This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json)
Hash identifier: C/RFZGeAJKv3aTcpKbw+K7869paw6XqMQCpyFoIoWNM=
Subject key identifier: 11:2C:9F:A4:8D:5F:02:83:78:FF:4E:A1:76:76:25:E3:70:E5:2A:1B
Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
Manifest number: 011E
Signing time: Sun 25 Jan 2026 04:01:20 +0000
Manifest this update: Sun 25 Jan 2026 04:01:19 +0000
Manifest next update: Sun 01 Feb 2026 04:01:19 +0000
Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: zw2/gcEG8ccB/PeIEnb2QjCvm2flw5ZRm4l8iOUcSXM=)
2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: UpIAy5XzLGpRbUle85RmmJykvGWG7TnveQfe0j0IKLQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Validity
Not Before: Jan 25 04:01:19 2026 GMT
Not After : Feb 1 04:01:19 2026 GMT
Subject: CN=69759590-8fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:3b:39:4c:66:35:15:fd:39:0c:3d:aa:6a:
bb:ae:aa:2a:2d:4a:2f:be:6d:79:f8:e9:c8:9d:3a:
85:39:19:c1:5e:13:88:ad:56:59:26:5c:ec:51:61:
38:31:33:07:c5:1a:ab:cd:c2:49:b0:40:67:28:2f:
55:77:50:69:47:7e:c9:11:32:70:45:6a:0d:6e:c0:
44:8f:3a:04:c7:74:15:0d:af:5c:e0:dc:a1:62:a9:
dc:9d:a8:93:52:c1:73:9e:80:43:32:1d:c2:7d:11:
8f:5c:88:f0:46:12:c3:e8:24:c7:ca:0b:60:a2:85:
f7:4a:77:fd:0d:9d:b9:03:83:e1:6a:81:0c:a0:5a:
c1:82:0a:35:d0:93:72:c7:24:12:4c:5f:a6:19:b6:
bf:ac:cd:1b:6e:40:cf:61:3a:62:99:82:df:e2:b8:
4c:97:d3:49:6a:be:3e:52:08:f3:e5:13:54:65:39:
39:63:9c:32:93:27:0b:da:05:36:b4:5b:be:95:db:
1b:6d:77:ce:22:3b:04:89:de:85:42:ed:35:ff:f0:
29:38:c2:5c:57:3b:17:f6:72:4d:0f:4a:72:7a:13:
2b:81:1b:61:f8:98:80:fa:1f:96:b2:a5:10:b8:59:
81:11:ae:50:07:04:b1:60:14:01:38:86:53:05:38:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2C:9F:A4:8D:5F:02:83:78:FF:4E:A1:76:76:25:E3:70:E5:2A:1B
X509v3 Authority Key Identifier:
keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ca:7a:0d:2d:ec:55:e2:4b:9b:b6:24:34:92:b5:f4:9d:22:
f5:1f:85:e8:52:bd:a0:42:a7:fd:e2:23:a2:5d:99:6d:cb:34:
94:e9:52:97:6f:34:85:45:62:c5:ce:11:37:eb:13:0e:a2:7e:
14:a2:c8:54:2a:71:15:4e:98:2b:f5:71:a5:41:25:1f:7c:90:
6c:86:81:f0:04:c2:ad:11:b0:f8:43:d7:be:7b:40:07:f8:94:
d2:cc:c8:ef:59:04:9c:cb:ff:73:8b:ce:16:16:df:b9:49:58:
b8:07:98:1d:0f:4b:12:2e:33:ef:f6:7d:99:8d:bb:be:4a:75:
71:80:6a:b3:e8:e8:33:3f:29:c2:57:2e:5a:bf:79:8d:d6:df:
dc:62:f2:1b:be:02:3e:ad:ba:25:f7:6e:35:a9:55:ca:9a:3b:
05:4e:fd:9b:90:fa:cb:0e:28:0d:ad:6d:1a:1d:b7:80:68:cd:
4e:50:06:af:4f:d3:58:f6:52:8b:ce:a6:30:98:dc:31:7a:6e:
ac:68:93:8b:28:e9:1c:63:e3:a2:9c:40:aa:ad:35:b6:d2:52:
14:97:a7:46:93:ff:2c:f1:86:f3:da:47:79:39:ae:50:c5:d2:
2b:00:7b:c7:dd:4f:44:57:17:02:18:e9:d3:1c:9d:f4:2e:38:
77:8c:3a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:01:22 2026 by rpki-client