This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json)
Hash identifier: k/nFJJ6rNBcBFd32dNpVGrw9CmBxwq7DMk5CdSVotbI=
Subject key identifier: 5E:BA:C8:E2:48:87:9B:4F:47:71:2B:B0:F0:DA:F5:45:A1:C1:5A:AD
Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
Manifest number: 011F
Signing time: Sun 25 Jan 2026 03:59:21 +0000
Manifest this update: Sun 25 Jan 2026 03:59:20 +0000
Manifest next update: Sun 01 Feb 2026 03:59:20 +0000
Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: 2uNbcuu4LRIq3oh8U1ZQd45kJV/ScCPEOyAeCmCUhDI=)
2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: Ph9PQO0HR4nUNS7ci1voMb24Pze4tYQXnav/XFcYles=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl
rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
Validity
Not Before: Jan 25 03:59:20 2026 GMT
Not After : Feb 1 03:59:20 2026 GMT
Subject: CN=69759519-3756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:28:cc:19:d4:8a:bc:61:14:a6:2d:c5:ea:
c0:71:bc:df:d0:d8:1d:dd:6a:6d:7a:95:d7:d8:47:
cc:a8:ca:8c:e2:be:cd:28:84:92:72:42:3e:26:e3:
32:19:84:0f:15:54:ff:9f:d9:1d:45:8b:5d:77:1c:
06:56:9e:d9:14:42:56:ef:08:21:ed:a2:42:95:70:
c7:6d:44:4d:64:ad:db:10:06:7b:f3:ad:ab:d8:f5:
14:5f:2b:e4:1a:db:57:e2:07:7a:8f:1b:0f:3f:35:
7a:d6:a2:27:fd:b4:6a:b9:a9:48:07:98:a8:f3:36:
b0:9f:c5:72:2e:7d:32:91:88:49:bc:c3:21:bc:5f:
f3:67:56:f5:14:93:1a:29:37:4d:2f:2d:78:ae:e7:
98:66:79:79:31:f4:f4:95:99:a3:47:31:1f:83:64:
0f:28:1d:9a:c3:70:49:ef:7a:16:37:28:f5:d4:4c:
ad:78:74:7d:d3:26:2d:f3:46:a8:33:81:c2:2c:77:
b2:d8:d2:61:9c:78:b9:5e:5d:5b:0f:5f:db:aa:b5:
0c:69:95:3c:4f:41:1b:38:23:e1:59:3c:68:4e:e9:
18:08:90:77:25:a9:0e:8e:5e:ee:b5:75:71:93:41:
96:ea:63:b8:0d:ae:0f:bb:7d:16:d3:07:bb:a1:72:
85:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BA:C8:E2:48:87:9B:4F:47:71:2B:B0:F0:DA:F5:45:A1:C1:5A:AD
X509v3 Authority Key Identifier:
keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:4a:09:5f:dd:9d:0d:38:d6:c8:f9:f8:72:4a:2d:03:b9:26:
1f:79:08:22:96:da:c9:f2:7e:de:1e:84:4f:c2:a5:4a:fc:5d:
2e:2f:0a:38:da:ad:4c:4a:a7:dd:bb:9e:48:a6:24:61:83:22:
19:9e:3f:b0:5f:c0:66:f8:ae:f0:16:0d:79:48:91:b4:d6:a3:
f7:c8:1c:8a:85:1d:a3:9f:93:2f:d4:66:30:dd:95:79:18:c5:
9b:96:0d:6b:52:d4:f7:14:33:dd:e9:a8:7e:71:ec:df:9c:d7:
02:58:cb:5a:9a:0c:32:c7:56:5b:9f:0b:54:1b:1b:0f:85:80:
f7:e4:8a:23:7c:ae:e1:17:bc:9a:02:f0:e8:ee:ba:dd:2d:27:
9f:e1:81:44:bc:f7:cf:1a:90:63:ba:64:da:d0:c2:39:26:2c:
99:c7:e6:02:f2:d9:53:02:c9:93:51:06:3c:22:a2:4b:9f:ea:
2a:1b:b4:e7:27:e0:eb:5f:d3:53:37:43:c3:cf:9d:b5:f0:ce:
b9:30:fb:75:de:e1:19:b3:17:d0:25:dc:e6:2f:f2:8c:c8:55:
ea:6d:50:66:95:c5:05:36:1f:80:c4:ee:af:b3:73:59:45:d8:
3a:d6:c3:48:1d:53:b1:e3:c0:ec:a0:34:e4:55:9c:5e:00:8d:
a9:8a:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:39:30 2026 by rpki-client