This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
File: -sKy5UFEW1tHxZ2uHeLd6IeauLs.mft (raw, json)
Hash identifier: ydejfFnk7/yCwP773+cH+F1Lg2QJEigPRWpumwSZY8M=
Subject key identifier: 5A:F0:52:37:49:BC:AA:89:4E:F3:9B:51:26:67:0D:C6:C9:AC:2F:3B
Authority key identifier: FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB
Certificate issuer: /CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
Manifest number: 0128
Signing time: Sun 25 Jan 2026 03:57:24 +0000
Manifest this update: Sun 25 Jan 2026 03:57:24 +0000
Manifest next update: Sun 01 Feb 2026 03:57:24 +0000
Files and hashes: 1: -sKy5UFEW1tHxZ2uHeLd6IeauLs.crl (hash: XwHge7BJTm7ecw0KZENPn0SWFM5RiXpFG7uRErKFTus=)
2: 8B0201183E8911EFB2DCA846C4F9AE02.roa (hash: sQR4OxxnRQelaQye41JzM/+/uoADouWx9n3P5u34eoY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl
rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F11EE, serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
Validity
Not Before: Jan 25 03:57:24 2026 GMT
Not After : Feb 1 03:57:24 2026 GMT
Subject: CN=697594a4-8c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:d2:eb:28:89:a3:59:82:32:46:7d:4b:42:
3b:34:0a:fb:52:2e:13:b9:54:91:16:c7:b6:ac:da:
6e:b4:6e:be:80:f0:b4:83:8a:4b:e7:b7:90:e9:b3:
65:a7:a4:bc:97:1b:dc:4a:7c:f5:ff:8c:59:11:96:
ab:b7:4b:07:7e:87:4f:66:b0:a1:b6:09:5d:7f:ab:
8b:f0:ef:1c:e3:dc:0d:c3:c6:e2:c1:9f:e1:24:68:
78:d4:5f:5b:7f:1f:af:aa:a0:ba:36:36:d7:8e:a5:
ed:71:7b:38:64:0c:95:9c:51:3f:03:f0:a3:9b:8a:
5e:ba:ff:e7:6b:a7:77:10:42:7a:b3:70:9a:b9:91:
c8:70:1f:dc:ce:7c:1b:74:d1:e3:b8:7a:13:01:4a:
9a:32:df:5a:29:11:6c:e8:87:ff:42:a1:36:b9:b5:
1b:68:fb:06:d2:7c:1f:de:bb:fd:7a:3c:b9:b7:c8:
d7:13:29:41:5a:b7:b2:24:8f:f8:85:9f:3b:f8:48:
19:50:bf:df:b2:db:a2:96:a6:07:51:71:b8:94:68:
3a:6e:8f:d9:54:bc:2d:84:bb:b9:2b:cf:ac:0d:06:
57:e2:b3:ac:91:e7:56:16:9e:65:95:c8:29:a5:c4:
eb:3d:4b:28:7c:b8:72:0e:dc:5b:ee:d4:e2:5d:26:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F0:52:37:49:BC:AA:89:4E:F3:9B:51:26:67:0D:C6:C9:AC:2F:3B
X509v3 Authority Key Identifier:
keyid:FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:15:f4:56:44:9c:2c:be:b5:45:1e:24:0c:a9:66:e8:7d:9c:
98:ee:60:43:9d:24:9c:80:76:05:e3:06:86:d3:04:6d:44:c5:
16:76:43:90:8e:ca:1d:bb:58:1d:ea:e2:ef:23:9f:82:a0:d7:
1e:f3:98:22:8c:9a:66:e3:94:9d:23:62:e7:64:da:df:92:13:
32:02:79:8a:e8:4b:28:c1:73:71:d7:c5:29:23:6d:3b:a6:01:
4a:87:ae:e0:32:27:ef:6d:8c:55:97:c5:76:b9:66:89:93:aa:
ff:78:c5:b5:04:3e:2c:63:6b:f4:ec:d5:d3:b2:28:da:3f:41:
84:4d:48:f4:04:15:e7:97:07:0f:f6:3e:ed:21:b2:ed:0d:fc:
11:01:d4:20:46:13:77:97:2a:ad:0e:d5:e0:4d:cd:6e:83:19:
1f:a9:00:5d:0a:0b:2d:8f:37:3b:32:6e:e6:73:08:5d:9c:dc:
cb:a6:06:cc:ec:2b:f0:61:1d:01:bf:86:b2:fb:02:ae:40:2f:
1f:0f:cc:9c:c2:16:08:fa:3c:e8:ed:3a:dc:db:e5:10:0f:b5:
18:c2:f0:03:c6:5a:2a:a0:10:6d:cc:10:5d:e7:fb:e7:81:15:
e2:5b:aa:12:32:99:f3:5e:74:df:0b:6a:1b:94:8e:6c:43:81:
20:ce:77:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:36 2026 by rpki-client