This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft
File: cNjYKyIacSIO_Vg9kvc2F15dAvE.mft (raw, json)
Hash identifier: ysqm80DjeRJt+BdQOD1gjwTnnXOWxlAmy1vL0TDEp+8=
Subject key identifier: C0:A4:B6:49:E2:AE:97:4D:8E:95:ED:3D:F2:67:7B:92:36:38:F2:71
Authority key identifier: 70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1
Certificate issuer: /CN=A91E9B39/serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft
Manifest number: 1B
Signing time: Fri 23 Jan 2026 06:55:12 +0000
Manifest this update: Fri 23 Jan 2026 06:55:11 +0000
Manifest next update: Fri 30 Jan 2026 06:55:11 +0000
Files and hashes: 1: cNjYKyIacSIO_Vg9kvc2F15dAvE.crl (hash: Aj0ClZRNH/7/39EjR6QasVeF+DPCGKEh4WJktDilzQA=)
2: 98127914D29411F0BA72510FC4F9AE02.roa (hash: cJUf464wfN4hlFnC0PZnSNNiMNLf0O5oWZ+yW9kxGh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl
rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9B39, serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1
Validity
Not Before: Jan 23 06:55:11 2026 GMT
Not After : Jan 30 06:55:11 2026 GMT
Subject: CN=69731b4f-b1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:ad:7d:86:9a:3e:9c:32:bf:62:33:a8:f4:
dc:eb:5d:6a:a4:bb:07:71:f7:bd:95:3a:84:81:75:
d7:c4:c7:e8:da:4c:ee:00:3c:96:76:bd:9d:60:c4:
0b:1c:4b:6c:0f:f3:ed:a9:e2:af:1c:ec:22:31:80:
1d:dd:f1:45:5f:ed:a7:e3:dd:ec:aa:b0:cf:f4:9a:
11:a8:97:7c:93:05:95:8f:84:e8:6d:e1:40:cf:1b:
f2:bc:7c:96:21:e1:34:d3:0b:51:9b:67:10:d2:0b:
e9:3f:e5:9f:46:b1:e2:92:7a:8a:cd:6d:ab:b0:77:
5b:55:d7:20:2a:75:f3:0a:24:97:35:e7:79:1e:bc:
01:2b:08:24:70:1c:ac:36:91:59:c1:dc:cf:a1:bf:
77:df:2c:2c:73:db:ae:a5:db:84:ef:a8:21:a7:b8:
11:c7:b8:ae:16:b0:e2:a9:16:8d:f8:46:4d:ce:63:
2c:fd:f1:5d:5e:30:2d:fe:aa:a9:c7:6f:cb:24:b5:
b2:bb:21:b9:46:a6:6e:ad:79:86:f0:56:0d:fb:e3:
e7:38:b0:20:95:e9:28:05:2b:50:f2:27:98:42:03:
f1:b3:51:c5:a0:4f:46:dc:71:e1:e9:e3:05:9c:b9:
27:d4:0b:88:b9:0d:0e:28:46:cc:b6:09:74:8c:75:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A4:B6:49:E2:AE:97:4D:8E:95:ED:3D:F2:67:7B:92:36:38:F2:71
X509v3 Authority Key Identifier:
keyid:70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:00:f1:d1:65:d8:12:fb:a8:26:0e:32:37:20:06:8c:c3:55:
bd:ad:ed:7d:42:22:98:72:95:a5:6b:2d:a5:1e:91:9e:d0:1b:
dd:95:c8:f3:8e:68:c4:33:59:cc:86:8a:05:8c:97:77:b5:a4:
6c:da:d1:2e:fa:d4:05:fe:a9:4f:55:43:f2:58:3a:ad:41:96:
c7:93:c2:4f:6e:8d:e8:d7:9e:b0:21:d9:2d:0f:7b:b1:88:68:
ec:08:f6:6e:67:d8:37:b2:cd:b7:06:70:49:60:03:86:b7:4b:
98:43:21:49:a7:8a:0c:ab:29:0d:39:41:e2:3f:19:a9:b3:a5:
c8:bc:3f:89:e3:19:51:8b:52:83:4f:67:d9:49:0e:dd:c0:2e:
0d:af:f8:60:7a:e9:35:9f:0b:92:af:a9:cd:5e:4f:c0:1e:27:
87:b3:52:5a:71:16:1d:98:d2:51:2d:c0:a4:83:8e:1f:27:c7:
24:ad:76:7d:8c:ae:ae:bd:3f:8d:ff:81:f4:11:97:96:b9:41:
44:c4:dc:e6:84:6f:46:8c:59:f5:94:83:17:92:00:04:b2:4d:
9e:cd:04:73:b1:e3:f7:02:ed:0f:d5:8d:e4:fc:b0:da:83:c7:
be:22:a1:97:57:d5:4e:61:21:d6:38:0d:21:6c:f2:75:07:6e:
1b:6b:89:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:47:15 2026 by rpki-client