This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json)
Hash identifier: V3pElLiNrSnlhkmAcytrQ9t3Ssud1vvUhcUo1s5UvJs=
Subject key identifier: AF:DC:2B:06:5F:AF:65:84:48:FB:BD:E8:FA:7A:CF:C9:7C:CD:19:B6
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
Manifest number: AB
Signing time: Sun 25 Jan 2026 05:22:58 +0000
Manifest this update: Sun 25 Jan 2026 05:22:58 +0000
Manifest next update: Sun 01 Feb 2026 05:22:58 +0000
Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: sK4NhnvGMrRvrfZUCZg7/p9TqW/TeXn7UcsO6Bk+xUs=)
2: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: Q7i85RevnZqkOBdKbp0/e+tjgTQzpkBCM+sWN4N+OW0=)
3: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: mh+UCJNFemXmx1rXPNcCjaRpL6VWoi5lGRmYTA/fEi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Validity
Not Before: Jan 25 05:22:58 2026 GMT
Not After : Feb 1 05:22:58 2026 GMT
Subject: CN=6975a8b2-a422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:4f:ba:aa:7a:38:c6:e2:fd:58:87:f9:45:
66:62:0b:08:b8:cd:42:38:59:87:a5:18:5b:95:a4:
b9:aa:3a:34:8d:c7:d3:4b:d7:4f:bc:f5:78:7f:ad:
ed:1d:3b:ff:00:89:62:16:a1:63:be:e5:31:4a:b3:
b5:26:e9:83:c6:ee:c2:45:46:a7:36:34:5a:37:46:
f1:d6:88:f6:89:fd:97:53:49:1b:40:05:0b:f9:7b:
83:4c:07:8e:e0:42:03:33:f4:48:d9:55:c1:da:fb:
0a:45:93:2c:eb:2e:b5:2f:fe:f7:84:88:2f:c3:c6:
5e:ab:eb:ce:d9:e3:02:76:3a:ee:ca:19:05:9a:b1:
47:67:5e:ab:19:e3:23:e5:54:b3:05:6e:ec:40:c3:
07:ef:88:33:33:60:62:c8:d3:28:8b:27:6f:4d:70:
88:3d:23:22:08:40:cd:7b:4d:fd:9e:e7:0e:5f:3d:
e8:90:77:70:be:40:fa:63:fe:e0:61:c7:5d:c3:1b:
71:69:f6:0f:f1:ec:f5:b1:99:f9:03:b9:57:a6:0f:
4e:07:c0:1b:07:bf:cb:9a:b3:62:0b:8b:15:3f:80:
6c:de:f4:dd:b4:b8:3e:41:60:ef:11:e3:cd:41:65:
57:33:9d:90:8e:72:e3:20:7a:74:84:c2:88:ac:8c:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DC:2B:06:5F:AF:65:84:48:FB:BD:E8:FA:7A:CF:C9:7C:CD:19:B6
X509v3 Authority Key Identifier:
keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:62:0f:04:26:97:a8:b0:84:56:2f:17:66:3f:b3:80:14:21:
90:d6:68:6e:8b:6d:b1:46:c7:e4:5f:2f:fc:95:83:05:10:9c:
5a:6a:3f:24:4a:83:1e:33:ae:3c:f2:10:b5:3c:12:2a:d3:47:
04:6f:91:16:1c:a4:80:3c:c8:0e:ba:13:6f:40:72:8d:42:16:
41:b8:47:e4:2c:8a:2c:f5:e3:b1:9e:43:63:8d:1c:69:90:9f:
96:86:38:43:27:9b:ff:76:97:52:71:a7:8c:41:ee:77:5f:2c:
55:76:68:1c:e1:52:86:f2:38:92:2b:e8:47:4a:05:d8:51:a8:
2d:b9:a6:62:ee:f4:81:aa:be:f3:b9:ab:61:a9:33:04:64:4e:
0e:26:1c:7b:de:8c:65:bc:74:e1:ed:04:12:a0:5e:93:d8:3a:
08:46:8c:85:93:60:56:3a:32:5a:d7:16:6a:67:51:3c:bb:7d:
25:a2:96:8f:bb:29:2d:bb:80:8f:70:19:db:fb:c7:ac:39:05:
57:29:32:83:a8:39:0e:49:8e:7a:fc:26:f3:4a:6a:e7:25:37:
0e:17:35:66:26:d4:ee:c3:5e:0b:99:7f:e8:98:8a:f6:5f:49:
2f:e8:0d:75:8b:2a:66:20:2a:da:7d:28:79:66:45:5d:d7:cd:
ad:ed:28:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:38 2026 by rpki-client