This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
File: 906Wyp7pNgdFZCkpYPvB-c80hU0.mft (raw, json)
Hash identifier: 9vyKv63FFyC8Rl1AA3p++XVptZwST6DW+uX0cZP5JDE=
Subject key identifier: 60:BF:C2:65:7A:78:BB:E4:FA:7C:EF:87:87:FC:D5:2D:52:C7:90:D2
Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
Certificate issuer: /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
Manifest number: 020F
Signing time: Sun 25 Jan 2026 01:37:12 +0000
Manifest this update: Sun 25 Jan 2026 01:37:12 +0000
Manifest next update: Sun 01 Feb 2026 01:37:12 +0000
Files and hashes: 1: 906Wyp7pNgdFZCkpYPvB-c80hU0.crl (hash: xHcgBpnfY+SCS+TvF5nqd4DSTFR2RyItmxj4ba+hyQI=)
2: 1DA961ACEE8911EDBFAE4177C4F9AE02.roa (hash: Osxjf+sQheLzTs1l6e5kACmrRT/9y2CBdjlI5qtBWLI=)
3: F26B14C4EE8B11ED95BCBB13C4F9AE02.roa (hash: gLkgMGp52FpOKp1gigsy7o/szzqT6RmtB38EXx+UWeM=)
4: 1C99BCBCEE8911EDBFAE4177C4F9AE02.roa (hash: P2QsrILj+XHKTHzfzBj8a8ezg5UMFN7g36qC5yV1Z+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Validity
Not Before: Jan 25 01:37:12 2026 GMT
Not After : Feb 1 01:37:12 2026 GMT
Subject: CN=697573c8-db04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:99:87:90:9c:c6:5e:86:7a:ef:91:58:42:
60:ca:89:12:6e:ad:e6:ba:67:3e:cd:21:04:b8:12:
af:d9:a5:88:af:1c:49:06:cc:c2:94:81:03:d5:6e:
f3:55:09:12:92:6e:2f:02:cb:bf:ca:3c:5b:7c:43:
0e:62:5d:dd:1c:02:5b:8d:9d:d7:5a:dd:74:73:40:
1a:e5:fd:2c:8a:47:67:7f:0e:52:10:92:24:49:d0:
b7:19:3a:71:d7:61:1f:14:b2:59:62:95:1e:d5:96:
26:26:6e:b3:52:23:88:ab:ee:00:9d:aa:3d:af:15:
6e:b8:7a:c7:60:be:c8:0d:89:f7:2d:e0:a0:15:63:
82:ae:1a:9c:7b:b7:5f:c5:cf:d7:79:94:0b:c0:79:
ff:d8:a9:34:9d:d9:84:08:3d:3c:57:c7:9c:49:92:
e8:5c:6a:55:af:86:f8:13:17:34:23:1d:b2:da:cd:
4f:44:3e:f1:c8:e2:b5:eb:c3:8c:c9:80:21:de:28:
5c:e9:02:ad:7c:c2:4f:0c:a0:9e:e5:1e:52:e3:a2:
ee:fa:76:54:dd:db:df:bb:a1:b1:dd:2b:9d:bd:2c:
ec:e9:63:d8:5d:38:63:4e:50:2a:e2:ef:ed:9d:29:
8b:b4:88:25:ff:34:4d:8a:bb:2e:48:26:84:9f:03:
a6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BF:C2:65:7A:78:BB:E4:FA:7C:EF:87:87:FC:D5:2D:52:C7:90:D2
X509v3 Authority Key Identifier:
keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:05:f5:d6:bb:32:ab:98:50:43:ea:7b:83:fa:f6:5e:19:7b:
2a:10:b8:e6:bb:c8:92:95:2d:54:e8:aa:15:b3:aa:97:12:e4:
d6:52:f4:11:e2:a2:b3:dd:cf:2d:0b:04:1b:44:49:cf:a9:08:
be:cf:85:e1:5d:fd:62:b2:3e:ae:7a:67:9b:5c:c1:d0:04:16:
21:a5:aa:a1:df:1b:46:27:1b:ee:6a:9c:6b:6a:2a:2c:de:fd:
b8:c5:45:47:28:d2:c3:e3:c5:a8:ca:dd:30:32:ae:d8:41:39:
d3:b1:2c:69:67:09:8e:9e:2b:86:f9:49:44:c6:8a:05:a6:8d:
63:2d:24:bd:20:02:7b:5a:f6:bb:7b:14:90:3a:b6:5f:ff:20:
2f:e7:d3:49:aa:eb:e3:87:c2:eb:3d:bd:3c:82:97:ac:62:4b:
d9:f3:1c:00:12:b1:bc:39:41:49:28:c0:0b:56:f1:40:65:1c:
1b:09:6d:db:84:62:e9:e5:b8:61:45:0d:f1:e8:dc:9b:76:90:
14:4f:7a:a4:be:1f:75:97:c4:80:52:46:b5:f4:85:4f:47:8b:
3e:76:6a:e2:30:a5:c6:39:5f:28:4f:41:a0:07:10:e2:12:68:
de:c2:98:0f:32:d6:06:18:5e:8e:e3:df:7d:e9:67:59:a4:7f:
5b:4e:1d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:49 2026 by rpki-client