This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
File: WU96C6m9HBOGhHzoljlj_k5xY2w.mft (raw, json)
Hash identifier: KXCT5xpj2cuyUgruKnfStY654hSCIkOzSdJlJHnvuVE=
Subject key identifier: 46:AC:DA:1C:9F:42:8D:F9:55:AD:E4:2C:67:76:F7:81:80:22:E0:A2
Authority key identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C
Certificate issuer: /CN=A91FFEDB/serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C
Certificate serial: 026C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
Manifest number: 0266
Signing time: Sun 25 Jan 2026 00:52:29 +0000
Manifest this update: Sun 25 Jan 2026 00:52:29 +0000
Manifest next update: Sun 01 Feb 2026 00:52:29 +0000
Files and hashes: 1: WU96C6m9HBOGhHzoljlj_k5xY2w.crl (hash: OukKa34juqHJPoqUhecm8oSaQwK5jrUyz8pjgabSCPk=)
2: 3CE5C23A550611ED96C8F350C4F9AE02.roa (hash: wfo3IJ4QVH7mLkWRPHTdhiFpu+AklmK5OoP63oQmtyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl
rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFEDB, serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C
Validity
Not Before: Jan 25 00:52:29 2026 GMT
Not After : Feb 1 00:52:29 2026 GMT
Subject: CN=6975694d-215a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:23:5f:e3:97:2e:8c:f0:1a:0d:b3:65:cc:
d2:89:5f:52:21:f2:09:bf:1e:1a:a4:56:f8:e3:a8:
96:48:f6:ac:62:f9:45:08:cd:23:ee:bd:e0:5b:5b:
c1:50:de:c6:5b:53:4d:ac:ab:d3:0d:0e:e9:85:19:
8e:cb:f5:d9:50:9e:c6:6d:63:b0:a0:41:9c:6c:bc:
a5:ab:a6:83:d4:e7:25:8f:5a:fc:fa:99:4b:00:4c:
32:38:99:4e:49:41:29:36:d3:50:ef:44:5c:a6:d8:
46:7a:ba:af:59:be:9b:09:02:97:8a:e6:56:e5:ea:
de:30:66:8b:c9:a1:58:b4:be:3d:1f:04:6c:d7:12:
52:75:86:08:b0:59:e8:df:23:0d:9c:60:c9:c8:44:
65:33:63:f0:d4:f6:3c:e3:b3:3e:d1:b2:86:fb:ed:
ae:f8:f3:b7:ae:4d:bf:e4:03:d9:fe:e0:7a:65:8d:
8e:2c:6b:9e:09:e2:fb:c6:6f:07:ac:4b:da:e1:b4:
6d:b8:d8:c3:e7:6c:7c:4f:f2:38:a6:99:84:45:7a:
86:fc:25:27:28:6d:6a:57:18:47:85:a8:bd:b2:f2:
ac:bd:ae:a0:2f:93:d3:65:b7:5c:f4:6b:ac:20:4f:
bd:34:ef:b1:d4:78:8e:5c:13:92:83:93:47:21:32:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AC:DA:1C:9F:42:8D:F9:55:AD:E4:2C:67:76:F7:81:80:22:E0:A2
X509v3 Authority Key Identifier:
keyid:59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:b6:f9:b9:2e:67:62:f9:0a:e3:bd:c8:82:a8:65:e5:0a:3d:
06:cd:65:2a:a6:3f:f1:d5:58:15:26:b6:83:52:7b:48:d8:ad:
d0:8c:11:42:23:13:04:3b:5a:64:48:e0:b8:a0:c0:91:fc:0b:
4c:be:20:25:42:b9:ec:6d:ff:c4:fb:3d:90:4a:b4:0b:1c:20:
c8:0d:73:c0:1d:06:10:3f:c9:e5:c6:a6:5e:46:b8:67:ec:2c:
41:26:c4:79:eb:d8:78:ff:68:c9:56:ca:84:da:06:55:ec:b4:
a8:b1:60:cb:56:2b:21:e0:e7:8d:d7:6a:2a:24:1d:79:06:a4:
51:a2:04:66:cb:41:da:63:27:fc:c7:95:f9:f1:cf:f5:72:a0:
32:b7:ef:38:ac:51:45:f5:d4:cd:f8:e6:81:11:77:ea:4c:ee:
54:c7:70:25:a5:7f:3c:70:86:53:a5:44:35:01:ca:e2:c0:90:
d4:b4:80:69:3e:59:9d:55:06:31:41:1c:63:ff:af:89:4b:a0:
dc:76:f6:ff:8c:16:ad:98:b6:ad:94:d1:1d:a3:aa:0d:69:8e:
28:b7:9d:90:35:00:e1:67:3c:f5:18:ee:36:4e:5e:02:2b:7a:
96:e2:43:35:0f:4c:47:f3:45:b8:d8:4e:d6:1c:e9:87:98:b5:
e3:ba:4d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:45:56 2026 by rpki-client