This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
File: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft (raw, json)
Hash identifier: 7c1mL7B22s0Xisjh71lqGioCXnDZivSAU0ESjyIKzWQ=
Subject key identifier: 79:81:1D:D1:46:75:9D:86:03:75:60:11:56:61:86:BE:F4:5D:B0:BF
Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Certificate serial: 022A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
Manifest number: 0221
Signing time: Fri 23 Jan 2026 01:20:59 +0000
Manifest this update: Fri 23 Jan 2026 01:20:58 +0000
Manifest next update: Fri 30 Jan 2026 01:20:58 +0000
Files and hashes: 1: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl (hash: mFLSY59sXJ6mkzfoGY3Ze0yNXU4XmBKYcDtu9zY9d/E=)
2: 545EDE9C140911EF8520A25BC4F9AE02.roa (hash: Tv8VFI61ht6g4zpgpyoiarorIdL71VBSjtb/bqzuKfo=)
3: A24D0F54140C11EFBC640B71C4F9AE02.roa (hash: wRJLakVb4OT38G6t+rRsnOSv4LpQV0AO0Scq5OD6JMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 01:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Validity
Not Before: Jan 23 01:20:58 2026 GMT
Not After : Jan 30 01:20:58 2026 GMT
Subject: CN=6972ccfb-5e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:af:ad:e7:07:b2:ae:d1:1c:72:a1:df:5f:89:
83:40:0a:dc:0c:f8:f6:3e:b8:1c:c4:a7:cc:5e:11:
72:3e:d1:23:d4:c0:81:f8:98:eb:a7:46:52:35:cf:
d4:ae:f2:0a:16:56:8e:f8:de:29:80:9d:88:e3:61:
67:b2:fd:32:d3:15:15:01:f9:14:8f:3e:da:37:98:
80:40:03:ec:8b:38:31:d1:1f:dd:d0:6e:e3:0d:4b:
cb:ac:6c:07:d9:9b:18:fa:7e:a9:cd:12:c1:2d:86:
a3:13:03:37:3e:55:5b:4e:49:45:2d:ce:0d:0b:f1:
99:c0:8d:3a:53:8e:d6:ad:85:9c:b9:8d:c0:20:5d:
e1:7f:1d:59:1b:5f:a5:12:4f:9a:ec:17:2e:3f:8b:
78:aa:1e:1a:95:78:13:3c:b8:c4:cf:12:38:6d:8c:
ed:56:92:75:19:70:2b:42:c1:cd:48:77:64:9e:98:
31:c6:78:79:32:da:ca:85:27:31:92:e8:89:d1:7e:
10:cf:0d:e4:9f:16:a4:7d:e3:87:04:f7:9f:03:7e:
89:4a:b3:91:56:e4:77:6c:d7:f4:7c:3f:d3:1f:8a:
61:64:b3:86:ab:ec:da:f3:20:ac:f9:c6:c7:a5:9f:
7e:34:73:9a:d3:39:5d:78:09:00:be:c1:90:e2:d2:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:81:1D:D1:46:75:9D:86:03:75:60:11:56:61:86:BE:F4:5D:B0:BF
X509v3 Authority Key Identifier:
keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d1:6b:b3:c5:12:62:df:47:34:a0:88:b6:07:f1:1a:07:9e:
1c:5d:e3:5c:23:5c:d0:bc:83:58:a9:81:a9:7f:21:6c:9f:c4:
2f:45:b5:f2:26:23:e0:cb:37:67:3e:75:a9:88:7b:0d:59:61:
08:60:1f:dd:a8:20:fe:18:9d:6f:7c:cd:14:f1:19:5d:5f:db:
90:e9:6a:10:ff:e2:1a:34:2b:56:b9:1c:44:8d:3a:cf:ac:df:
63:6e:ee:b3:ee:1c:39:4b:58:84:4e:b7:b7:5d:b0:b2:eb:da:
9c:41:0f:f4:d8:14:5b:4b:0d:98:e8:33:8c:47:3f:c8:1d:40:
9c:b9:b7:83:04:98:60:b9:69:70:2f:17:1c:1b:ad:46:be:42:
42:71:75:c3:cf:e6:81:15:b4:af:28:1a:70:52:cf:2f:3c:c5:
c1:c5:38:f4:d3:6b:d3:00:5d:42:dd:a8:14:25:68:72:48:5d:
d8:1c:f6:d4:42:e1:e7:c9:7b:79:e0:e5:bb:ca:e1:d1:aa:25:
88:54:63:85:bc:6c:9a:ca:9f:28:23:d2:b7:55:b1:7b:67:93:
5e:5e:b7:e9:b1:98:79:35:22:4e:f0:a4:19:5f:71:92:f1:cf:
47:58:7e:39:bc:53:27:cb:97:f5:d7:e0:7a:63:68:8d:c6:f2:
02:03:c0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:29 2026 by rpki-client