This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json)
Hash identifier: JsvCsiQBxTr4cwsmkiyN+Zb3lVG37RRcFhg3nPpwuwk=
Subject key identifier: 67:0C:CE:75:B6:67:5D:9A:DD:80:F4:25:02:56:39:A0:D7:9E:3D:46
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial: 0343
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
Manifest number: 0333
Signing time: Sun 25 Jan 2026 00:14:36 +0000
Manifest this update: Sun 25 Jan 2026 00:14:36 +0000
Manifest next update: Sun 01 Feb 2026 00:14:36 +0000
Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: nI0Ve/s1kSRnp+hAq7I3B9SY04OoNLbjIR0+VokOCaA=)
2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: M5PKDMLMdavH6GN3M2mqYtrVkK8hWINqy8WhALabjko=)
3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: 0v3ssTpGYmDhNqBqiZ+NsO29KdOi8s2cwnExbbi6d8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:14:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 835 (0x343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Validity
Not Before: Jan 25 00:14:36 2026 GMT
Not After : Feb 1 00:14:36 2026 GMT
Subject: CN=6975606c-d28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:49:cd:f9:bd:82:38:c9:97:a2:08:cd:f3:
2a:71:bc:fb:8e:a3:40:d8:d3:63:04:28:97:02:87:
0c:cd:03:4d:c5:da:e5:83:65:18:33:39:e8:04:ad:
78:ad:ef:85:1e:30:94:df:38:9d:29:c9:8e:7b:c0:
39:8f:b3:77:b7:c3:35:af:28:f5:1b:52:16:36:80:
36:0b:f5:4b:3c:5f:f5:c4:1a:d2:20:e9:80:d6:27:
15:0c:98:c4:35:c6:48:cf:56:cd:a5:17:48:be:0f:
5e:03:f1:69:9c:1f:90:01:15:ad:b7:53:6c:ec:34:
e8:fa:fb:61:43:47:43:37:fa:f8:82:00:18:3f:59:
b0:0e:fd:08:bd:79:09:b4:7e:02:4b:e6:2b:38:03:
8c:4d:71:be:73:4c:7d:04:0c:38:6b:3f:af:e6:9a:
a6:55:0e:0f:3e:ac:1c:7d:46:4e:5d:15:78:f6:45:
f7:90:42:75:a7:30:c7:ab:ce:d3:ad:6e:cd:df:26:
8f:55:cb:5a:9a:7f:d0:3e:2a:65:90:e1:6a:78:79:
d2:6c:6e:b7:e8:4b:6a:5a:03:85:d6:e0:b5:d5:83:
4c:16:a0:17:52:ef:c5:67:75:ed:6d:a8:a0:b9:66:
49:ab:d6:04:71:9f:bb:b8:29:83:47:33:3b:78:b0:
95:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0C:CE:75:B6:67:5D:9A:DD:80:F4:25:02:56:39:A0:D7:9E:3D:46
X509v3 Authority Key Identifier:
keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:79:67:76:90:f8:85:85:93:e0:2b:d5:5c:ef:74:2a:17:89:
1d:7d:8a:9c:11:ff:f7:3e:15:95:97:63:32:93:7e:d6:aa:9e:
22:96:91:7e:91:97:b5:75:5d:6a:a7:01:21:06:cb:eb:6a:8e:
01:b9:92:df:8e:a5:6b:81:51:46:ee:3c:89:31:2c:7e:5b:cb:
f5:7e:21:68:93:30:23:c4:3f:ba:65:32:32:ed:67:b8:91:7e:
1d:85:cb:2c:e3:f4:50:f3:14:b3:7a:e0:35:c2:6f:e9:89:e3:
72:f7:ae:a2:e3:ce:be:d0:af:22:20:8c:88:5a:47:af:a8:81:
69:f6:95:3c:ab:a6:f0:d6:6e:6f:d0:17:16:14:05:38:e8:5d:
e5:41:e4:e5:0f:2e:bd:53:9a:a9:d8:65:12:f8:10:d7:bc:2e:
86:ca:c7:26:3e:98:df:db:13:96:e7:23:aa:65:c6:66:d3:8c:
05:0a:51:db:e2:6f:a8:82:b8:85:86:92:ea:66:26:18:d9:f8:
fd:70:f2:91:f2:b0:e1:23:54:dd:f3:d4:20:79:85:9c:7a:5c:
42:d1:01:bc:7c:32:cf:14:0d:67:ef:0c:12:b2:b3:9d:ac:01:
6d:94:54:29:f2:10:b1:93:f3:9d:35:e6:be:61:f7:31:49:c3:
91:fa:07:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:04:22 2026 by rpki-client