This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
File: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft (raw, json)
Hash identifier: R70bHQkzLB82Yu+aQlL+gDLJT4LcrOVNj1bpmi8Irko=
Subject key identifier: E8:4C:7C:96:EC:B1:28:41:0B:A6:A5:09:25:84:5F:2B:18:16:09:CF
Authority key identifier: 0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54
Certificate issuer: /CN=A91E9B39/serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
Manifest number: 1C
Signing time: Sun 25 Jan 2026 06:56:10 +0000
Manifest this update: Sun 25 Jan 2026 06:56:10 +0000
Manifest next update: Sun 01 Feb 2026 06:56:10 +0000
Files and hashes: 1: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl (hash: pvjWKtsX3mUgRv/TzGopoSpJ3ZnJ7k50w69Ic+YF5sc=)
2: 97B11C3CD29411F09264510FC4F9AE02.roa (hash: pdybPXi6LLtTiEGOZPN+WKH3MiV9PGstPF045DEs300=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl
rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9B39, serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954
Validity
Not Before: Jan 25 06:56:10 2026 GMT
Not After : Feb 1 06:56:10 2026 GMT
Subject: CN=6975be8a-74e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:7f:2a:57:10:7e:3e:f4:fd:6b:17:9a:6e:
13:c4:30:ec:07:d0:6f:7d:fa:f9:af:99:a5:47:6a:
eb:34:5a:77:3e:98:6a:75:63:a4:37:4b:16:ba:9a:
7c:61:41:51:39:ef:77:3e:d8:ad:01:45:d4:18:49:
a8:8f:81:b4:e8:6d:f3:99:e1:79:4c:88:b6:56:77:
ef:74:59:6b:08:44:92:bd:ce:14:98:aa:0f:ac:2d:
5d:34:92:93:fd:3c:37:be:05:4c:ed:fd:d5:71:5c:
6c:de:cc:1c:bb:4a:0d:40:e2:75:13:53:13:e0:8d:
cc:d2:62:47:bd:ba:59:51:e5:b9:23:9e:f3:5d:82:
5b:d3:81:67:8e:f4:88:69:c6:27:83:9f:d2:57:8a:
3b:4e:08:f2:d5:aa:5e:df:ef:76:4a:93:87:8f:70:
8d:82:dd:12:1c:02:40:d4:7f:3c:a8:b6:63:3d:4e:
09:3d:72:b5:ce:2f:a8:40:9c:08:d0:77:e6:6a:6b:
6a:1a:be:a3:97:88:a2:25:8d:d7:13:66:0b:32:78:
35:35:a6:98:15:3b:d1:0a:23:8e:6e:58:a4:d6:37:
f0:a6:8f:31:7c:4b:83:df:b4:85:45:14:5a:bd:16:
02:20:f1:c3:c7:2d:bb:b7:2d:45:7a:41:53:e5:a9:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4C:7C:96:EC:B1:28:41:0B:A6:A5:09:25:84:5F:2B:18:16:09:CF
X509v3 Authority Key Identifier:
keyid:0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:9d:8e:41:cf:91:3d:82:64:8c:92:17:e3:73:b2:71:36:c9:
26:0c:04:f5:93:f7:cb:6c:56:4e:c9:1d:ed:1c:1c:15:1b:92:
e9:55:96:0f:b8:5c:14:6b:6d:1b:80:0d:d1:81:47:58:b3:d2:
a4:75:ad:3f:f0:56:58:0b:5d:67:22:07:7a:83:ff:5d:8d:48:
6a:ec:cb:4c:ed:c7:90:2d:e0:98:82:43:12:60:55:5c:75:a0:
26:79:28:95:1c:a0:a9:8b:77:4c:f3:c8:c9:5c:9c:c6:46:61:
19:84:64:d7:79:25:07:5a:f1:e9:83:b8:87:08:3c:13:2e:48:
0f:8d:ea:33:62:d1:61:ff:38:c8:22:41:4d:ae:41:71:73:33:
3d:cf:2f:97:06:44:99:3c:fc:e0:05:1c:4e:87:fd:87:51:67:
70:ab:a7:e4:7f:dd:68:fe:20:f4:ea:ff:0a:0d:c6:07:ac:d4:
f6:fd:bc:00:b8:f3:51:33:b7:b3:74:d8:35:7d:a0:62:9f:a7:
44:a2:0e:74:70:80:07:64:ca:8c:ca:00:a0:e8:56:77:38:57:
a4:67:cf:5a:fc:e4:fa:b2:6f:68:a1:e2:d0:1d:82:09:79:f7:
48:64:7a:b3:44:85:1f:4b:87:62:72:50:cb:f7:af:ad:dc:0b:
d6:71:1b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:24:51 2026 by rpki-client