This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json)
Hash identifier: EL1uD/1v5D0OLJ15PzBhDr/cdGYyDQXL1E6MMh3TDiQ=
Subject key identifier: F1:8F:84:A0:77:37:0D:3E:C8:00:F4:5F:CF:48:5A:58:35:E9:79:96
Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB
Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
Certificate serial: 08CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
Manifest number: 1B01
Signing time: Sat 24 Jan 2026 16:50:30 +0000
Manifest this update: Sat 24 Jan 2026 16:50:29 +0000
Manifest next update: Sat 31 Jan 2026 16:50:29 +0000
Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: V91ytvYUwzv7v2r3ZnR/gn3cnS1tqutkg/ekQJRowTM=)
2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: QQ2kSpkziq7c/OfdUjW7k6le4ABn54sNBVAUYS+VxSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl
rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251 (0x8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
Validity
Not Before: Jan 24 16:50:29 2026 GMT
Not After : Jan 31 16:50:29 2026 GMT
Subject: CN=6974f856-16aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:7d:9b:9a:a0:07:1a:f8:fd:be:62:22:ea:
80:1d:a0:6e:1d:b4:0d:29:48:b9:0f:a4:d1:38:25:
bd:b2:3e:3c:15:44:d4:1f:87:3f:bf:dc:1a:14:7d:
ac:73:30:0a:ba:10:ac:29:17:74:fa:6a:df:55:6d:
02:f9:d3:47:90:22:cb:1e:30:f0:36:ba:50:2b:1b:
09:9a:82:ca:c1:39:9d:24:85:d6:12:51:ed:86:84:
89:1a:34:17:3a:3b:3f:55:40:0d:9d:ab:6b:d3:01:
ce:d8:0c:37:99:1c:0e:62:0c:50:62:55:3f:f7:71:
09:78:2e:f5:8b:8d:aa:5d:11:6f:fd:32:f7:7a:bc:
8f:e8:2d:e9:72:4e:ba:57:83:c3:4b:1d:8d:27:f8:
4c:5f:f9:e6:8a:8d:a7:68:0b:01:63:ea:1e:f3:9f:
fa:c9:39:3a:ce:05:d8:7a:3d:e6:aa:3a:56:f1:f9:
6f:27:c0:9b:8c:81:cc:af:2a:fa:4c:be:dc:21:9f:
ad:1a:43:cc:e9:80:d3:01:57:2e:20:2b:3b:2b:5e:
ba:a0:94:b4:e0:5f:27:97:dd:c8:7d:34:28:c5:d3:
c2:03:a0:d3:7c:b5:29:d5:04:af:3e:db:7e:fd:aa:
25:6e:3e:28:e0:33:bb:f4:eb:f9:37:09:bf:b6:be:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8F:84:A0:77:37:0D:3E:C8:00:F4:5F:CF:48:5A:58:35:E9:79:96
X509v3 Authority Key Identifier:
keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:2d:64:f0:a2:2a:73:56:aa:ca:83:be:ca:ea:9b:10:b8:5c:
9c:b2:e2:e5:6c:48:89:13:45:a3:06:57:1e:53:43:b1:33:7c:
cb:6b:f1:c2:b8:10:18:94:d8:8c:86:62:7c:91:44:a9:7d:2a:
06:81:30:9a:b4:75:20:bf:11:e9:8b:0b:e8:77:b9:1a:ea:ea:
f5:4f:5c:a1:98:72:7e:81:c2:82:d0:ab:a2:8e:3e:f5:f3:09:
2c:7d:c6:af:e1:75:e8:ac:97:f0:d0:94:74:02:9e:33:e3:f1:
f2:00:5d:0d:fa:b6:f3:c0:50:20:a4:6f:23:66:2b:24:b8:33:
35:bb:07:ad:21:94:9b:06:ea:1a:e1:7e:91:48:5a:ff:9a:b8:
8e:6d:f0:15:c2:d2:9f:f2:29:99:74:ae:0f:4c:55:37:5f:7c:
78:89:6b:05:12:67:06:55:c0:33:88:ca:28:82:ed:5d:f8:7e:
75:8c:ce:19:27:6b:00:5c:32:d3:19:f2:90:32:a4:f8:7f:66:
47:bd:45:db:80:a4:fe:92:30:26:62:e4:32:23:a9:52:5b:e1:
f4:ca:d0:6e:8e:9d:35:c4:80:2e:f9:9a:0a:d5:e0:16:7d:d6:
c3:8c:62:ef:ff:b8:0c:2c:b0:87:6e:20:34:ae:5a:f2:4b:7d:
9d:55:16:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:54:48 2026 by rpki-client