This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json)
Hash identifier: kNM0sgIjoMO/w6NZpb6n1ncKfkOrcIgFYhFbhuZ8slo=
Subject key identifier: 54:B6:EC:B6:A2:D5:07:00:55:B5:8E:3D:85:50:03:C9:5E:57:8F:95
Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB
Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
Certificate serial: 02FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
Manifest number: 02F5
Signing time: Sun 25 Jan 2026 00:27:23 +0000
Manifest this update: Sun 25 Jan 2026 00:27:23 +0000
Manifest next update: Sun 01 Feb 2026 00:27:23 +0000
Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: HuW3ZHGkvq/HXNe7aKCzWs2yJtDPKxwsQ14dhhUz18Q=)
2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: SkZtMkxJP09Yd2B5Onq8UT9Pvo6N0SWw7PtHEg8gn3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl
rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
Validity
Not Before: Jan 25 00:27:23 2026 GMT
Not After : Feb 1 00:27:23 2026 GMT
Subject: CN=6975636b-bd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:cb:00:6b:4c:87:04:15:93:c0:36:2e:ba:
6e:81:f9:aa:f1:a5:1d:55:a8:1b:aa:7d:8f:86:e4:
22:54:c9:1a:be:31:24:8e:ce:f4:41:42:e6:f5:1e:
83:34:2b:5e:c4:e6:d8:67:d1:16:68:b5:34:2c:eb:
6d:65:ae:d5:5a:e3:a8:59:6a:09:b6:da:13:7f:72:
32:15:fa:6b:3b:0e:bb:54:8c:d0:50:95:55:e2:b0:
bc:54:76:ef:b3:5d:a6:66:35:9a:cd:33:35:4a:d5:
19:8d:72:87:88:9e:27:98:46:5e:e2:7f:1d:34:42:
86:7d:03:72:aa:e0:09:64:3b:ae:17:6f:ed:90:41:
1d:b5:61:6c:15:6a:22:a2:db:72:bd:9d:88:6e:8c:
69:83:6f:69:b8:48:51:1c:d5:8e:48:f1:d5:85:23:
65:d4:9f:3d:87:ee:04:74:fb:62:07:0a:4c:d2:e2:
66:85:7e:61:a9:72:c0:97:0f:f1:5d:0f:36:2e:94:
8d:6e:2f:89:d3:de:1e:33:1f:aa:7f:d4:64:e1:87:
fc:8c:39:18:53:7c:43:fb:ad:e4:c6:f3:92:55:e2:
2c:4b:75:da:46:d3:f5:af:d8:34:4f:5a:8b:8f:4c:
5d:27:64:78:c4:07:e3:c6:1b:f8:13:db:47:e2:18:
8b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B6:EC:B6:A2:D5:07:00:55:B5:8E:3D:85:50:03:C9:5E:57:8F:95
X509v3 Authority Key Identifier:
keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:ee:ed:30:10:2a:35:d7:ff:fb:5a:80:50:4e:e1:56:64:1a:
ae:b2:66:00:c8:cb:c0:7a:97:ba:70:4b:27:e9:8e:10:f1:7a:
c6:0e:6e:e5:e4:52:90:6e:c8:b2:7c:16:56:f4:ad:d5:dd:b0:
49:c6:2e:f9:95:8d:99:24:30:0e:95:c1:bb:4f:1e:de:d7:c8:
43:5d:80:5a:3c:b8:93:6c:8a:f8:3a:87:7a:6f:a9:e0:af:0c:
3f:9d:e3:3e:74:fd:79:97:03:36:15:87:a0:4f:f2:fe:6e:f0:
32:5f:d0:99:a7:0b:ee:14:77:0f:70:8a:67:df:ed:3a:ff:62:
c8:03:11:ad:1c:35:f7:32:df:1b:e8:aa:30:4c:5d:7d:71:8a:
93:e6:ce:5b:78:6f:2c:c1:de:e3:fd:41:a3:0a:ef:f6:ee:cd:
a5:23:e0:ab:0b:80:4a:60:20:bc:4d:1f:56:f6:28:0c:1f:b0:
06:c0:f3:14:4d:cb:f3:11:3b:92:ec:7f:4c:86:e7:ac:e9:4b:
51:f0:0a:bf:fb:45:2e:cf:b9:38:20:3e:d9:f8:11:a0:1f:13:
48:3c:53:94:15:8b:c7:11:80:1d:d0:9d:7c:c0:e5:e6:5b:b2:
14:07:40:e0:97:65:8e:a5:d0:80:c0:02:4a:8c:87:0c:1d:45:
3f:2b:e0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:30 2026 by rpki-client