This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
File: 1h14JILiVI0iXRvIiINjk97jmBI.mft (raw, json)
Hash identifier: CbDXPkdOiPvZl6SLji3fH1ePTzOr2KQlAuz4MCNzGJs=
Subject key identifier: 09:56:C4:90:40:B3:1C:9E:C0:57:62:FD:A7:FA:8F:1C:0D:5C:CB:F4
Authority key identifier: D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12
Certificate issuer: /CN=A91F0A98/serialNumber=D61D782482E2548D225D1BC888836393DEE39812
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
Manifest number: 01CB
Signing time: Fri 23 Jan 2026 02:05:54 +0000
Manifest this update: Fri 23 Jan 2026 02:05:54 +0000
Manifest next update: Fri 30 Jan 2026 02:05:54 +0000
Files and hashes: 1: 1h14JILiVI0iXRvIiINjk97jmBI.crl (hash: 5ziiqSt+mIcZkKojHQRCqGB8TwI9MkMAx9fS0wSxELs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl
rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 02:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0A98, serialNumber=D61D782482E2548D225D1BC888836393DEE39812
Validity
Not Before: Jan 23 02:05:54 2026 GMT
Not After : Jan 30 02:05:54 2026 GMT
Subject: CN=6972d782-1836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:c9:3f:db:82:48:df:d4:85:df:cc:e5:f2:
50:fd:3b:d0:ee:83:fd:56:39:9e:42:5f:88:19:c0:
a9:f3:2d:33:53:c0:26:d6:37:0a:f5:aa:3f:1e:fb:
4a:5f:2b:f2:37:4f:d7:28:f5:a4:c9:ef:aa:b0:9d:
6c:fa:6b:4c:75:0d:29:0b:3d:09:2d:75:23:4e:4a:
89:d6:a9:bf:fe:42:25:a4:9b:2d:5b:c1:ef:62:90:
59:cb:72:81:e7:0e:51:59:92:8e:33:b8:10:23:c0:
4d:3a:29:52:3e:20:67:f5:71:4f:63:e7:10:04:a9:
4b:e7:88:26:10:71:ff:4c:29:ac:37:ae:31:2f:b8:
ce:e9:89:12:6f:c7:58:6c:83:af:ea:6d:65:a0:df:
ee:39:32:28:19:c4:84:d4:26:07:35:38:65:d1:c5:
fd:8a:11:dc:95:b6:0a:c6:68:8e:03:42:fd:84:dd:
f8:1e:b2:fb:77:3c:5b:45:31:45:29:fd:0b:0d:0c:
fd:7b:6c:b0:27:be:4b:79:3d:66:61:ab:44:0d:3d:
ee:48:35:14:6e:c1:b3:21:59:32:45:32:59:bc:82:
eb:b9:4f:80:b3:29:bb:a5:b7:58:c9:6f:c2:fc:31:
31:b3:64:af:4f:7d:ab:27:6a:7f:15:b8:53:f9:a8:
b4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:56:C4:90:40:B3:1C:9E:C0:57:62:FD:A7:FA:8F:1C:0D:5C:CB:F4
X509v3 Authority Key Identifier:
keyid:D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:1e:10:3d:26:9b:90:10:81:7c:ff:99:11:ae:bf:6d:d8:74:
02:5c:9c:d1:2c:bf:ff:ff:aa:5d:b9:97:6a:82:7d:ea:e9:09:
99:a8:af:0a:e3:3a:2d:dc:f2:6d:67:59:20:32:df:08:86:33:
63:ae:c0:a9:de:50:8f:2b:0f:85:fa:b6:6a:70:fd:4b:66:ef:
51:96:45:38:75:53:03:6f:5e:e7:4e:8b:dc:32:19:41:f3:4d:
49:2b:b3:1f:40:de:89:40:47:83:2d:3a:01:23:f8:c6:50:48:
10:05:ae:ff:f5:a1:71:a6:a5:90:68:a2:08:3d:cc:33:e3:2b:
3a:d0:32:73:53:cf:e8:e2:fd:f1:c9:b4:05:00:7c:23:07:01:
d2:67:6d:e1:91:be:cb:4b:e5:e6:aa:d8:fc:fd:c8:3c:4b:91:
a1:c0:4a:01:e8:22:87:7d:bc:65:e8:6f:41:b7:d7:9c:b3:8a:
b1:d3:12:b2:9b:5b:cc:d2:ca:5c:3c:e7:ba:c1:12:dc:c9:58:
10:df:88:a9:b7:0f:df:d1:f4:97:37:e0:52:c7:ac:28:60:f3:
37:b5:f3:5c:94:33:f1:72:60:7d:a7:92:a3:94:7c:77:b1:93:
d6:dc:c1:97:46:2a:b4:7f:48:1a:ea:14:a9:90:2b:53:6c:c4:
c0:01:c8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:30 2026 by rpki-client