This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
File: ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json)
Hash identifier: i6Vy5otJwcBoIuOUXjpJmlaYnW/eihXbmWAj4Mz2bug=
Subject key identifier: 9D:68:12:F0:57:97:2F:25:F1:E1:6D:25:78:14:A1:26:3F:C0:D3:47
Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Certificate serial: 1CB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
Manifest number: 1C9C
Signing time: Sat 24 Jan 2026 15:58:24 +0000
Manifest this update: Sat 24 Jan 2026 15:58:23 +0000
Manifest next update: Sat 31 Jan 2026 15:58:23 +0000
Files and hashes: 1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: lsj3TAlzZaU1HiKSCiEnh9y1l9i15NeAqT0gsqqwt8A=)
2: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: 4+gvlbrCKPYHxXa5P1wV2CMHV3TVWTeug3ZLXYBNytU=)
3: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: nzh03mGpFuWBuJjX4zOpsk0cBliW2iPs211HjGanKnk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7349 (0x1cb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Validity
Not Before: Jan 24 15:58:23 2026 GMT
Not After : Jan 31 15:58:23 2026 GMT
Subject: CN=6974ec20-112c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:81:81:be:bb:cb:15:f8:a5:d7:d6:1c:db:
8c:50:b6:04:b1:d2:f6:2f:01:5d:1f:77:c1:a7:90:
26:9b:25:c3:91:1a:c3:4e:d7:bf:b6:ce:f5:58:dc:
1f:31:a3:4e:27:30:33:40:8c:23:64:98:03:55:ed:
94:76:b1:36:6f:33:91:4a:96:da:e3:da:70:6c:cf:
15:69:27:99:35:ec:e0:fe:a1:eb:68:6e:89:4c:04:
29:dc:c5:a1:cb:77:88:bc:09:8c:00:c5:7a:91:81:
7f:0a:42:0a:ca:89:9d:dd:af:b5:37:fa:85:51:b3:
56:f4:f7:ee:89:f0:18:98:81:ff:67:07:33:47:17:
35:11:de:cd:31:ed:fd:ea:9c:38:26:5a:fd:86:0a:
20:20:b7:73:03:e5:a3:03:e3:ad:26:d7:c9:cb:bf:
c9:21:3f:a2:79:25:fd:74:34:72:30:94:90:95:b5:
23:fd:69:6c:0a:61:ef:8d:16:f9:f4:a2:86:49:0b:
b0:20:63:c5:6e:64:fe:85:38:db:bf:4c:cb:ca:e9:
2a:09:75:88:a5:4a:46:1a:16:a8:40:5b:36:c1:01:
ae:51:c3:c4:79:9a:8c:ae:e7:9e:86:d6:af:92:33:
c1:1a:db:59:63:fe:0f:11:f3:bd:03:44:06:e3:75:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:68:12:F0:57:97:2F:25:F1:E1:6D:25:78:14:A1:26:3F:C0:D3:47
X509v3 Authority Key Identifier:
keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5c:b0:bb:03:14:50:4c:3d:13:23:d6:63:eb:45:dd:c4:5e:
f2:55:82:72:cf:45:8d:90:38:e6:23:e5:9f:b1:b1:86:64:7f:
2e:45:10:94:5e:f9:21:c2:ef:91:8a:56:9b:b9:36:f6:c5:41:
74:78:54:ce:e1:c5:af:49:8d:34:52:a0:a1:59:b4:d2:dd:25:
6d:67:fe:10:d9:82:c4:97:dd:f4:31:df:7e:03:b8:30:2e:da:
a7:16:db:86:46:46:2a:28:83:6c:fc:32:a2:1a:01:61:00:7e:
05:c4:07:ef:22:33:1f:92:87:76:97:bc:ba:e8:5a:8d:ed:4f:
0a:8f:0a:88:0a:e1:a6:79:92:74:24:0a:81:1b:ed:6c:c3:6f:
96:e3:1d:44:ba:ed:67:b0:00:a5:8b:78:12:a0:85:e1:cd:11:
55:46:56:f7:91:08:e8:ae:20:44:0e:9f:69:e5:bc:98:ec:ce:
f8:1c:62:f5:72:7e:c6:8a:d7:96:44:8b:7c:a2:f9:3f:07:71:
81:42:9b:15:bc:03:7d:21:90:fc:b4:71:36:98:21:06:d3:16:
74:50:34:dc:5a:df:7e:1a:e0:5c:ce:0f:9a:81:cc:a7:4c:81:
e5:5d:cb:58:04:55:71:ed:0f:62:ea:ac:fd:57:b3:27:cb:bf:
0e:f8:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:50 2026 by rpki-client