
78:13:de:96:72:ee:36:70:c7:ac:71:e6:bc:fe:b3:80:9d:48:
99:39:88:e8:bf:9b:1b:c9:0c:81:9b:c7:57:85:e6:99:a1:d9:
cd:3a:d4:62:6f:66:47:33:36:9c:4f:f4:ce:6a:8b:03:b9:5e:
86:7c:74:27:cc:66:20:50:7a:97:f7:3d:3f:53:0b:22:37:bd:
70:d4:51:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:31 2026 by rpki-client