This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
File: rC4NP0JyIX_vudMtzhozLelqOF4.mft (raw, json)
Hash identifier: O4+oUB0DBu7gWLpLqP7ELyzpP+CCADmHkVAWF5xYYJc=
Subject key identifier: 61:16:A4:35:EB:7D:2F:05:14:6A:77:E7:3D:E0:4D:C1:6E:58:72:D8
Authority key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
Certificate issuer: /CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
Certificate serial: 091F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
Manifest number: 0916
Signing time: Sat 24 Jan 2026 19:42:18 +0000
Manifest this update: Sat 24 Jan 2026 19:42:17 +0000
Manifest next update: Sat 31 Jan 2026 19:42:17 +0000
Files and hashes: 1: rC4NP0JyIX_vudMtzhozLelqOF4.crl (hash: d6pSJEl52J32Z6CXXmlnziuU5FQsga8nHUCcpDg3r90=)
2: E034D1A6BC6F11EA8FE53280C4F9AE02.roa (hash: gGfvaVEV+hPlcS/KUAGxCctceZxcis75EZYZWWO9DrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl
rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2335 (0x91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5E1, serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
Validity
Not Before: Jan 24 19:42:17 2026 GMT
Not After : Jan 31 19:42:17 2026 GMT
Subject: CN=6975209a-c49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0c:d2:07:a8:27:3c:61:81:7c:0e:3d:c9:d4:
b7:db:f1:08:4f:23:2d:44:f4:59:d3:a7:e9:6c:41:
53:25:18:17:5b:fe:2d:72:7f:69:18:9f:f9:89:3b:
de:0d:e8:8a:a0:bb:e7:e2:69:93:7e:1a:0c:d3:c6:
d8:96:1f:eb:c4:af:8a:07:09:e0:a0:5a:1d:f1:37:
58:96:71:d8:8a:d8:fc:c3:9b:f6:d1:6d:43:ae:23:
a3:0e:bd:e6:2d:a1:2f:8b:b1:8c:f6:9e:90:b2:81:
bd:2f:78:a6:36:2a:57:72:d9:b0:5b:d1:99:10:7c:
b1:c0:0f:81:c5:5f:ae:2d:bc:f2:f0:f3:d5:53:c7:
b3:af:c1:76:2f:ad:c1:aa:2d:8d:6f:13:71:ab:43:
b4:df:af:8f:54:ee:6a:3b:40:13:f6:ad:a7:0a:07:
06:b4:c1:8e:53:a0:01:2f:70:fa:68:be:ee:49:6f:
c4:f9:d6:b8:f2:cb:0d:f4:e1:2f:1c:dc:04:b5:74:
b1:e8:03:42:20:80:09:dd:1d:67:4b:ab:e7:a9:45:
48:bf:dd:45:fc:72:4d:15:29:b5:c8:39:7a:1d:22:
aa:87:a8:8b:5f:fe:27:13:d9:b9:b4:fa:ac:8b:d1:
5d:b6:54:cd:8c:32:a6:a2:61:7b:c5:1b:2e:84:81:
64:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:16:A4:35:EB:7D:2F:05:14:6A:77:E7:3D:E0:4D:C1:6E:58:72:D8
X509v3 Authority Key Identifier:
keyid:AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:36:dc:57:60:52:76:be:e3:3f:07:a1:2e:3e:ac:41:e5:d1:
51:57:6e:74:93:5c:1c:81:80:3c:5a:29:3a:9e:3f:d8:2a:36:
3f:ca:f9:25:21:09:7c:9f:a7:2b:a9:71:1a:c1:42:63:f0:17:
b1:cd:72:56:9a:32:ca:47:d3:53:2d:fd:b4:f8:77:49:52:5d:
54:96:4c:f5:3a:e4:5c:d0:62:47:c9:9c:54:f4:7a:df:80:ca:
fb:38:6d:09:c3:45:18:0b:d1:5f:f1:e7:f7:fc:1a:c0:18:e1:
fd:a6:d5:d5:a3:f8:b0:cb:d8:7e:a2:b6:47:11:dc:15:b6:7f:
d1:af:e0:d4:48:4b:de:d2:42:80:20:ce:bc:79:41:d3:71:23:
e0:07:b4:9d:22:85:be:ca:7b:ef:78:ec:66:90:2a:66:19:22:
9b:a6:d8:fe:f9:d2:6d:99:53:0c:46:36:b2:f7:e4:bf:94:57:
c3:f0:3d:4f:19:4f:d8:0f:c4:49:b4:8a:f9:f7:b8:6f:dd:45:
8b:2e:69:3e:cc:3b:25:1b:16:c0:ac:0b:f5:f5:58:36:bc:31:
3e:2f:26:2e:31:dc:4b:b8:3c:3d:98:67:78:58:8a:d3:a2:44:
f6:85:3c:69:61:fc:25:47:47:c3:8f:a4:d6:01:59:38:af:7f:
24:14:39:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:36:04 2026 by rpki-client