This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
File: 9LfQRDuM_5tAmLuM7L7Yf86putI.mft (raw, json)
Hash identifier: 3rNilIYERRO82Gg+wqUA/Z+4OQ00iURw6Jmr4HhvoJI=
Subject key identifier: 67:21:1A:81:5D:08:91:8E:8E:A4:73:3D:81:DF:5E:AE:21:F1:80:F2
Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
Certificate issuer: /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
Manifest number: 86
Signing time: Fri 23 Jan 2026 05:42:52 +0000
Manifest this update: Fri 23 Jan 2026 05:42:52 +0000
Manifest next update: Fri 30 Jan 2026 05:42:52 +0000
Files and hashes: 1: 9LfQRDuM_5tAmLuM7L7Yf86putI.crl (hash: lJEi8URI+GcGnXUzaRC18hT/Mm42tPCWXZh4wJG7iCM=)
2: 67818EF02BD911F09AF6B821C4F9AE02.roa (hash: xPUr73eaPxAllhq8tmQserAPhMGn1YX9uZTViIiEYlA=)
3: 67F6AC6C2BD911F09AF6B821C4F9AE02.roa (hash: h8My7kHHxTir1n7YjOpu1k0UspYcJlhUdG9c241e5p0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 05:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Validity
Not Before: Jan 23 05:42:52 2026 GMT
Not After : Jan 30 05:42:52 2026 GMT
Subject: CN=69730a5c-c729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:22:48:66:65:12:5f:0a:f1:b6:b9:6b:90:
90:0f:57:9d:ab:e6:97:68:ac:ec:99:8a:ea:c2:ce:
9b:2a:b3:7a:7c:cf:08:6b:0b:57:08:01:7c:fc:4a:
6e:3a:64:77:4c:34:a7:e7:ed:47:ae:a9:a1:67:0d:
21:d1:48:0d:30:b5:fe:0d:89:d8:37:9a:49:16:61:
0a:64:a1:2e:6a:24:1a:c2:21:f2:0f:a9:94:02:d2:
40:00:c1:30:53:c8:61:12:63:ff:33:8b:1c:0e:ae:
69:71:5e:f4:26:a5:dc:d5:25:1b:8f:0f:13:21:25:
f6:c5:0d:04:dd:b7:a7:3a:5d:b8:54:b9:e5:f4:67:
a9:2c:e4:68:d2:7c:55:5b:0e:c6:80:86:f9:68:a5:
df:d7:26:46:86:b2:3d:a9:ee:86:e3:0c:57:9c:bb:
fd:25:6f:0d:96:11:4a:68:65:42:f6:e7:df:06:46:
f8:be:2d:b9:be:d7:ca:6e:d1:00:b1:a1:17:22:6f:
04:ca:a6:63:88:c4:05:f5:75:f3:fa:df:07:17:d1:
01:63:fd:c3:e7:f6:0d:f3:c3:25:b3:67:cf:6e:a8:
3a:8e:cc:b2:18:fc:d2:f9:dc:ae:71:18:cf:ca:a9:
6f:8b:7f:8a:46:12:ff:d5:c9:15:9d:96:7d:5b:92:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:21:1A:81:5D:08:91:8E:8E:A4:73:3D:81:DF:5E:AE:21:F1:80:F2
X509v3 Authority Key Identifier:
keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a5:2e:e8:d8:2c:8a:38:01:dc:f8:de:1e:b2:58:b1:61:f2:
34:b0:db:73:57:88:5d:8f:4d:d1:ac:87:01:7d:4a:a4:83:0a:
d3:fe:9b:1a:fb:1e:27:1a:52:69:f2:89:6b:16:1c:22:06:46:
0d:e0:b6:b3:eb:72:2a:da:ee:0c:eb:c6:10:89:90:e6:84:3a:
3b:39:4c:11:1a:90:6b:c8:e0:b6:fb:68:68:b5:88:06:40:42:
aa:93:fb:f5:f0:80:ba:a2:8c:b1:d2:a3:31:8e:e8:87:b9:29:
77:82:96:a4:83:96:bd:4d:df:35:0a:fb:cb:fc:d6:37:f1:f7:
03:5f:29:2e:04:3d:77:9c:92:63:7a:7a:a0:41:9a:fe:55:77:
b3:35:3a:3e:27:0b:70:57:ff:ab:1d:b6:7f:ef:98:ea:c3:30:
48:de:9f:2d:b6:6d:12:ba:37:43:06:00:e5:72:2f:40:4f:32:
b1:8b:89:28:41:58:50:00:3a:8b:b5:85:c6:be:d7:83:bc:43:
8c:bf:60:44:30:57:7a:56:4c:a8:91:9c:94:c6:4a:25:68:6d:
56:35:23:1c:f9:9c:47:dd:f5:f1:d1:8d:6a:5e:ce:d5:0e:b9:
e1:44:23:40:31:18:15:50:36:82:71:01:cf:c1:42:5d:17:7f:
f9:f2:5e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:37 2026 by rpki-client