This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
File: A1Tb4e09meGUXicnS6L2A-tqF4E.mft (raw, json)
Hash identifier: 66spShl5tYC60N4Ki1dRX1IavWweX4VcO2TbuulTmSc=
Subject key identifier: A6:5F:4B:B4:12:9D:2A:E1:04:C8:22:1A:6D:DB:AD:43:68:1F:70:25
Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81
Certificate issuer: /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
Manifest number: 017F
Signing time: Sun 25 Jan 2026 03:00:17 +0000
Manifest this update: Sun 25 Jan 2026 03:00:16 +0000
Manifest next update: Sun 01 Feb 2026 03:00:16 +0000
Files and hashes: 1: A1Tb4e09meGUXicnS6L2A-tqF4E.crl (hash: DiUFZi6FMZiZCRwgw+KUS3prGDLtnmNY8Q3Z+MrS3+s=)
2: DDCCD058B35111EE96186E1EC4F9AE02.roa (hash: /F1r5TNvz5O+loAxtqvN6ua/Jk1sG70DsTCgwmr+C4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl
rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781
Validity
Not Before: Jan 25 03:00:16 2026 GMT
Not After : Feb 1 03:00:16 2026 GMT
Subject: CN=69758740-56e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:c4:25:fd:d7:a5:1d:fc:86:a4:88:60:d5:
49:cf:07:3b:45:c7:78:eb:93:1e:33:43:c0:50:97:
df:a9:e9:d1:15:c2:0f:2b:0d:6d:59:17:92:4d:2f:
e7:47:f6:70:ac:5f:6d:bc:96:83:25:23:01:81:f1:
9a:5f:94:e6:9b:59:03:08:b2:5e:3e:7b:28:d7:ed:
cb:b7:d4:77:02:4e:5c:cd:21:4c:d8:a5:6c:e9:15:
3e:01:74:92:e4:13:2b:a3:4a:4a:96:3c:c1:04:e8:
c0:73:6d:7f:d1:54:b9:5a:89:56:5f:34:c5:9f:5c:
21:2b:e0:3e:90:7f:ba:59:d2:41:2d:c7:17:ff:3d:
66:43:60:1f:2d:4f:31:70:79:37:20:f9:45:b8:4a:
d0:84:9b:35:65:78:85:47:ff:b4:3b:58:c4:3f:fd:
ea:d6:a4:ea:5c:7d:f4:11:4d:38:84:30:0a:0c:83:
3f:18:08:a9:bf:5b:df:27:d2:42:0f:07:7a:14:46:
37:a0:9c:3b:18:5b:d7:0f:a4:02:21:1c:de:5e:b2:
2e:8a:ef:5b:e0:ae:82:e6:61:46:5e:6b:4c:1d:64:
56:67:7b:23:b9:d8:ea:95:21:9b:e8:15:14:ff:46:
b7:72:cd:98:7d:d2:76:5f:0f:7b:e3:a3:e5:76:3e:
af:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:4B:B4:12:9D:2A:E1:04:C8:22:1A:6D:DB:AD:43:68:1F:70:25
X509v3 Authority Key Identifier:
keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:69:52:08:b8:47:c8:91:90:4c:3b:6d:fe:24:16:d5:2f:54:
37:b8:19:78:c8:2d:d1:f1:ed:48:54:78:ae:4f:a1:e2:d7:17:
e1:39:58:75:e3:3f:cd:7f:7e:65:1f:d7:2d:30:d2:3d:53:ca:
1d:31:dd:b0:b7:e7:4d:7d:0d:d0:5e:10:71:4b:66:b3:ed:6c:
29:0a:56:17:f5:09:cf:2f:3b:09:12:f1:a3:0f:f5:e0:59:28:
ff:bc:5f:52:7a:8c:53:76:6b:d6:40:df:09:b4:bb:83:ec:97:
a6:a7:91:b3:c8:32:f9:86:b0:30:18:98:d1:71:c5:9d:b7:dc:
74:2f:15:f5:1e:60:da:24:e5:78:d7:35:f6:79:04:fe:6c:38:
8c:8e:63:20:7f:11:7c:b2:48:cf:a8:02:c4:e9:58:cd:2b:9d:
90:d6:34:d6:3b:5b:bb:fc:8a:b5:39:48:18:58:09:06:46:82:
b4:42:19:ad:29:c6:a8:a2:e5:85:f9:24:97:4c:6f:a6:78:2e:
0c:bf:c2:69:66:75:5a:72:bd:d4:5d:5f:74:da:5f:69:a2:67:
2b:51:66:4b:b3:d9:b5:b8:2c:33:6f:5e:8e:b9:39:bf:20:36:
d6:9a:9e:f8:b2:2f:ac:23:84:5c:b5:6b:d8:8d:b7:ef:48:fa:
bb:b8:22:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:51:16 2026 by rpki-client