This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
File: x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json)
Hash identifier: QIoJ6mYSDsvqWJBROUz+5ke3oU1vHkHhJzxtsjKLnPk=
Subject key identifier: EA:A1:7F:81:1A:AF:71:40:03:B3:31:97:CA:54:37:CB:0B:FF:4F:60
Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
Certificate issuer: /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Certificate serial: 03DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
Manifest number: 03D3
Signing time: Sat 24 Jan 2026 23:47:07 +0000
Manifest this update: Sat 24 Jan 2026 23:47:07 +0000
Manifest next update: Sat 31 Jan 2026 23:47:07 +0000
Files and hashes: 1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: f6U/v4X6DCui6YmaGg9cTNXUogJkhzGZxIBZWo311qs=)
2: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: U+TSb4gwFFQAjrhJgD02yjkinWTnlvFp6oUJxouw0Y4=)
3: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: +CW3v5l7R9gMqeCZZxElin+bWDGaYeldrsVB5lTI+Bw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 991 (0x3df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Validity
Not Before: Jan 24 23:47:07 2026 GMT
Not After : Jan 31 23:47:07 2026 GMT
Subject: CN=697559fb-c584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:37:db:42:ee:75:d1:f7:ec:e9:55:cc:d6:29:
1c:e5:c1:4c:a5:99:b1:ad:3f:a0:bf:ac:d9:9a:eb:
4e:cf:f0:88:f9:3a:20:39:88:70:b5:fa:26:a9:52:
de:88:5b:52:0b:1c:23:93:f7:27:cb:e7:a1:a6:3d:
10:9c:63:08:92:72:45:30:4b:3a:05:d5:42:b3:6b:
dd:06:0c:48:44:e2:34:20:14:50:c4:d6:02:26:40:
9a:a7:da:2d:15:bd:fa:a7:2b:99:1f:9f:3a:65:c1:
54:45:be:31:4e:58:a7:3f:c9:88:9e:1e:a3:23:be:
e6:91:7f:8e:b1:f4:88:52:75:6c:b8:2a:a3:dc:e4:
c6:cc:4c:64:f4:6c:ef:ef:25:db:16:b0:6c:57:49:
4a:2b:22:cb:93:1f:23:d7:87:22:56:bd:fb:fd:26:
68:f9:89:d9:74:ea:8e:4a:a5:18:23:43:6e:cb:bf:
c5:48:86:d0:5a:4f:f9:4f:b6:b6:f4:64:6a:89:17:
3c:4f:1a:0c:db:6e:ce:5c:09:e8:9f:9f:81:8a:e5:
d4:88:9a:4e:a6:44:cb:b9:23:03:67:8b:24:06:84:
5b:fb:a0:09:6e:72:cc:4f:3c:5a:cd:4c:cd:06:99:
be:3a:65:b4:a0:a1:7a:1f:23:49:34:2c:b1:9b:83:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A1:7F:81:1A:AF:71:40:03:B3:31:97:CA:54:37:CB:0B:FF:4F:60
X509v3 Authority Key Identifier:
keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:70:1c:97:90:4c:8d:f5:91:58:88:c6:c8:7b:06:10:f1:54:
e4:26:bd:34:80:99:f5:9b:c5:af:5a:80:b4:a1:28:a0:b0:a1:
82:9d:31:23:4a:b4:e6:32:dc:3a:55:24:29:2c:53:12:e1:78:
2a:bd:8b:c6:5a:c9:c9:0c:81:2b:33:64:82:92:85:0e:2f:fd:
77:b5:99:3e:d7:b9:58:44:61:d3:e0:3d:f1:9b:b1:32:8d:ba:
23:e5:ef:b1:d6:dc:2e:c0:98:17:a1:d5:09:a8:eb:a1:f9:f6:
1a:de:22:5f:4f:79:a4:c6:02:1f:bc:cd:17:ec:d9:ea:b9:7e:
3b:43:ec:a6:56:40:b2:ce:96:da:7f:eb:5f:e6:10:e9:3a:39:
1b:c4:26:fc:31:c0:14:18:93:22:35:5e:91:f9:f1:42:8c:a5:
d1:b6:70:a0:46:89:7f:2c:d4:b8:8b:b6:21:25:fb:36:46:f6:
cc:04:99:d2:aa:82:3b:24:80:2f:53:46:51:55:05:e9:1d:21:
04:f5:7a:5c:19:95:cc:aa:61:53:8c:de:3c:f1:ea:2e:f2:6f:
81:36:a6:a1:be:a4:7c:d8:ea:6a:84:0b:af:21:d4:4a:af:36:
4f:db:8a:cf:bc:62:eb:da:9e:e8:e1:fc:3f:36:1a:8c:53:c7:
2d:32:96:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:35:53 2026 by rpki-client