This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json)
Hash identifier: dIslUIdC4BbVriweoDWWdCkgGzMSVkDOxtdrB12czh4=
Subject key identifier: 3A:A6:68:44:15:62:97:79:F4:3E:CB:5C:AA:88:8C:6B:B7:82:AE:57
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 47287344FD19EA81BE31E64CE763CFBCF8501A8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
Manifest number: 041E
Signing time: Sat 24 Jan 2026 23:51:59 +0000
Manifest this update: Sat 24 Jan 2026 23:46:59 +0000
Manifest next update: Mon 26 Jan 2026 01:18:59 +0000
Files and hashes: 1: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=)
2: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: nczBT+hGhXO4LZoU/LUy2IVQ6tn0eQbmR1JjGmRZm4g=)
3: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=)
4: 34332e3235352e38322e302f32342d3234203d3e20383334.roa (hash: icPb5M6Y/CPwkJET9vdKSzs0dBOYlGKaymEwUa2ujW8=)
5: 3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa (hash: /3IEW/L0xD5c+gjtCpGu3f4OnNilISvSgo/f0RfHoCg=)
6: 3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa (hash: jaYCwKUfN1ahphjmuCip8Xd6KyVekTXlh6eiv1lr6wE=)
7: 3130332e3233382e3133312e302f32342d3234203d3e20383334.roa (hash: fhVozekGxroP5onjbHWPJyGXl+sRiaN4KyOWlRJUoW8=)
8: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=)
9: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=)
10: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 01:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:28:73:44:fd:19:ea:81:be:31:e6:4c:e7:63:cf:bc:f8:50:1a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Jan 24 23:46:59 2026 GMT
Not After : Jan 26 01:18:59 2026 GMT
Subject: CN=3AA6684415629779F43ECB5CAA888C6BB782AE57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:a1:a3:f9:b4:20:6f:d5:44:8b:63:4c:cc:
2e:59:69:08:22:d7:c8:bf:0f:99:5b:e8:97:88:8a:
88:fc:e0:60:57:56:77:08:af:2f:6d:b4:bd:ed:64:
65:cc:11:39:14:bc:11:c5:98:a3:d5:c1:b7:ce:66:
88:eb:76:32:3f:70:99:6e:06:22:0c:e4:35:b4:e8:
51:77:aa:0e:89:b3:ef:36:27:48:56:8a:31:c8:51:
bf:91:1e:2d:33:c5:0b:1f:32:a9:93:84:a0:57:89:
fd:5d:c6:17:1a:96:56:55:c7:9e:6e:02:56:65:ea:
bb:25:f3:ba:91:cb:96:86:22:36:7a:cf:20:6c:1c:
b0:bb:00:30:40:b9:cc:66:74:22:e4:62:f6:6b:7f:
37:9d:a4:d0:ef:43:e3:5f:6c:db:e4:c4:05:33:8f:
39:53:2c:6a:d7:e1:2d:50:27:54:af:85:56:70:c7:
da:48:99:7a:5f:d8:41:64:08:19:6f:19:97:29:6d:
7c:3d:2b:bc:90:7d:f4:38:65:dd:f4:90:9d:54:85:
7c:8f:50:12:9b:3a:87:ba:91:ce:64:9d:92:07:cf:
71:81:f1:d3:9c:b3:fb:e2:4c:08:69:dc:00:64:3b:
eb:bd:f8:fb:2a:64:2c:f4:24:66:fd:16:08:56:f9:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A6:68:44:15:62:97:79:F4:3E:CB:5C:AA:88:8C:6B:B7:82:AE:57
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f3:8c:7a:a1:62:f2:4e:8a:89:6c:93:bf:96:c8:83:43:d0:
96:43:f4:97:43:b3:ea:6d:0a:d5:1a:21:9b:5f:ea:a6:b1:56:
e6:a1:f5:d0:ff:36:5a:29:55:14:58:16:07:b1:0a:7f:ee:88:
98:47:97:37:32:c8:8e:21:e7:d4:07:9c:6f:f4:3d:64:ad:ec:
0b:7e:04:15:a3:30:65:81:62:b7:0a:dc:e0:0b:bb:48:5c:9f:
e6:4d:dd:8c:85:a0:25:cf:93:c5:59:cd:07:ae:61:9e:33:da:
19:c7:47:ea:c5:c9:c4:ae:61:40:e5:d4:03:ac:8f:e8:da:bc:
27:11:b2:96:a8:00:54:2a:fb:5d:11:60:3e:66:17:ce:47:41:
0e:7b:20:4c:8b:be:fe:7c:50:5d:76:8e:89:1a:96:b5:d6:2d:
3c:b3:35:1e:a2:7f:d7:5b:94:1b:ae:c5:4c:a6:9c:f0:ac:08:
9c:d3:eb:0c:3a:f1:a7:47:9d:9b:12:6c:c3:98:dc:3a:1d:b1:
8a:13:06:70:39:fe:30:e2:3a:a5:17:d6:c0:e6:31:b1:d9:6c:
11:ad:71:4e:77:1c:57:b2:39:72:f0:69:81:b5:80:4f:0f:4a:
e8:c1:51:90:11:ba:56:35:d3:9d:5a:45:26:67:43:76:1e:74:
c0:2e:09:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:48:31 2026 by rpki-client