This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
File: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft (raw, json)
Hash identifier: HLcq1h8NG7VsvXw410gE1y7ET61jY/9iyYE2Ftmob+k=
Subject key identifier: E6:43:B2:AA:DE:DE:E1:C9:DF:C1:C0:14:6C:6E:CC:7B:D4:18:95:9F
Authority key identifier: D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A
Certificate issuer: /CN=A91F0AF0/serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A
Certificate serial: 0CE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
Manifest number: 1E75
Signing time: Sat 24 Jan 2026 16:55:22 +0000
Manifest this update: Sat 24 Jan 2026 16:55:22 +0000
Manifest next update: Sat 31 Jan 2026 16:55:22 +0000
Files and hashes: 1: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl (hash: VufJkxKznQ4zBXFu97kKhRWCcFgNbZe6gWJIrhu7yl4=)
2: CE3C7EF66FEB11EB91967864C4F9AE02.roa (hash: Ecj4wTVjyUbe05JmkTHE3iJeDcHJFhB138/thNFleyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl
rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3302 (0xce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0AF0, serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A
Validity
Not Before: Jan 24 16:55:22 2026 GMT
Not After : Jan 31 16:55:22 2026 GMT
Subject: CN=6974f97a-c88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:ca:49:73:82:fe:6d:20:61:fc:5b:e7:a6:
b0:6c:05:14:92:7f:0d:9b:7c:dc:b4:73:1d:e4:23:
ee:c1:f2:dd:c0:cb:78:ef:1e:95:28:eb:be:13:a8:
33:44:46:09:fd:11:c5:40:f5:8c:cf:24:cd:91:b5:
06:ca:33:55:29:18:01:52:9d:23:6a:ab:86:77:91:
86:0e:87:d2:fe:3e:f7:ee:72:b3:df:c7:b7:06:de:
91:05:62:3f:70:94:01:eb:82:1f:ed:9d:81:71:b4:
c3:15:66:4b:3b:ab:4f:92:87:79:ec:40:32:b1:d3:
a1:f9:6c:6f:02:a8:07:66:90:ea:7a:a5:ab:80:58:
d1:ba:c6:a6:8f:b5:9b:e2:5e:c8:2d:61:96:a6:e6:
c6:55:f8:70:9b:c9:a9:38:7d:ec:ca:55:5e:50:2a:
67:63:36:b1:4d:65:cc:de:e2:26:84:f4:d1:d7:71:
a6:98:f8:96:3a:90:9e:43:bf:73:fe:e4:7d:61:8c:
f6:a8:11:86:cb:c0:fc:11:ce:72:b8:c7:8d:34:cc:
87:bf:16:85:a4:72:5f:26:cb:81:1d:8c:b3:71:ee:
db:64:86:08:91:99:be:b4:15:d4:9b:78:fa:a2:44:
e3:ec:e9:d8:00:eb:f5:bf:12:e0:95:a0:36:52:9f:
44:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:43:B2:AA:DE:DE:E1:C9:DF:C1:C0:14:6C:6E:CC:7B:D4:18:95:9F
X509v3 Authority Key Identifier:
keyid:D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e3:f4:12:54:3a:b1:6b:c8:6a:a0:43:da:1e:f7:33:f4:f0:
a8:1f:a6:2b:b2:2e:06:fa:0f:20:8e:99:c2:f8:a1:86:66:40:
d4:d3:1a:11:51:58:d9:2d:15:de:29:b0:21:4d:1d:cc:38:4a:
ee:63:b8:0d:92:4f:e8:e3:a9:4e:9d:06:55:59:6b:96:87:33:
c7:13:a3:87:b1:2a:89:1e:c4:be:45:a0:62:ce:af:e0:0d:fe:
04:64:ee:d0:a5:dd:dd:50:14:08:c2:c9:3b:0f:97:56:3b:2f:
a6:d2:c7:c9:d8:51:e4:41:2a:cd:79:2f:e1:0b:2f:99:de:e3:
69:80:93:b0:9d:81:a9:5b:5d:f1:88:05:3c:31:04:cf:2e:85:
0e:c7:03:85:50:89:e4:19:e3:ad:8e:fa:ca:51:f4:2b:03:4e:
9e:02:a5:d5:87:f4:4c:31:71:ed:bb:e4:2b:08:a3:60:12:40:
c3:bd:f7:ef:13:3e:c5:7f:18:c2:17:19:62:60:99:b8:f7:74:
a9:75:69:f3:40:0e:1e:d0:73:96:42:3c:a6:ff:d0:78:f4:c1:
ba:50:ac:f3:6b:cf:bd:4c:eb:04:6a:b9:3b:49:7b:0b:4a:b8:
89:e8:fa:36:df:95:30:f0:e1:8f:bb:6a:fa:17:b2:4f:93:e8:
2a:80:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:23 2026 by rpki-client