This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json)
Hash identifier: rPbK+W7u20tdPYYLlZ6+bVIufNGfi9F1YeRFNfg9wY4=
Subject key identifier: 25:4A:D1:20:72:FD:B7:9A:27:4B:2E:C6:A0:EC:04:67:2B:75:C2:70
Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Certificate serial: 07EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
Manifest number: 0FC5
Signing time: Sat 24 Jan 2026 20:34:37 +0000
Manifest this update: Sat 24 Jan 2026 20:34:37 +0000
Manifest next update: Sat 31 Jan 2026 20:34:37 +0000
Files and hashes: 1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: egmOvCZTXCqFQwaPCa4TNHhGhhiuMKv34Sxs9TxU5c4=)
2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: EUTRK8zTZimnCog0ijkhm9FDi0k0sx3nv6s5rDsc3FM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027 (0x7eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Validity
Not Before: Jan 24 20:34:37 2026 GMT
Not After : Jan 31 20:34:37 2026 GMT
Subject: CN=69752cdd-57eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fd:86:69:0f:f1:ee:d8:ff:d5:c6:11:c8:43:
96:df:36:02:9a:88:c8:e9:a8:f1:e2:15:eb:83:7e:
83:4d:26:f7:6a:e7:92:2a:d4:cc:44:ff:9b:5f:28:
0c:e9:ba:04:4c:65:de:7a:3d:ff:eb:94:f7:ac:4e:
b7:83:85:62:90:8e:e6:9f:a0:91:13:5d:63:ec:4f:
5e:52:f3:9b:9e:86:11:dc:81:0f:9d:c3:f5:62:20:
d4:e4:49:73:ec:02:48:68:47:8b:2e:1c:fa:04:bb:
28:68:93:c6:96:2f:7d:de:63:74:2b:c3:2b:c6:59:
e6:2d:2e:c8:da:cc:82:42:8d:93:46:4f:df:9f:9e:
6c:16:5a:d6:45:e2:3b:90:c6:dc:7e:43:e0:c3:26:
4c:e1:60:57:af:e5:da:9e:81:2c:f1:94:bf:e6:f6:
ca:04:16:62:73:68:4b:98:22:a2:bf:80:85:54:15:
09:8c:cd:6b:e2:dc:3d:ed:49:4a:a1:eb:56:1d:cf:
d9:6d:9f:e8:7b:3f:82:b7:94:8b:43:b7:29:2c:ac:
44:d2:22:91:26:b2:0d:c3:44:16:d6:a4:4a:ff:52:
7e:0b:ba:97:73:b8:f8:ce:30:0c:2f:54:d2:1a:bb:
f3:7a:68:32:d6:c8:0b:c3:f6:bd:89:17:19:74:dc:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4A:D1:20:72:FD:B7:9A:27:4B:2E:C6:A0:EC:04:67:2B:75:C2:70
X509v3 Authority Key Identifier:
keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:bb:b1:8c:44:34:36:fc:1c:95:08:a4:5f:b8:a8:ee:fd:3b:
f9:c0:23:a1:63:c0:54:e4:02:80:8f:7e:a3:89:93:37:29:e6:
45:bd:06:7c:64:e4:44:c8:ac:cf:25:d2:71:e2:e0:86:6e:3e:
14:4c:57:8e:12:3a:58:76:a7:c3:0c:99:80:ab:10:77:28:ba:
07:a2:c7:4b:58:89:1f:d7:57:bd:0c:b0:7d:f2:98:ed:53:a3:
a6:8a:f7:9a:2e:46:8a:36:4d:62:ab:44:ba:4b:32:88:2d:f2:
b4:3b:46:d3:32:4d:9a:c7:1e:99:e9:b5:33:48:1b:6d:11:6b:
68:dc:d7:5e:b0:aa:71:a3:08:cf:3d:31:23:ec:a3:1f:a2:4f:
19:1b:b7:d9:6a:2b:06:2c:eb:43:c6:39:8e:7a:c6:11:58:2b:
f7:2b:d6:43:90:43:59:44:0e:cc:48:c1:5e:7d:ae:b8:ab:1c:
35:84:9b:bd:ca:b5:58:97:aa:40:d3:70:10:d4:b2:47:94:65:
53:2d:cf:0c:cf:fd:fc:43:65:f7:9a:e3:4f:26:27:2e:e8:09:
0b:ee:0c:b1:1d:81:4e:c5:43:05:46:5d:07:ca:ad:2f:9c:7d:
e0:0b:e9:5a:13:c7:93:fb:8a:d7:49:fc:74:30:3e:05:5b:06:
64:28:fe:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:43:55 2026 by rpki-client