This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
File: sBO5crQspa2fahYr87XHT5M8HgU.mft (raw, json)
Hash identifier: ZOwNfsxrFUn3Mbf2kq59WEmYwaCOYzpgJK8IDaEBpB0=
Subject key identifier: 19:D1:16:39:5A:A1:8C:44:89:EE:A2:E3:0A:1A:47:86:F0:0B:8D:30
Authority key identifier: B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05
Certificate issuer: /CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05
Certificate serial: 0604
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
Manifest number: 05FA
Signing time: Sat 24 Jan 2026 22:11:15 +0000
Manifest this update: Sat 24 Jan 2026 22:11:14 +0000
Manifest next update: Sat 31 Jan 2026 22:11:14 +0000
Files and hashes: 1: sBO5crQspa2fahYr87XHT5M8HgU.crl (hash: t/0sKUZRC1B8irzxaixVJIhdraTQbNiCjpTK/dkq9gk=)
2: 53AD6F32DA5E11EBA323F462C4F9AE02.roa (hash: /1rRME/YWECCYt6toeN715tq9fDj34iC1+mJGA+LM6s=)
3: 5334D20CDA5E11EBA323F462C4F9AE02.roa (hash: grIWyyq0MDFCb7a6KfrpTu3LAH64VdoYs4KvoLwKfQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl
rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1540 (0x604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2B66, serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05
Validity
Not Before: Jan 24 22:11:14 2026 GMT
Not After : Jan 31 22:11:14 2026 GMT
Subject: CN=69754382-6346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:04:ea:8e:0a:53:ec:27:57:99:47:ab:e1:
33:76:d9:c1:40:47:ac:65:3a:90:ef:b3:58:64:77:
8d:8b:64:20:8c:3c:45:74:51:ec:f8:13:7b:6c:c5:
f7:0a:08:2e:33:49:f6:d1:67:c4:83:97:7b:79:d2:
ac:fd:02:b3:25:83:f3:89:39:e5:da:c5:a2:ae:93:
e0:65:ac:81:92:91:1e:7f:4b:92:f2:2d:2c:0f:db:
d6:9c:49:cf:93:36:8b:e0:40:14:b1:ec:5d:bf:f7:
c5:7a:ee:bb:a2:ef:c8:fb:c2:df:6c:26:22:31:07:
36:1b:2a:a7:29:46:39:31:83:9c:03:e2:51:ee:86:
54:27:dd:db:2b:27:36:91:12:a8:b5:ab:16:f9:1e:
c3:a3:c6:38:91:02:4b:47:ca:ed:a3:0e:25:68:68:
de:af:fa:84:a7:0d:42:ba:6f:29:7c:74:04:09:87:
c5:21:73:c5:ef:dc:92:d8:6f:f4:a5:1d:f7:ce:13:
b2:1c:3c:48:7a:59:72:7c:3c:c8:5b:3d:21:ff:06:
f7:cc:41:a8:f8:31:de:c6:47:c7:98:62:0c:45:4e:
d2:ef:84:91:5c:0d:e8:ca:5e:fe:16:50:ad:f7:ef:
bc:1d:f7:3c:80:c8:0f:bd:0a:58:15:ab:9b:48:48:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D1:16:39:5A:A1:8C:44:89:EE:A2:E3:0A:1A:47:86:F0:0B:8D:30
X509v3 Authority Key Identifier:
keyid:B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e3:6a:bc:c2:e2:41:18:61:21:d8:97:15:b1:a3:d1:3b:d8:
bb:dc:fd:23:ae:d4:9b:e5:02:6e:57:c6:d4:27:79:fb:1d:2e:
49:e1:3f:2e:d1:80:bd:ce:fe:70:4a:82:4b:af:71:01:33:93:
e9:33:a4:74:28:e3:e2:1b:ed:3d:91:fa:23:82:79:21:c2:cf:
97:54:9e:c8:40:4e:29:92:92:c9:31:ec:a6:4e:07:23:1b:cb:
aa:41:41:59:37:58:27:87:7d:e6:6e:9f:9e:53:cc:8a:66:8e:
4e:89:16:a1:17:5e:6f:77:4f:09:d0:ad:78:7e:12:fb:b2:3f:
80:a3:f0:75:42:8c:52:bf:83:a4:94:c4:2c:7f:96:6d:68:79:
8b:ff:53:0a:88:6b:32:46:30:ff:fb:58:50:d8:55:fa:20:64:
df:33:85:11:dc:66:17:0e:b0:15:dd:c8:cf:82:27:10:5f:16:
e2:34:f9:06:c1:63:6f:41:1c:06:fb:b0:c0:f3:bf:d2:af:4a:
b1:48:d3:c3:a8:62:ea:2e:a3:e2:cb:82:dc:aa:63:cc:e0:30:
7e:3b:d3:99:d8:20:e3:28:cd:ef:e0:f1:28:4e:35:fc:54:e2:
eb:5d:e8:02:60:88:92:84:31:2d:73:43:db:dc:3a:f3:09:0c:
dc:6f:79:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:41:11 2026 by rpki-client