This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
File: jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft (raw, json)
Hash identifier: r6aNeRq1cgEDDABg5+WgGysnrqMww9OkvNp/ariyc/Q=
Subject key identifier: 16:A8:12:76:86:CA:BC:89:C9:CD:1E:EA:65:D6:F7:83:18:0A:9E:68
Authority key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
Certificate issuer: /CN=A91D94CD/serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
Manifest number: 3C
Signing time: Fri 23 Jan 2026 06:29:28 +0000
Manifest this update: Fri 23 Jan 2026 06:29:27 +0000
Manifest next update: Fri 30 Jan 2026 06:29:27 +0000
Files and hashes: 1: jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl (hash: ZLyM8LG0rbqiN4gFH+Ake75h7IrACzPN7FxqB/LsfF4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Validity
Not Before: Jan 23 06:29:27 2026 GMT
Not After : Jan 30 06:29:27 2026 GMT
Subject: CN=69731548-ebf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:b6:7e:40:fc:fa:1d:53:f2:4e:c1:21:83:
5b:7b:bb:50:00:c5:84:7f:ad:cc:99:dc:49:a6:32:
a9:5a:61:19:82:69:ce:9a:87:4b:cb:4b:35:38:3a:
dc:86:88:78:15:1e:9a:76:5a:ad:df:89:c2:1c:25:
3e:51:e0:53:57:23:33:0a:c4:28:67:08:03:53:3b:
ca:87:bc:80:e5:53:b1:fa:b2:dd:c4:32:64:16:31:
55:25:4f:f3:95:71:4e:61:a3:44:af:e2:1e:5d:a2:
ec:85:1f:3a:af:d7:42:f6:f3:94:0e:96:49:59:fa:
4d:d3:3a:f9:79:f9:10:f5:ba:fe:3a:84:6b:fb:45:
df:f7:05:38:a6:45:17:64:12:0d:43:1b:c3:8e:f5:
8f:4f:2e:af:f4:c0:e3:3d:28:28:25:2e:6f:d2:c6:
4c:a3:b4:83:db:ec:6b:0f:55:d5:02:44:c9:83:b8:
05:61:6f:b8:d9:dc:03:97:f4:25:8a:fd:06:97:d2:
ec:51:88:94:9a:73:5b:85:96:98:53:68:ca:07:0a:
ae:3a:0a:e6:e3:77:1e:d4:3a:9c:04:29:26:c6:a7:
35:c1:87:66:d6:d5:bb:18:ee:ca:f2:1e:ff:5c:40:
66:f7:c6:17:39:85:47:86:39:b5:cd:d9:cb:eb:a2:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A8:12:76:86:CA:BC:89:C9:CD:1E:EA:65:D6:F7:83:18:0A:9E:68
X509v3 Authority Key Identifier:
keyid:8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:50:d7:0f:da:a7:14:e4:2d:48:61:a8:2f:ee:ba:38:e8:e6:
b4:f5:cb:ab:92:ec:56:1c:59:87:76:f5:67:77:d1:6b:9f:02:
b6:6a:a0:76:e2:88:21:a0:df:a7:ef:7e:10:58:18:0b:49:5e:
82:78:9f:2e:a9:54:c9:35:b9:e9:00:a5:30:d2:4f:e5:24:69:
bb:95:cc:26:e0:67:6e:f0:09:8c:19:12:f9:5d:f8:2d:f7:6e:
58:6d:8c:1f:aa:f2:6a:45:70:24:6e:b1:77:1b:b2:d5:6c:02:
66:00:fc:22:66:39:dd:17:27:b4:fd:e7:c8:0f:4a:9f:9f:1c:
8e:f5:5d:4d:fb:27:1c:84:02:a3:fe:d7:58:d1:b9:52:dc:75:
f9:3f:c6:81:58:cf:3d:f6:da:f0:5d:b0:34:e0:fe:cd:6a:0c:
5c:44:7b:42:2f:2a:15:16:c1:52:fe:86:d1:ba:50:56:a0:b0:
a3:71:63:5d:80:ce:b2:eb:18:58:fa:6c:41:15:4a:c9:ed:31:
4c:32:82:f0:92:2a:38:a0:c5:fa:82:9d:46:35:e6:e0:ac:d5:
0a:ef:20:a0:7f:9a:37:8a:8d:43:97:9d:57:fe:a1:04:4a:73:
41:02:1f:c8:db:f9:cd:0c:32:06:78:0e:1f:dd:ae:c1:55:7f:
d0:ec:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:47:07 2026 by rpki-client