This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
File: C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json)
Hash identifier: ydXbFftUV9vihzBgtF6AI9b2qH+3SqmGP2WA0sv+lhw=
Subject key identifier: E3:2D:CF:BB:12:D9:9D:DC:09:ED:47:4F:8F:82:EF:37:3D:B4:0C:DA
Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
Certificate serial: 019D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
Manifest number: 019A
Signing time: Sun 25 Jan 2026 02:41:22 +0000
Manifest this update: Sun 25 Jan 2026 02:41:22 +0000
Manifest next update: Sun 01 Feb 2026 02:41:22 +0000
Files and hashes: 1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: nX+gtq8saNBx6/LYJEfxftJhGLorXCaNXfqFnNopZlQ=)
2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: cx4NJM0Y7SZj8EEEvHyi9w557IjmXY6kqlXUYi/Zo1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl
rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
Validity
Not Before: Jan 25 02:41:22 2026 GMT
Not After : Feb 1 02:41:22 2026 GMT
Subject: CN=697582d2-eccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:2a:b2:81:33:40:42:ba:ad:ce:ce:fc:ca:
29:ae:21:49:32:9f:da:ee:d6:d6:0c:46:93:e7:46:
6e:d5:c1:e1:7e:76:31:67:f0:1a:9c:df:d6:c8:fe:
16:1d:c9:5a:50:bb:6b:90:b6:ab:5b:35:5f:28:9e:
75:75:0d:38:f7:97:0b:20:ec:63:fd:f0:69:8a:f0:
85:e2:d8:5e:3f:ad:db:a3:21:0e:38:e8:17:66:cf:
a3:ad:2e:b3:fd:26:bf:84:24:2e:2d:91:39:ca:ec:
52:56:ce:6f:4c:9b:e5:dc:c5:1c:c4:1a:83:dd:b7:
37:5c:f7:49:74:96:da:55:7b:c1:3d:1d:e4:e2:4f:
ea:3e:f4:45:71:f4:83:1d:6d:a5:14:d8:d5:52:53:
94:d9:f7:92:26:59:ae:1c:2c:0d:29:15:9e:c5:9a:
95:e4:e8:5e:7a:cb:b2:1a:1b:5e:1a:fd:b7:90:88:
a6:de:a2:44:c4:55:ad:51:13:dc:26:78:d3:8d:4a:
c4:b4:07:03:d9:df:75:7b:d1:c4:30:34:7f:f9:40:
ec:be:c1:a1:b8:42:5d:c0:f2:42:74:57:5a:fd:41:
28:c9:a4:40:59:15:82:78:9a:1c:3f:db:5c:70:ed:
69:a2:57:d3:ac:19:4a:72:cc:2a:2a:cf:42:54:00:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:CF:BB:12:D9:9D:DC:09:ED:47:4F:8F:82:EF:37:3D:B4:0C:DA
X509v3 Authority Key Identifier:
keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:57:3c:ee:d2:f4:ae:d0:5f:c9:8a:86:ea:44:ed:57:41:a6:
8d:c2:ef:ea:56:ba:df:23:2f:14:b6:8f:69:c7:ff:36:a0:e8:
eb:e0:e0:08:84:e4:7f:7e:30:4a:26:1b:59:10:64:cc:6d:b0:
92:2e:61:a4:ae:c8:12:e9:1c:3d:2d:9f:93:69:69:da:aa:f1:
50:0e:59:41:a9:c4:8c:d4:61:6b:9e:29:15:26:df:75:83:8c:
40:b1:e3:3f:30:66:b5:33:3a:42:84:3d:55:0d:bd:a8:6c:b6:
c6:30:26:1a:72:48:c0:ed:d7:6b:5c:ea:49:7f:63:db:81:04:
2b:e8:31:8b:9d:a0:65:fd:61:a4:b7:91:b6:48:3e:41:ad:c3:
52:8a:74:bb:d2:fe:bf:1d:5c:55:fb:26:b9:b8:38:10:3e:77:
0d:4f:33:0b:e9:5f:22:46:2b:7d:9a:d2:e5:05:6e:fa:de:f1:
fc:48:63:00:a8:df:41:18:65:4b:56:0b:e6:41:4a:fd:3d:fd:
42:c0:f8:2d:1e:69:fe:8d:b8:2e:56:52:71:39:64:1c:01:0e:
59:1b:a4:e8:65:06:08:f2:ed:ab:67:c1:a6:d7:41:c9:5e:65:
7e:48:81:5d:c0:51:bb:ef:55:d6:cd:5f:b0:16:e9:bf:6b:9d:
6b:df:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:40 2026 by rpki-client