This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
File: AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json)
Hash identifier: 1sUJB1PQKW01EKSCTJ0D6oLczeNStRzulPFJsnxCwVI=
Subject key identifier: B9:55:30:87:A8:C5:D1:59:FB:B1:69:6E:60:13:49:F5:14:04:92:85
Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37
Certificate issuer: /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937
Certificate serial: 0FC8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
Manifest number: 0FBE
Signing time: Sat 24 Jan 2026 17:12:05 +0000
Manifest this update: Sat 24 Jan 2026 17:12:05 +0000
Manifest next update: Sat 31 Jan 2026 17:12:05 +0000
Files and hashes: 1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: GseBeil2OuM/57OxLXiaFedUn+jwTB26ApwbXkjNsAA=)
2: 85B9F090F35011EFAE695322C4F9AE02.roa (hash: pq5+H8QeR9KAWVSI+cw+pkg68tHfepgn1G46rJN6KyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl
rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4040 (0xfc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FECDA, serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937
Validity
Not Before: Jan 24 17:12:05 2026 GMT
Not After : Jan 31 17:12:05 2026 GMT
Subject: CN=6974fd65-73a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1c:4b:8a:db:37:fd:86:38:c5:9b:1a:d1:9e:
0a:b7:cf:35:6e:80:9a:d7:76:95:3d:ae:4d:7a:6c:
23:c9:7a:1c:74:44:ab:b5:b5:ab:8b:c4:b4:46:3f:
ee:a3:aa:dd:0f:e8:6b:4b:b8:6e:c7:04:79:2d:18:
8e:9d:92:04:93:ef:51:dc:9a:56:9b:35:da:3a:61:
f8:14:93:82:c6:2e:e9:35:ba:f2:a9:9f:22:18:eb:
ac:6d:cb:c3:7c:f7:f7:bc:0c:27:ec:31:98:f8:81:
ed:ab:75:05:2d:7f:0e:3d:ee:18:7e:cd:5b:0c:e8:
5b:16:c1:3e:3d:08:f0:39:9d:b5:cc:f2:e0:be:0d:
53:76:66:ed:be:8b:e0:4c:b0:d0:35:9f:58:98:78:
43:b3:80:e4:c6:76:b8:f7:ff:06:b0:2c:ca:de:53:
17:37:b2:56:36:98:15:77:77:22:bb:19:27:1d:da:
04:0d:e2:66:f3:08:71:1b:5e:63:ef:bc:f1:72:8d:
45:e6:9a:de:df:41:70:d0:9d:fa:a8:3b:92:da:9d:
fb:a5:6a:48:b3:2d:82:59:4a:32:3e:b1:cb:eb:93:
c2:c0:71:f1:49:a0:aa:c3:01:0a:ec:04:89:af:7a:
78:6f:6d:01:5c:ef:91:6e:dd:06:61:50:a8:be:d2:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:55:30:87:A8:C5:D1:59:FB:B1:69:6E:60:13:49:F5:14:04:92:85
X509v3 Authority Key Identifier:
keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b7:c1:47:5f:18:82:39:88:77:b2:f2:00:c6:80:d8:54:16:
c7:34:ca:0e:76:4b:c2:df:ab:bc:21:84:12:fe:93:75:be:fe:
cc:1b:0f:77:49:31:64:5f:3b:f4:73:b7:81:bb:49:2b:4a:e6:
bb:a0:25:5c:ee:fd:58:05:73:47:ff:00:1b:4b:b7:8e:02:88:
27:f5:b2:27:d2:2c:1c:d4:fb:63:a5:93:0e:05:00:41:53:eb:
9b:91:72:2a:e4:bf:79:3d:f8:d3:da:ee:25:68:41:05:ca:1f:
7d:92:fe:f0:dc:18:83:d0:0b:1b:48:89:1e:58:d8:ec:69:d0:
28:21:f8:55:66:44:36:ee:7c:d5:df:66:53:46:13:c5:eb:fe:
dd:18:3d:fe:5b:33:b9:16:73:a7:c1:33:3d:c8:87:b7:b0:24:
1d:95:81:63:45:e3:14:36:a6:ac:ac:61:39:13:d0:94:46:44:
a6:13:00:4e:e5:ef:97:72:49:6d:4d:c0:13:34:af:7d:66:83:
ef:34:d6:76:44:ac:b3:9d:ff:ed:6c:6e:93:2e:31:e5:81:f7:
10:c9:1f:cf:53:9a:2f:36:05:8c:29:5d:33:97:58:0c:15:4e:
c2:ae:97:69:34:85:27:ce:40:1b:87:dd:f1:93:96:d4:03:be:
78:21:76:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:01 2026 by rpki-client