This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json)
Hash identifier: Xge9R/rlH2SKkucY06HC4EkmvxNuedmIQ4EaOnZXX1c=
Subject key identifier: 89:3A:54:70:74:AD:5A:75:CD:3D:84:2D:18:90:A1:D0:30:4D:45:06
Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
Manifest number: 0255
Signing time: Sun 25 Jan 2026 00:57:50 +0000
Manifest this update: Sun 25 Jan 2026 00:57:49 +0000
Manifest next update: Sun 01 Feb 2026 00:57:49 +0000
Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: DiU436x48I7ZmmabJJ3bFTmKOHSpxHoCjkebUOVf/ls=)
2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: XoJZF9Jz8ZccwqIcrKIVr4/ZTC4E2cHCJSHMspLqgb4=)
3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: j0KJtUAylCCCv7Fkk/Ws7qR9yBTk+ovFn0tv4R3Wr5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Validity
Not Before: Jan 25 00:57:49 2026 GMT
Not After : Feb 1 00:57:49 2026 GMT
Subject: CN=69756a8e-f3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f0:87:5f:d5:97:4c:bb:93:e4:9d:b1:e0:8c:
9c:d3:3e:be:d9:db:8a:2e:34:7c:c6:41:21:c3:2e:
45:ff:3c:d3:e8:8c:c7:af:45:c1:3e:c1:94:d5:d3:
97:f9:07:c6:18:f7:ad:59:84:81:3c:42:cb:89:f3:
d4:f4:96:37:9f:2a:3f:9a:33:24:ae:1d:4d:65:7d:
bf:75:11:35:c2:c1:3c:8c:16:01:68:f7:9f:e8:e9:
81:12:75:bd:04:eb:4b:3b:44:d6:c8:d5:e1:f1:50:
4c:28:39:57:15:84:4b:41:e3:19:63:f4:13:15:0d:
c1:06:40:0b:c4:9a:65:b0:e7:26:b0:20:d0:13:29:
45:41:f0:7e:15:ee:44:1a:ca:c9:4b:cd:84:a6:9d:
4e:55:4d:bc:90:e0:15:76:9e:ab:c4:72:02:93:30:
9c:9a:1f:be:58:1d:77:ba:09:ed:11:e5:0d:8d:dc:
08:29:dd:51:bb:90:1e:08:8d:ad:7d:8e:05:4d:fe:
8b:35:38:44:07:f0:2e:b7:f1:3e:f0:c3:eb:77:d8:
cd:82:5e:7e:d8:cf:a5:f0:f8:df:0f:87:f0:3d:0a:
06:00:db:d1:52:a9:ff:63:23:c6:ef:5c:49:65:25:
3f:2b:b5:20:e5:0e:e0:f0:a7:28:78:e8:36:0c:8a:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3A:54:70:74:AD:5A:75:CD:3D:84:2D:18:90:A1:D0:30:4D:45:06
X509v3 Authority Key Identifier:
keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:b9:4a:c3:c3:f5:7b:8b:4e:1a:09:28:7a:3a:c5:90:d9:f0:
ee:f8:ba:62:5d:18:e4:5c:f9:e8:f0:00:0f:f7:44:b1:c3:ee:
dd:30:a6:2b:4b:94:09:c5:ce:84:ba:22:40:cd:36:1b:66:f0:
37:8c:e2:45:8e:72:34:0b:b2:8c:60:93:45:17:6d:38:b3:34:
bd:e8:0e:ba:22:aa:3f:ba:67:f2:04:ca:5f:ba:1b:ed:44:a1:
e7:ec:23:8e:33:de:4c:ef:f2:c0:2b:85:0f:a9:81:3c:f0:be:
6e:36:4d:e7:b3:84:1b:46:5a:82:5d:50:73:2c:bb:05:54:72:
fb:e4:87:72:7e:f2:70:6a:8a:fb:d1:44:c4:13:6e:89:49:a1:
15:17:ae:22:df:97:a0:4d:85:54:3f:45:db:7f:dc:a0:9b:f8:
07:af:db:9d:2b:6c:85:72:3a:dc:f6:4e:b7:68:da:59:0e:60:
9d:0e:fd:3c:bc:8e:8e:e8:e3:d9:e8:34:88:75:c4:70:06:51:
a6:97:ae:7f:c6:d6:db:0a:c2:04:c5:1c:6a:56:9a:fd:92:49:
38:8d:a8:34:0e:ae:34:ed:35:f2:99:3c:54:26:f0:c6:95:db:
88:e7:48:72:64:6d:6e:2a:09:40:1b:89:ad:2c:16:ce:e4:c2:
11:59:77:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:03:30 2026 by rpki-client