This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
File: ElYBj-blOMQA9j_H4SHDpwHy3qk.mft (raw, json)
Hash identifier: UWriaKNiRL3abP/cQwj3FLZ0uGdY4f65Mr8PP7uRw9Q=
Subject key identifier: EC:09:3D:E8:09:CF:40:A3:2B:3B:9C:DF:06:EC:07:4F:53:66:5D:15
Authority key identifier: 12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9
Certificate issuer: /CN=A91E00FC/serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9
Certificate serial: 0A5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
Manifest number: 0A55
Signing time: Sat 24 Jan 2026 19:08:45 +0000
Manifest this update: Sat 24 Jan 2026 19:08:45 +0000
Manifest next update: Sat 31 Jan 2026 19:08:45 +0000
Files and hashes: 1: ElYBj-blOMQA9j_H4SHDpwHy3qk.crl (hash: rY6miD/asJtrVmx96EdFEJ6eUlUJ8voXr50Sk2/k26c=)
2: 542CA96A0B1911EB92F1EB12C4F9AE02.roa (hash: h8TCOQAYkMWzOV4xPaOkVqyIiRzREyWEnJXkzl12ups=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl
rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2653 (0xa5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E00FC, serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9
Validity
Not Before: Jan 24 19:08:45 2026 GMT
Not After : Jan 31 19:08:45 2026 GMT
Subject: CN=697518bd-48c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:37:8a:1e:03:89:90:d1:c8:37:5b:6a:f1:
a1:64:29:9d:fb:96:d5:b6:54:d1:4f:40:b9:9c:0c:
24:6f:93:3d:1c:b9:a9:1d:b8:a1:d2:e9:17:9b:22:
23:b1:0e:3f:67:8f:5f:c8:19:d5:c3:91:ed:09:72:
f5:d1:d2:3f:e6:d2:7d:2d:f0:cc:88:c7:04:ff:04:
6b:7c:42:3d:41:d1:fe:ed:33:53:15:c1:0e:b8:61:
0d:fc:a0:a5:34:b0:d7:db:ea:b7:03:14:25:6a:87:
ed:99:ab:e0:b5:89:22:39:2a:fa:7a:31:36:42:24:
cc:43:c1:c3:45:61:2f:b9:63:24:1d:f7:f0:91:20:
36:ba:94:e6:cf:75:93:8a:d4:03:b2:93:dd:c3:a0:
0d:2d:d9:8a:97:cd:2f:ca:06:f0:46:41:71:a4:5c:
32:16:df:95:7f:dd:43:02:69:af:e7:42:9e:63:40:
1c:21:d6:19:d5:99:34:85:04:f5:fc:15:ee:9a:64:
b4:f3:f6:ef:ba:74:8a:d6:d3:fa:e4:82:de:d9:e9:
8d:fb:8c:40:67:9c:a1:a1:f3:bc:08:7b:aa:bf:16:
94:85:08:d0:b3:0c:e4:5a:c0:34:4a:89:6d:47:d7:
0e:c4:df:37:3d:ff:bd:20:ff:e7:f5:58:bd:fd:21:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:09:3D:E8:09:CF:40:A3:2B:3B:9C:DF:06:EC:07:4F:53:66:5D:15
X509v3 Authority Key Identifier:
keyid:12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:81:d2:32:e1:10:c6:85:22:06:c3:c8:b9:2d:60:38:e7:63:
3a:42:d8:53:d9:1d:10:42:5f:63:78:b5:8f:a8:79:85:92:cd:
9b:8b:d8:19:86:68:c3:75:b9:92:8f:98:d3:d1:86:fc:eb:6d:
8d:ee:63:e6:e5:1b:8c:5e:29:64:56:bb:7b:47:b2:15:24:75:
c8:7f:57:70:eb:69:c5:0a:1e:30:74:24:8f:42:4c:97:ea:ee:
79:dc:9f:85:95:62:3e:be:65:6f:f9:04:13:c9:4b:73:4e:0b:
2d:30:04:41:37:19:1a:66:70:f6:4a:d8:18:b1:22:04:af:bb:
52:f1:57:c0:46:69:2c:d5:1c:eb:a9:75:fe:76:72:ef:9d:54:
77:b7:bb:a9:12:f3:0f:95:92:51:c4:37:63:9d:c4:22:d5:80:
1e:50:c5:99:02:10:35:f6:ce:0c:93:0e:b8:05:d6:e8:fe:97:
c2:bd:7e:24:04:5e:4e:24:80:42:83:ad:3e:3f:13:8f:26:7b:
f3:92:9e:c1:30:00:64:b2:c8:24:16:59:d3:35:d5:8e:1a:e4:
14:14:50:28:85:e2:7b:fd:10:0c:aa:ea:b2:f7:6a:53:72:7c:
cd:11:c9:77:4f:a0:c2:4f:f1:b3:96:47:5f:a4:35:cc:8f:1a:
b7:de:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:02:40 2026 by rpki-client