This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
File: PN9D1xf8WEnyOpTimncrKKXXAeM.mft (raw, json)
Hash identifier: iT1hVs858eXqpCrM66ujWQP8aaiE3SuzGis1UduhVRc=
Subject key identifier: E8:79:EE:67:C3:41:EA:E5:B7:02:0A:CF:F4:A7:8B:4C:40:79:7A:8A
Authority key identifier: 3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3
Certificate issuer: /CN=A91E3BB3/serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3
Certificate serial: 08CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
Manifest number: 08C2
Signing time: Sat 24 Jan 2026 19:51:21 +0000
Manifest this update: Sat 24 Jan 2026 19:51:21 +0000
Manifest next update: Sat 31 Jan 2026 19:51:21 +0000
Files and hashes: 1: PN9D1xf8WEnyOpTimncrKKXXAeM.crl (hash: qiN37KWkJk6r6zxn3kFDqVLYgbSUsBEUIppDvRCadZQ=)
2: D0CF108ED85111EF9DC0826CC4F9AE02.roa (hash: YDlJJK3r3QY2jge7AOb3CYnCW+wC8nrMDrmyeODCDi8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl
rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251 (0x8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3BB3, serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3
Validity
Not Before: Jan 24 19:51:21 2026 GMT
Not After : Jan 31 19:51:21 2026 GMT
Subject: CN=697522b9-ab51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:52:18:a4:ad:6c:ec:f1:5b:29:f4:ec:ff:
f0:b9:41:80:e2:fd:d8:cf:c4:d0:8e:42:35:18:ae:
a1:4b:d6:2f:17:51:0e:4f:c0:9c:35:bd:f4:1c:73:
f3:9b:8b:50:be:18:90:15:ea:39:30:ab:69:42:8d:
a0:a2:c6:fd:5a:d9:ea:07:a5:88:43:d7:3c:79:a6:
12:5e:45:de:ed:7a:57:1b:7b:63:7e:84:49:87:a7:
0f:f1:32:b7:1a:9c:a5:5c:db:b5:38:93:98:0f:e4:
a4:d0:06:06:13:cc:76:ff:1e:b6:5d:e4:15:87:87:
b5:46:f5:06:9f:c5:c2:52:a9:27:2f:43:d8:61:17:
53:6e:8e:fe:42:56:f5:ca:51:19:2e:a8:04:45:3c:
9b:63:51:fd:47:5c:d5:15:7a:1d:f5:ad:07:33:78:
66:92:41:08:98:0f:f4:4f:69:7e:e4:c0:8f:01:66:
74:b3:dc:07:06:0b:2c:61:ae:ca:98:3e:7a:4d:37:
36:7b:f4:a6:71:25:37:3f:3d:52:66:b4:b7:c9:f3:
6d:da:9b:b2:69:e6:54:17:e7:80:1a:a9:d7:57:d0:
74:d7:90:03:b5:74:c3:32:ea:78:26:99:e1:e4:5b:
bf:21:99:04:87:42:1e:6d:bb:ff:17:8c:0b:a0:67:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:79:EE:67:C3:41:EA:E5:B7:02:0A:CF:F4:A7:8B:4C:40:79:7A:8A
X509v3 Authority Key Identifier:
keyid:3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:71:52:3c:7a:8f:7d:11:de:30:03:69:ec:68:63:50:04:9c:
03:88:d2:2b:e7:6d:e8:6d:25:dd:68:4d:7e:97:ef:6d:2b:9c:
36:bb:ba:46:74:21:8c:04:6f:ae:36:58:71:12:49:ed:eb:00:
77:e0:03:5a:e8:da:d0:1c:f8:41:e0:02:56:2a:78:44:70:d8:
59:87:9d:b0:dd:a2:d1:e4:05:e2:02:52:d8:7c:6e:0f:5f:ac:
02:7a:2d:91:b8:b2:4b:e8:77:08:16:2c:9a:86:73:45:a0:50:
5e:10:80:a3:2e:4b:fd:ef:3e:9e:fe:14:77:35:d3:47:be:3a:
3a:c7:d8:4b:99:09:fc:d2:6f:bd:0c:27:96:bb:9a:d7:d9:8e:
14:90:b8:79:30:76:a4:18:00:c0:c5:3c:7c:97:71:49:2e:3a:
e5:c0:9c:4f:85:3d:52:1d:06:28:9c:e6:d4:66:a9:9f:ad:bd:
2d:11:a3:64:ba:60:e4:a3:0c:4b:b0:ff:be:15:f6:40:0f:bf:
07:8b:f7:09:2a:e7:b4:64:79:45:46:cf:60:3d:43:cc:fc:82:
18:5c:39:e4:4d:e8:5f:42:5b:a3:db:77:eb:09:d7:39:9e:9c:
d3:37:b9:3c:c7:ee:d9:cd:dd:f8:5d:1b:b5:42:94:32:3a:8a:
72:01:23:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:51 2026 by rpki-client