This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
File: CUoNzYAqBb91c_96buCnqXIFUNE.mft (raw, json)
Hash identifier: +vAlkOy3HiAPY6+voFBiAACBz/GdJOmEN8pRGvKhWVs=
Subject key identifier: 83:29:DB:09:D4:D0:78:A5:DD:28:56:57:A1:B8:36:99:B1:1D:32:26
Authority key identifier: 09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1
Certificate issuer: /CN=A91EC93F/serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
Manifest number: 0205
Signing time: Sun 25 Jan 2026 01:40:28 +0000
Manifest this update: Sun 25 Jan 2026 01:40:27 +0000
Manifest next update: Sun 01 Feb 2026 01:40:27 +0000
Files and hashes: 1: CUoNzYAqBb91c_96buCnqXIFUNE.crl (hash: /zOk8gO5aBDCPlWH7IfdlWth4lKxo+rVedjL68+Kh18=)
2: 5BA557A6DEB011EDB7B0C04EC4F9AE02.roa (hash: SAjkukJRb4ZF5aM/fUJAbMY1lnAEeXzzgnRTsvAlM7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl
rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:40:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC93F, serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1
Validity
Not Before: Jan 25 01:40:27 2026 GMT
Not After : Feb 1 01:40:27 2026 GMT
Subject: CN=6975748b-6b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:bd:0c:f2:62:81:ba:bf:bb:20:90:ee:60:
09:02:df:59:95:6a:62:12:b0:5f:cd:f1:98:29:e6:
3f:5b:90:0b:82:5b:df:0a:87:1f:e3:b8:e9:82:a1:
ef:ad:3c:79:32:90:50:40:a3:1c:61:85:28:96:89:
72:8a:09:31:6e:ba:b9:1e:7e:15:52:56:82:52:c4:
35:26:cd:dc:5c:3c:71:ec:90:d8:3b:eb:35:f4:6e:
c4:58:f8:5a:cc:a0:0e:c4:8c:8e:b1:06:57:7d:dd:
fe:fb:19:7c:14:ce:9b:5e:9b:cc:39:5d:33:3f:b9:
22:d2:52:d9:76:50:26:e7:e9:71:6b:3b:4e:2e:61:
30:47:68:82:a7:19:c3:74:91:59:9a:0a:b5:17:f5:
6f:c3:db:0c:29:dc:44:87:3a:39:d6:a2:61:67:43:
1a:aa:e0:4d:b6:8f:25:ff:68:42:9d:24:aa:e3:9f:
85:20:32:22:25:b5:e9:fa:6a:67:d1:df:22:90:b5:
50:6e:b7:a4:dd:95:f0:e7:23:b7:af:ff:79:70:45:
74:11:c3:48:15:c7:87:cb:1d:84:57:8e:a5:f6:bc:
4c:c9:d7:ce:68:b2:c4:17:d9:d6:d3:d2:09:40:3e:
e5:1e:6a:48:97:e4:6c:e7:e3:4d:19:91:2b:2e:66:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:29:DB:09:D4:D0:78:A5:DD:28:56:57:A1:B8:36:99:B1:1D:32:26
X509v3 Authority Key Identifier:
keyid:09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:a5:17:b6:92:a9:3b:0b:53:00:1b:84:d0:12:dc:c6:2e:ce:
83:2d:10:34:bd:48:a0:57:82:d4:dc:90:9f:3c:32:1b:cf:55:
7f:25:f4:87:c6:40:70:21:00:85:05:16:41:7c:e8:33:68:3d:
ea:17:a6:2b:87:40:22:22:6c:da:ce:9f:5c:40:a3:85:05:ab:
a4:ff:c9:90:75:fc:47:7a:9d:09:63:80:61:f1:6d:56:03:9a:
95:31:c3:53:90:12:af:1e:58:f4:a1:2b:48:20:97:bd:f1:b0:
df:ee:2d:cb:96:06:3c:9c:0c:5e:ee:25:57:da:d1:89:cb:6e:
5e:ce:b9:cb:ff:1b:91:aa:9e:9f:4f:81:7c:ed:65:dc:47:75:
47:69:8a:21:b6:5c:89:d4:0b:32:c0:5a:15:c0:ab:d8:d5:26:
79:a6:a9:21:f0:b8:df:17:a1:71:3b:1e:52:eb:da:fc:56:db:
18:f8:a1:0b:4d:ae:9d:28:7e:d5:d1:d9:60:86:99:25:0a:89:
97:a7:37:b6:68:02:fc:06:59:f4:fe:55:14:ee:59:00:1b:0c:
30:c3:1c:e5:41:53:cc:78:d0:70:08:ab:55:a4:92:e0:c8:1e:
1b:2a:f5:a3:bb:f7:7f:cd:e7:23:31:96:82:7f:3c:7c:03:57:
b6:7e:b6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:19:40 2026 by rpki-client