This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
File: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft (raw, json)
Hash identifier: QC7CVSE1TunACcveIcOtJbojbsvg3+WvlC4e/6NQoxQ=
Subject key identifier: A9:6C:D1:35:E8:CE:CA:45:5C:74:4C:96:F6:F8:CE:9A:68:9E:9B:6A
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial: 1030
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
Manifest number: 0FFA
Signing time: Sat 24 Jan 2026 17:09:41 +0000
Manifest this update: Sat 24 Jan 2026 17:09:41 +0000
Manifest next update: Sat 31 Jan 2026 17:09:41 +0000
Files and hashes: 1: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl (hash: OknF/ulqCz2XMonhbsfBY/kFcQuwG0LzhKR7agRyRQQ=)
2: B2B2930C21C911EB991D562EC4F9AE02.roa (hash: XWm8GaGIPPLP9AKtaT6KRszth65jZeSEF8vfSa7oAA0=)
3: F98DEF9A231F11EB99F53580C4F9AE02.roa (hash: t18G/jUeuq8lptvTyxkqs2wnq4jb4g41EOSptQznrUs=)
4: E049FDF87A4511EBBB2D0A52C4F9AE02.roa (hash: Jk6V50ct0NhfCUNeq2rSB6SPY6PZ86y8Zd5FDESJ7kI=)
5: 8663E8B6658A11E9930DC678C4F9AE02.roa (hash: PNhMIJG2WqhTSsHQs6Q3B5W+HPqAu/8Af4Ot4nkDDLQ=)
6: B490CD0621C911EB991D562EC4F9AE02.roa (hash: WNk4We2Ht/Om3rf3IbH7SVRsK901hQ7kL7sR1ONDJ8A=)
7: 4BF23558026D11EBB136622CC4F9AE02.roa (hash: QtpDimKOHqXsxnqa4q87zCBuPpMrfxyNN2d7cp4WlrA=)
8: B3876B1821C911EB991D562EC4F9AE02.roa (hash: 6uU1bRzcclFeMC/RnwQZxh3s9UKuJJHVwL7cdGjMFOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4144 (0x1030)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Validity
Not Before: Jan 24 17:09:41 2026 GMT
Not After : Jan 31 17:09:41 2026 GMT
Subject: CN=6974fcd5-9218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:f9:df:85:c4:cc:09:6f:f7:db:af:8f:5d:
11:64:45:77:f8:40:21:21:65:ed:c3:b3:a2:ee:8a:
d8:86:f0:b0:5e:28:19:7f:60:2e:f4:2f:46:fc:b0:
e9:d4:12:1b:d5:c6:4b:b0:c8:5f:5c:ae:bd:a8:af:
46:13:26:f6:c9:c6:6f:15:15:a9:da:25:9a:c9:72:
56:15:23:ce:89:4d:37:eb:ab:28:de:87:82:24:1c:
d2:eb:73:35:c9:35:4b:da:16:26:9f:eb:f2:74:f3:
c5:50:ae:47:40:eb:02:dd:a7:d7:a5:54:5b:13:2d:
3a:f0:df:6e:e3:9d:38:b2:01:8f:c4:eb:47:fa:a0:
ea:a7:6f:a2:4a:49:cd:c9:40:93:89:11:31:d7:26:
cb:12:99:7a:4d:9f:ee:19:4c:89:f3:bd:04:0b:83:
ce:42:56:38:c6:22:45:a5:71:d5:7d:30:3b:09:7d:
fa:db:f2:45:98:79:39:e1:31:b9:ee:a8:c3:da:98:
a0:17:b6:c8:9d:10:4e:0f:bb:29:6b:45:e1:67:1c:
06:09:03:4b:9d:54:14:00:7d:84:b4:53:7a:f7:13:
ae:ca:fc:f6:34:48:66:ec:b7:7d:bd:04:e5:4c:95:
82:45:0a:a6:e9:08:19:42:89:27:6d:f8:49:f8:d9:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6C:D1:35:E8:CE:CA:45:5C:74:4C:96:F6:F8:CE:9A:68:9E:9B:6A
X509v3 Authority Key Identifier:
keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1b:1b:dc:1b:90:25:a0:c0:3e:41:d4:3f:f6:10:5f:ac:e8:
7e:f4:58:8c:00:16:42:d2:79:f9:6a:e0:1d:31:74:5b:44:f0:
a5:ed:fe:e8:65:39:0a:11:8f:5e:be:40:b2:03:94:01:89:ae:
ba:9c:7b:18:13:1d:0d:10:88:91:37:c5:b3:0f:ed:66:08:13:
e8:82:aa:61:55:fe:d1:3b:9f:f8:ff:f1:15:1a:05:e1:c3:b1:
a4:92:1c:e3:e3:96:e7:77:78:4a:97:13:c5:1f:84:ba:5c:45:
e0:fe:b8:cb:f3:16:5b:87:30:e1:66:63:20:0e:e4:3b:9c:97:
67:f4:5a:47:67:c8:a3:20:f2:6d:54:ca:c7:02:ee:76:0a:66:
80:78:98:fc:eb:a8:5e:5a:e1:a4:97:1e:03:c7:16:d1:f3:3b:
5b:5e:a1:d8:29:17:a5:5f:b0:f9:3d:5a:2f:52:36:70:00:ab:
2f:86:e5:26:19:d6:7c:0f:f6:78:aa:60:f3:1a:68:05:84:f1:
a9:00:81:54:9c:72:7f:44:cc:f9:d7:9c:0b:98:36:de:83:94:
95:29:2f:66:2a:7a:06:d9:8a:ad:9a:05:f0:c6:cf:de:bf:d2:
00:36:8e:b0:b0:be:42:79:9f:ce:67:34:ee:28:35:91:25:10:
6f:d8:00:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:47:21 2026 by rpki-client