This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
File: V02z1iXehCAuOsnBw9Wwd01reOM.mft (raw, json)
Hash identifier: i8ZAoJDHdUrqT8Gf0ZO4AFYwRLk68xmAMlPkxyXoH1E=
Subject key identifier: 3F:E0:9E:42:9B:DE:F4:DD:43:34:37:A9:32:99:53:75:5E:23:95:74
Authority key identifier: 57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3
Certificate issuer: /CN=A91E33AA/serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
Manifest number: 6D
Signing time: Sun 25 Jan 2026 06:04:02 +0000
Manifest this update: Sun 25 Jan 2026 06:04:02 +0000
Manifest next update: Sun 01 Feb 2026 06:04:02 +0000
Files and hashes: 1: V02z1iXehCAuOsnBw9Wwd01reOM.crl (hash: tdkcsJGOw8z3hmMeb5G38ibtryDdYrDTeHDbZz7ao4c=)
2: A5E6E422A8E511F0A46A7729C4F9AE02.roa (hash: I9mTloe+CBVyT9j1b2vknypKCm7MYiUBGA2nLvqI+nE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl
rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E33AA, serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3
Validity
Not Before: Jan 25 06:04:02 2026 GMT
Not After : Feb 1 06:04:02 2026 GMT
Subject: CN=6975b252-6633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:92:84:71:ce:49:f5:78:a5:4c:22:92:e7:
e7:78:6d:41:89:3d:1f:b3:50:0e:b5:20:db:2c:91:
41:ec:5c:e8:54:4e:b9:fb:24:a5:69:53:49:87:8c:
0a:5a:fe:7e:39:8c:06:fb:ff:fe:fd:13:f6:7c:45:
69:89:c1:93:fe:cf:0a:31:24:32:87:ee:af:34:be:
d7:e4:e6:e4:4d:71:79:42:65:78:f9:54:1e:b2:ee:
0e:0a:bd:33:84:ed:8d:24:6d:1c:44:0b:e9:6a:2b:
2f:b1:da:6e:4b:ec:c9:7f:4b:a0:3b:fc:4a:cc:02:
98:90:ee:42:53:f6:bb:b1:5f:0b:09:ed:58:f0:71:
82:ba:bc:c2:a6:0b:b2:1f:c7:1d:2a:9a:99:36:47:
8b:44:45:d7:22:a8:5a:3d:3b:16:8b:56:bc:cd:c8:
b8:80:01:0f:d9:7f:1c:93:74:0b:30:17:71:d3:8a:
09:a6:e1:8a:8a:58:23:c6:d6:bb:e8:b6:79:a3:b9:
c1:a5:cc:c3:5a:c9:f3:7a:aa:8b:8a:b4:52:d4:13:
67:66:ae:da:cb:1a:5c:48:05:0b:52:4d:03:77:44:
84:85:2f:f8:c6:a8:24:69:f0:28:84:fc:6b:55:4c:
75:c1:f9:76:20:cd:9f:83:92:e7:eb:59:d0:bd:61:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E0:9E:42:9B:DE:F4:DD:43:34:37:A9:32:99:53:75:5E:23:95:74
X509v3 Authority Key Identifier:
keyid:57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:1c:56:d2:0a:36:e7:2a:e7:3e:2d:57:8f:ec:fd:81:52:c1:
98:02:96:4c:ea:c4:52:e2:ba:c6:4d:2a:28:68:2a:4b:66:69:
0c:71:5e:1b:6a:f6:6b:2b:cb:ac:5e:df:93:08:f1:36:2f:e1:
77:fb:4c:93:fc:af:51:37:f7:21:ce:49:15:1a:e5:ea:86:a4:
94:35:b2:38:c4:40:87:a5:55:5c:31:c2:ea:bb:b3:79:22:7e:
9d:24:e0:c5:1d:28:dd:97:5c:0b:7c:e2:91:92:02:7b:35:55:
37:89:2f:3f:f8:d4:e3:4d:31:60:64:d1:86:89:42:bc:78:fb:
a8:67:5d:4a:80:26:27:b1:31:0f:e2:d0:73:26:e0:63:a9:f7:
ba:2b:70:61:56:8c:6c:d5:8b:48:70:dc:20:27:d8:3c:42:da:
f8:a0:9f:98:2c:09:4d:aa:49:e4:48:c0:90:b4:55:c7:7e:2d:
17:a9:4f:50:a9:b4:fe:76:bd:ab:45:93:b9:5c:84:7f:39:ae:
1a:c4:14:97:ed:38:cc:71:d3:b2:ef:99:41:3f:96:6a:89:ad:
a7:85:91:94:24:35:ca:a6:45:ad:91:5c:79:dd:af:f4:ff:72:
5f:81:f2:c2:22:7d:47:a3:82:34:2d:8a:8f:fd:ea:a3:6d:e3:
9d:ed:17:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:22:12 2026 by rpki-client