This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
File: mV1wqX9WsuAAuspuykNz5iB7uY0.mft (raw, json)
Hash identifier: 92X1CA6PEEBt+5sI+oePeuTI21/tpKPqBNsCo/1DXx0=
Subject key identifier: 8B:6E:7F:0B:20:66:97:1B:EE:5F:97:EA:8A:F7:91:EB:5F:F2:59:90
Authority key identifier: 99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D
Certificate issuer: /CN=A91EA850/serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
Manifest number: 0C
Signing time: Sun 25 Jan 2026 07:06:20 +0000
Manifest this update: Sun 25 Jan 2026 07:06:19 +0000
Manifest next update: Sun 01 Feb 2026 07:06:19 +0000
Files and hashes: 1: mV1wqX9WsuAAuspuykNz5iB7uY0.crl (hash: 5GLiIB+qUMFBRwvmWN4e2CT6NpH2MT6fwLv4gNWmhwg=)
2: CE6915C0ED3A11F0A5B7B5054B6F56BC.roa (hash: ZhcQJbrC1/0EL+xA9V5mKW9bp21ubHFqtWHWB54vKrc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl
rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 07:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA850, serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
Validity
Not Before: Jan 25 07:06:19 2026 GMT
Not After : Feb 1 07:06:19 2026 GMT
Subject: CN=6975c0ec-0060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:dc:e5:88:50:bf:54:de:e8:59:c0:8c:e5:
30:1d:e0:85:99:3a:d5:67:d3:06:51:4a:76:0c:8d:
ae:bf:16:e9:2c:cf:da:68:29:10:05:f5:ea:bb:1a:
b5:78:c1:8d:0f:d1:24:95:e1:31:2c:bb:a6:54:74:
1a:9f:e6:27:70:e1:37:ee:0d:65:75:a4:f0:ad:d1:
a5:8b:e6:90:8a:ac:b0:0e:18:35:86:62:0c:c8:cc:
38:4b:01:84:b8:d8:ad:5d:53:ea:6a:82:c6:f5:d2:
b0:64:fb:62:de:ac:c9:b4:95:58:97:ae:ce:d6:50:
f5:45:a0:3b:b7:e7:2b:d5:16:84:b8:ed:84:00:66:
6a:38:ba:2f:6f:e5:7e:70:5c:8d:9b:64:d5:f8:8e:
4c:78:66:69:f7:e7:0a:a7:84:f6:d4:3f:32:f5:ba:
1e:34:09:c1:ba:8f:90:f7:4b:54:cc:d1:b9:0e:26:
2a:4e:54:bf:3f:b2:a9:86:26:a7:cd:ad:15:a5:d4:
66:60:e6:c1:f8:01:13:4e:f4:97:b4:78:13:de:7a:
aa:fa:59:34:1a:bd:04:87:4a:1d:1d:6e:91:a5:6a:
fe:ed:cc:62:d3:fe:ca:09:b0:3c:79:d0:91:11:14:
35:18:d3:b0:1b:ef:dd:92:90:f7:92:d2:61:09:f8:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6E:7F:0B:20:66:97:1B:EE:5F:97:EA:8A:F7:91:EB:5F:F2:59:90
X509v3 Authority Key Identifier:
keyid:99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:03:0c:b8:4c:a9:31:fd:6e:a5:59:94:bb:e5:88:a4:71:93:
09:8d:c6:6c:30:34:07:8c:b6:61:dc:33:3b:ba:34:bc:d9:db:
67:92:1e:75:f9:2e:49:94:8f:a2:15:e5:ad:d2:ad:0d:31:5d:
ed:1a:a6:11:d9:0b:02:a4:25:6b:af:d0:d4:85:7c:5d:33:c1:
35:cf:62:06:4d:f6:5d:5f:7c:77:21:dd:23:48:a1:8e:ee:69:
2e:62:e0:da:d4:92:75:60:16:80:6e:ed:3a:59:c3:f7:13:e0:
ce:1d:01:85:cd:07:e0:03:2c:5b:de:f0:78:7d:1d:f5:eb:72:
9e:f5:27:2d:7d:f2:c0:87:f9:18:bc:35:d0:d7:32:c3:79:45:
03:f1:63:d9:d9:66:48:a8:2e:d4:7c:c6:9d:57:a9:05:7a:5b:
e3:07:2e:a3:f5:cb:f5:54:e2:2b:b8:6c:46:fa:ed:6e:1f:7d:
ca:96:af:b0:91:17:6d:90:94:b9:b7:5c:95:0b:c1:38:1e:f6:
7d:4c:4a:e8:c4:99:98:07:09:0e:68:43:ca:00:5a:de:9c:34:
dd:12:2b:c8:b0:37:24:f5:8a:02:f3:10:a7:af:d8:de:d5:fb:
77:81:a7:e8:02:ae:5b:62:8d:fa:77:07:c7:ab:80:87:44:d8:
11:10:e6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:19:26 2026 by rpki-client