This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json)
Hash identifier: +8zup3EqCPKI8Ii4u9ocDqd0LVS/37DAR6K72R2kNag=
Subject key identifier: 2F:49:C1:D2:49:FF:86:93:DB:A1:BD:67:36:93:5D:18:A5:77:29:35
Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Certificate serial: 0474
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
Manifest number: 0467
Signing time: Sat 24 Jan 2026 23:20:53 +0000
Manifest this update: Sat 24 Jan 2026 23:20:53 +0000
Manifest next update: Sat 31 Jan 2026 23:20:53 +0000
Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: Q7TiPzhNRUzDwheeEUJzrzIX0RYbDFMkkZlOtNWPPYs=)
2: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: NYRjezFURAIZr5dfzYcgObUcS0k2GZmBPMzd9N07gUQ=)
3: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: OnZeTeaYB5z7AJuz8oi6jGvWEckKykDi+qBUmv+U0QM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl
rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1140 (0x474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Validity
Not Before: Jan 24 23:20:53 2026 GMT
Not After : Jan 31 23:20:53 2026 GMT
Subject: CN=697553d5-110c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:86:d9:f0:a6:20:06:0d:67:94:64:27:17:
74:51:91:28:e6:3a:69:54:94:99:0a:00:d2:12:f4:
91:a7:ca:04:da:72:a2:ff:c0:cf:32:49:02:3f:1f:
57:1e:6e:58:e4:c7:69:c5:0d:93:fb:3f:96:33:09:
c4:ca:2b:96:82:48:7a:1b:8d:e8:3a:82:15:78:6b:
0e:54:ad:98:57:2b:38:aa:cb:6b:d9:4c:64:af:6f:
72:28:71:f4:ac:5b:2a:db:1b:64:60:a6:b3:de:cd:
34:52:fc:f4:c2:39:88:c2:cc:27:06:e7:d2:47:c2:
94:db:a1:2a:98:1f:26:27:76:4d:bd:1a:a1:8a:d6:
fc:f0:ef:27:5a:13:87:6d:37:70:f9:89:b4:b7:9c:
d7:27:b8:55:9a:70:b2:66:11:52:c0:0a:25:84:bf:
ff:32:f7:04:c3:02:2d:68:ec:fc:37:61:c0:69:36:
26:d0:29:0e:37:fc:53:5c:4f:76:35:cb:44:4b:19:
97:5c:0b:4f:21:47:2d:78:4a:60:bf:3f:3d:0b:a8:
0d:c1:32:56:ef:a8:e7:39:c5:6b:20:36:39:cb:52:
06:ff:85:3b:7d:bc:05:98:48:0a:de:ea:28:6c:2b:
54:f3:b2:94:79:27:8d:20:8c:9b:5d:65:cb:dd:11:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:49:C1:D2:49:FF:86:93:DB:A1:BD:67:36:93:5D:18:A5:77:29:35
X509v3 Authority Key Identifier:
keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:8e:57:64:eb:0f:10:4d:21:ed:2e:17:c3:eb:87:bc:0d:bc:
6d:17:3a:a7:88:fc:f1:b4:33:85:33:13:da:1b:d7:cc:52:8d:
c3:ef:75:77:81:54:51:8b:00:66:92:9e:87:4f:6a:d0:2f:bd:
fc:5b:4a:6e:22:4b:a8:e5:16:50:2c:23:f5:4f:40:b6:ec:7d:
4a:04:75:6e:0e:83:4d:7d:c0:e6:3b:83:2c:57:5c:c2:98:8b:
59:9d:dc:58:cb:d6:82:1e:7e:a3:43:e3:ca:63:f5:01:59:29:
2e:b4:39:8c:b2:5c:11:44:65:29:c5:cf:fb:8a:3b:c3:f4:20:
52:cc:15:9f:7f:2d:fa:69:46:1e:63:7b:f3:c6:3f:cb:90:e5:
8e:46:00:10:ca:14:05:5b:d7:c3:33:4c:25:7d:1e:48:41:1e:
d1:aa:db:0d:69:c4:72:92:23:55:12:18:18:50:74:f2:32:df:
29:2b:d8:31:31:20:5b:98:01:70:4c:b3:1f:22:08:e8:e3:d6:
f6:4e:34:c7:af:ee:22:dc:e7:11:e4:6c:47:b6:ee:ed:0a:1e:
ca:a9:ed:61:80:d2:16:b3:37:56:71:b3:40:bb:53:ca:12:44:
ce:94:a3:e5:d8:62:1a:77:6f:38:92:12:a0:b2:2e:ef:1a:f7:
b3:b0:99:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:09:02 2026 by rpki-client