This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
File: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft (raw, json)
Hash identifier: NSV2LqAYj3wTCFx9Y4hRTu6o7P9EamjaXyby6Flb2CE=
Subject key identifier: 5C:B3:14:31:3D:89:E0:D2:71:45:AD:55:F1:84:17:AF:B3:21:C1:20
Authority key identifier: E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D
Certificate issuer: /CN=A91F2B47/serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D
Certificate serial: 02A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
Manifest number: 029E
Signing time: Sun 25 Jan 2026 00:41:57 +0000
Manifest this update: Sun 25 Jan 2026 00:41:57 +0000
Manifest next update: Sun 01 Feb 2026 00:41:57 +0000
Files and hashes: 1: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl (hash: lBA+IAwl3E0gFBUrKDKbLYMfw0NO2cELM7Pr7yS6j7o=)
2: 909F94F070F911EDBA42F056C4F9AE02.roa (hash: J59LrtIyPPPdrZKXDpKJBMgQFNUlF3OmhLoyAq20BcU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl
rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B47, serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D
Validity
Not Before: Jan 25 00:41:57 2026 GMT
Not After : Feb 1 00:41:57 2026 GMT
Subject: CN=697566d5-a76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:d5:7d:62:0a:22:8d:20:3f:e6:04:9c:3b:
99:d1:28:f7:be:ed:ef:91:1c:7c:11:66:7c:03:37:
44:41:7c:d6:fa:4e:10:51:64:c6:f1:fa:4b:de:53:
c1:72:7d:66:04:d1:76:5a:eb:b7:3c:04:19:d5:4e:
1d:f2:a7:35:b7:03:53:20:b7:23:70:e2:97:6d:a6:
5c:0f:85:b8:8a:58:33:2a:e1:36:06:a9:e2:47:b3:
1b:1d:e1:fe:75:f5:e7:79:1a:05:9e:7d:82:9e:24:
6d:ab:d5:c8:94:45:30:0f:b6:87:4b:33:67:a7:b7:
55:f8:54:e8:6b:5a:be:a0:49:36:59:e2:ce:23:6c:
5a:41:e0:04:4c:9d:59:56:32:8f:8e:85:fc:fa:51:
08:8d:ea:4c:72:d0:cb:32:17:7e:6f:bc:15:80:18:
ff:68:19:3d:39:12:9b:5c:36:94:50:d2:3a:92:64:
a1:4e:b9:b2:42:5e:09:3d:5c:af:eb:22:0e:73:36:
86:4b:c1:ea:d7:25:30:7c:5e:f2:aa:95:0c:31:c4:
e1:f9:a3:bd:18:97:c5:ec:30:cd:cb:50:32:4a:22:
44:c7:fc:36:ef:ce:6d:92:ea:e1:0a:8d:98:cd:16:
d1:b4:64:49:e4:42:81:de:15:8b:47:1c:32:01:80:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B3:14:31:3D:89:E0:D2:71:45:AD:55:F1:84:17:AF:B3:21:C1:20
X509v3 Authority Key Identifier:
keyid:E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:82:e0:39:76:75:90:93:d3:60:23:c2:0d:a4:f1:7a:84:57:
77:19:ce:d3:c0:c9:ea:99:e2:9c:c7:9d:50:dd:c2:1e:29:70:
bc:c3:ae:34:87:56:5b:05:74:6e:46:a1:5c:10:78:af:f9:f6:
83:e5:83:5e:d4:8d:63:52:dd:5f:4b:c9:ac:f4:16:22:d4:71:
39:82:6a:3d:de:fc:d9:0c:f4:fa:fc:7a:fd:2e:66:05:54:b8:
0f:a4:df:89:86:b0:e8:12:2d:c4:cb:5a:5e:6e:84:6b:eb:69:
97:c7:9a:b7:2b:24:c6:91:88:ab:2b:35:87:52:44:e9:74:84:
f9:59:c6:b1:48:5e:1f:42:5a:84:e0:53:13:d0:56:9b:06:9e:
c3:ef:17:77:a2:a5:2e:5c:73:63:cd:d5:dd:e4:3c:80:ab:1c:
f8:67:34:9e:38:0d:e5:62:fd:0b:70:ce:57:da:eb:14:a5:d9:
94:7d:96:c5:8b:83:4e:0a:9a:bd:3f:f7:aa:a8:7c:34:53:56:
41:8c:0a:7e:83:f2:c0:a1:bf:b4:c7:87:c5:d0:a3:51:bf:8d:
a1:85:01:52:4f:3e:fb:d1:af:c0:bb:f2:d0:de:af:cf:aa:25:
a0:0b:85:c3:63:1c:f2:65:a6:ed:6d:e8:4a:0a:a0:85:c1:48:
3e:93:9e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:35:20 2026 by rpki-client