This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
File: vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json)
Hash identifier: baGdp171XR4KndWyf019lP9q09MbjcuvMdyRwYKKY28=
Subject key identifier: 73:D6:DF:7E:1A:D6:D3:5F:A3:4F:7E:3E:31:A4:75:87:FE:83:03:1F
Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
Certificate issuer: /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Certificate serial: 02BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
Manifest number: 02B8
Signing time: Sun 25 Jan 2026 00:36:57 +0000
Manifest this update: Sun 25 Jan 2026 00:36:57 +0000
Manifest next update: Sun 01 Feb 2026 00:36:57 +0000
Files and hashes: 1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: AXPVdbWTgU6W3ET3v1jOVDG9HvIJayDuFRyffpVACP8=)
2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: KwT8765tV1xGz2sf7ujcAdTQLGt8VA1bqI5xYKuBmVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl
rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703 (0x2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB89, serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Validity
Not Before: Jan 25 00:36:57 2026 GMT
Not After : Feb 1 00:36:57 2026 GMT
Subject: CN=697565a9-8900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:9a:c0:3d:ed:2c:4a:13:25:69:f2:d1:68:
08:97:cd:87:ff:f0:aa:64:52:a4:7c:ef:84:48:b8:
0e:5c:28:32:81:c0:19:2d:9d:a0:a1:70:3d:cb:a8:
e3:54:bb:d2:84:af:2b:da:34:ce:34:a7:ec:25:a9:
90:5d:46:86:b4:4f:44:bc:9c:c8:3a:59:82:a5:61:
d0:96:d4:f2:48:61:e7:53:e7:7e:d3:47:40:a7:6d:
ff:ed:1c:6a:ef:fb:c6:d2:97:65:b8:35:fb:b1:3e:
35:fc:06:a1:22:ac:eb:a4:14:89:ae:af:4e:ad:6d:
4f:bc:ea:38:b9:d0:ca:5b:05:ec:2d:92:c4:90:fa:
9e:ce:12:85:1f:66:b4:cf:a4:88:b6:33:72:1b:68:
ff:f7:1c:15:bb:a7:f6:53:dc:db:1a:e9:d1:9a:88:
3e:05:53:da:9d:42:22:c9:c6:23:8f:e8:14:6a:5c:
5e:7b:91:10:59:1a:3a:b9:82:a4:f1:38:0f:89:84:
16:99:9b:8c:02:47:1c:96:52:a1:68:97:3b:4c:2d:
22:ad:2d:eb:97:eb:75:c5:a4:3f:ac:a4:7b:51:e1:
e9:7a:cf:82:e4:8b:51:57:91:23:65:6a:f4:74:5a:
a7:ce:d1:2e:1b:76:ff:da:9c:7c:1d:91:7f:92:e9:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D6:DF:7E:1A:D6:D3:5F:A3:4F:7E:3E:31:A4:75:87:FE:83:03:1F
X509v3 Authority Key Identifier:
keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:13:0c:46:3b:5c:fd:3e:e4:56:c5:0a:fd:43:b1:94:9d:4e:
82:35:c0:db:3b:25:2c:43:e8:9b:fc:af:91:04:35:41:02:84:
31:37:5b:b2:9c:70:60:99:78:74:f5:ed:fb:5b:0c:36:57:4d:
31:3f:70:8a:c1:31:f6:ce:54:7c:9c:ad:f9:1b:c8:8d:15:c7:
22:76:16:4e:38:ec:b2:f3:0a:14:a5:1c:1e:61:31:d1:d0:76:
13:df:ba:f1:80:de:d2:c5:9a:7c:b2:77:7c:de:cb:60:32:0e:
14:8e:1f:e5:86:fa:c0:95:37:57:6c:30:f3:fd:70:35:88:22:
7b:2e:7e:86:c3:b6:75:b6:b3:5b:84:33:bd:8d:31:1b:50:3f:
4b:d5:93:61:ba:5f:74:73:38:8b:33:06:45:f5:d8:73:6b:8c:
da:f8:fe:9f:24:6f:27:f9:d5:a8:24:1f:a4:b9:24:b6:11:e8:
c5:aa:85:f8:61:26:08:83:46:30:56:38:4f:45:3d:2a:e3:dc:
59:cc:ad:2d:ad:06:64:10:b6:53:4c:ea:34:d5:13:ae:af:33:
a1:49:b7:30:bd:ed:f1:59:c4:5d:07:93:0f:a7:ab:3d:3b:ad:
09:e3:57:8d:69:79:6c:a7:63:10:41:ad:9f:c6:ae:02:f8:62:
00:25:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:59 2026 by rpki-client