This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json)
Hash identifier: edAQod6fzdwXyXBlTTviUTK8v82EIkJzjGZmGTNzY+w=
Subject key identifier: 1E:B8:8B:77:36:C1:22:02:FF:A5:15:A4:B5:0C:8B:A8:A1:B6:90:F2
Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
Manifest number: 010F
Signing time: Sun 25 Jan 2026 04:14:21 +0000
Manifest this update: Sun 25 Jan 2026 04:14:20 +0000
Manifest next update: Sun 01 Feb 2026 04:14:20 +0000
Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: ploqKFigGz+Fe0YbDGPhVcsFq4I+JIPomjLMPHjQswA=)
2: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: V41vD109qFi79qtSI0V3NbHmJv38JNXS4Cmmah3H2Gs=)
3: DF6D4464818211F097447962C4F9AE02.roa (hash: uFriQ+Hd3GtX+b70XPw86L5pzFQw2KnB4KHG3QJkhcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Validity
Not Before: Jan 25 04:14:20 2026 GMT
Not After : Feb 1 04:14:20 2026 GMT
Subject: CN=6975989c-68da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:71:7e:82:b1:9c:78:63:cd:0c:10:42:8e:
b7:97:90:64:a5:31:54:de:0c:11:d1:d2:a5:16:f9:
50:34:00:0b:aa:3b:50:19:38:1d:8b:da:57:22:80:
69:a1:3f:c2:d6:00:bf:45:6e:40:ec:14:f7:7e:9c:
80:1d:55:e8:e6:3b:fd:24:dd:a1:67:40:23:e6:ce:
b6:d3:3c:7f:cd:96:fa:6d:be:bd:b4:28:1d:8f:b9:
56:e5:58:a2:2a:8e:fc:60:93:76:fd:5c:0c:57:57:
07:e5:3c:1b:e7:e9:73:b0:c7:ba:a6:f0:cd:a6:25:
07:a7:f5:ee:4e:a9:de:d0:de:06:42:27:b9:66:6c:
11:a8:f3:36:e3:e7:62:23:88:9e:38:74:46:b9:a2:
25:00:c8:d3:0f:cf:04:00:48:a4:80:3e:64:e0:14:
4a:bc:32:e0:93:6a:49:40:0c:33:3c:12:10:91:08:
82:5e:c4:57:48:cb:d9:6c:36:95:cd:6c:0c:ab:d3:
08:2a:43:b9:65:64:ad:00:2f:eb:bc:1d:f2:de:aa:
4c:f2:eb:49:e4:31:da:5b:25:7a:c6:58:6d:48:ce:
d0:0b:51:cb:b7:4d:a8:b5:82:0d:dc:d7:c1:e5:d4:
f4:f9:e9:28:b9:77:85:25:0e:f0:86:98:a1:35:c9:
e0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B8:8B:77:36:C1:22:02:FF:A5:15:A4:B5:0C:8B:A8:A1:B6:90:F2
X509v3 Authority Key Identifier:
keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:ed:bb:7e:64:06:19:c3:78:12:0c:e8:a9:7a:3d:07:d1:d3:
3c:c9:8b:63:04:fb:c7:eb:c8:22:90:26:0a:e3:aa:a5:b2:60:
63:15:7e:bd:24:ef:ef:78:a7:b8:37:7b:2e:8d:29:d7:49:ba:
a7:dc:ce:3c:53:c9:b3:3e:10:e6:d7:6a:3b:a2:83:7e:72:e4:
2f:62:fa:63:74:93:3f:c1:a0:bd:af:de:a1:7d:08:fa:1c:83:
21:7f:d4:17:6e:89:e6:55:40:75:40:8e:dd:65:9f:f7:01:01:
8b:02:06:32:3b:8b:e9:b1:d8:5f:57:73:98:01:52:af:c1:3a:
98:d2:7a:e8:ff:60:1f:2f:36:5a:2d:49:c1:e9:67:4c:7b:b6:
c6:47:01:16:a8:f3:df:b6:56:18:cf:68:4c:bb:63:88:c8:49:
8d:1a:6a:ed:31:86:25:80:8f:e1:0b:4a:9d:ac:73:90:d8:a4:
ba:6d:8d:37:5d:c8:d0:8d:58:a5:37:f1:59:b2:b2:5b:35:4a:
bc:4e:5c:7e:a0:db:0d:8c:4a:f7:30:c5:10:70:bd:7d:10:b0:
66:ed:d0:b8:1f:66:13:09:73:4b:83:33:0a:ac:39:76:dd:d4:
6a:9b:12:df:84:7c:f8:23:df:be:85:50:4f:6d:60:a5:bb:04:
f1:3d:26:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:25:21 2026 by rpki-client