This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
File: q4PFkhuEDFQXM78Ucyl13UlzP_w.mft (raw, json)
Hash identifier: kGvVvL/TYvZwVPOIo0rTuPHgsRNviIV0NbYXLIgKAKo=
Subject key identifier: FE:21:A7:BC:56:8C:B3:BB:08:18:83:01:06:9B:65:06:16:C6:7F:F7
Authority key identifier: AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC
Certificate issuer: /CN=A91F523F/serialNumber=AB83C5921B840C541733BF14732975DD49733FFC
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
Manifest number: D6
Signing time: Fri 23 Jan 2026 04:48:45 +0000
Manifest this update: Fri 23 Jan 2026 04:48:45 +0000
Manifest next update: Fri 30 Jan 2026 04:48:45 +0000
Files and hashes: 1: q4PFkhuEDFQXM78Ucyl13UlzP_w.crl (hash: bYG9cxKX1TRwzmwmGQ1/vYdQmsgVmQEGJunjDMgPNTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl
rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F523F, serialNumber=AB83C5921B840C541733BF14732975DD49733FFC
Validity
Not Before: Jan 23 04:48:45 2026 GMT
Not After : Jan 30 04:48:45 2026 GMT
Subject: CN=6972fdad-983c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:a4:fe:be:db:52:b3:d1:99:be:d6:6a:31:
ad:dc:71:7e:d1:34:b2:80:9e:9a:4c:d5:46:20:54:
52:9f:10:75:1b:cd:04:5b:01:3c:10:58:ad:f7:3b:
50:b0:f9:52:13:7a:35:da:b3:21:86:fc:bb:23:1e:
61:3b:b3:7b:98:94:9e:f5:ae:6c:17:e9:ce:36:48:
c8:7d:ad:e7:f3:ad:02:05:a6:9c:4e:30:7a:8a:c4:
ce:99:0b:95:e0:4c:45:d0:10:d4:2b:66:fb:37:5a:
d5:85:71:a9:aa:dd:be:b9:ac:6c:01:2f:6f:e9:86:
33:06:11:9c:e3:a3:06:57:ac:6e:50:9e:20:e6:a9:
50:82:2b:c7:c9:3b:fe:e1:a8:5b:77:9e:86:cf:10:
50:36:85:9b:8f:8c:0f:f2:c6:ca:1e:6d:f6:0f:55:
6e:ca:7d:18:91:2d:d5:53:93:9b:71:d0:5c:41:05:
c2:82:75:09:22:16:2a:a8:cb:21:36:60:c7:56:9a:
bf:8b:ca:1f:e9:c1:2d:76:40:71:8f:a1:7b:74:56:
6d:1c:1e:74:30:03:04:10:ac:8b:f3:7b:7a:46:11:
09:3c:47:35:49:21:64:09:44:cc:91:2b:fd:c4:3c:
74:74:42:5b:2e:93:ae:f9:67:02:d3:e1:14:63:e2:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:21:A7:BC:56:8C:B3:BB:08:18:83:01:06:9B:65:06:16:C6:7F:F7
X509v3 Authority Key Identifier:
keyid:AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ec:8a:36:d2:9f:dc:ea:30:29:aa:9b:1e:03:f2:2a:8b:6c:
a4:dc:43:6d:61:22:1f:59:9d:5e:38:cd:72:1e:97:2e:8f:ff:
ae:e7:7e:e6:52:a9:fa:b1:a7:ed:e4:3a:be:16:24:ae:13:d0:
83:2f:2b:21:cc:40:0b:15:65:ca:fc:9b:64:f3:80:57:f5:b5:
88:7b:56:f2:95:e5:44:05:68:5b:f8:51:79:b4:c7:6e:e8:31:
6e:42:6d:9a:6e:7c:20:1b:d1:9b:43:40:b5:d9:60:b2:db:84:
aa:ba:0e:6a:85:c0:4c:64:9a:f4:43:e6:22:85:fc:cf:f9:4c:
b2:fc:63:37:0f:88:02:4e:76:8a:9f:fe:0d:2c:9e:7a:6a:04:
30:12:08:53:e3:e8:4d:48:fa:6a:e3:d4:cd:e2:71:40:40:6e:
ff:0c:e6:4a:ec:f6:c6:e7:11:7e:89:1a:29:b2:1a:bd:f8:0e:
3b:89:b5:16:2d:8e:e6:53:63:6d:60:aa:d8:58:fb:61:90:5b:
01:9b:06:5f:a3:51:30:b7:84:8e:f3:ad:17:9b:e5:57:b0:8c:
89:a9:9f:42:bd:25:4d:a2:b6:5c:09:ba:ce:83:ea:e8:5d:d4:
44:a3:6a:28:03:5c:e3:95:b2:c5:64:92:6b:67:ec:4d:17:dd:
62:8e:aa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:05 2026 by rpki-client