This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
File: VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft (raw, json)
Hash identifier: 8sy23fQRqF3QBEcHQg8e9j4DrsHttIr6R8AphjN2Dr4=
Subject key identifier: E2:FA:EB:F3:30:74:E9:96:83:B1:91:80:E0:5D:CB:DA:E2:5B:13:FD
Authority key identifier: 54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14
Certificate issuer: /CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
Certificate serial: 04D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
Manifest number: 04D1
Signing time: Sat 10 Jan 2026 23:02:57 +0000
Manifest this update: Sat 10 Jan 2026 23:02:56 +0000
Manifest next update: Sat 17 Jan 2026 23:02:56 +0000
Files and hashes: 1: VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl (hash: FQLq29vDMEvLF+IdR7IBrp3gsRfhQhVFdxHbSRzbxe0=)
2: FEE1AED6C77311EEB751AE2CC4F9AE02.roa (hash: VdZlll8N2yHckG8u+VAt3wnnIi65LnwSgFUO4q8nuCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl
rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 23:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1240 (0x4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEBFF, serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
Validity
Not Before: Jan 10 23:02:56 2026 GMT
Not After : Jan 17 23:02:56 2026 GMT
Subject: CN=6962daa0-5d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:74:b8:34:a6:f8:38:3d:24:ab:b6:6d:ef:
ac:70:0e:36:c8:e2:ec:ba:cb:a7:37:c4:6c:01:2e:
81:38:04:69:3b:ba:1d:c3:00:75:19:49:77:fa:78:
d3:34:82:67:7e:5b:e2:45:79:00:7f:8b:df:ce:8d:
90:cd:1f:9a:32:66:16:76:b0:81:26:24:c2:24:b4:
6e:25:6e:2d:c4:cb:3e:94:78:72:84:39:69:30:db:
05:d2:27:c3:c0:34:72:0c:87:37:e4:6a:67:15:99:
6e:31:1b:68:78:ae:88:f2:6b:81:1c:ba:a3:94:9d:
20:ce:4b:4e:26:d3:c1:da:b8:b0:17:09:f6:6d:8f:
89:f4:13:27:ea:f5:65:75:0d:d4:b7:e4:bf:7b:96:
ec:ee:f0:98:a8:af:5f:ef:e4:0a:4d:24:f6:09:22:
46:5c:d3:f9:48:dc:25:aa:0e:76:63:e8:f9:a1:d8:
d9:27:ef:5c:2c:a6:37:66:2b:9d:7c:d7:27:24:56:
23:b7:ab:5f:0a:16:13:7a:89:6b:60:d2:ea:17:81:
3e:68:3b:01:26:5d:ad:21:d8:79:73:0e:2b:38:c2:
46:d3:c1:e4:e8:e1:03:04:03:24:6d:a0:5b:67:48:
59:1e:e5:1c:a5:82:31:0e:e5:58:86:1a:3f:38:16:
bf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FA:EB:F3:30:74:E9:96:83:B1:91:80:E0:5D:CB:DA:E2:5B:13:FD
X509v3 Authority Key Identifier:
keyid:54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:c4:cc:87:2d:64:01:65:57:85:45:cf:ba:22:f6:0b:34:61:
98:d9:b9:c4:22:c5:b1:31:38:79:26:84:65:8e:69:0c:07:14:
66:b9:7b:f9:93:b6:e6:d3:ad:65:48:38:c2:e2:49:46:cb:b4:
cd:a3:9e:0e:43:71:f1:2c:49:59:63:fe:06:dd:ac:75:9c:cc:
4b:13:47:1d:15:ec:69:fd:e8:bf:60:86:ad:20:4f:60:40:43:
d2:a3:c6:42:46:26:3b:06:7d:64:07:2e:d6:8a:e5:39:11:73:
6d:4d:e4:38:77:e8:16:ca:2b:fe:cf:da:d2:33:4a:64:b9:28:
e7:a4:88:e3:2b:34:59:09:59:a3:18:72:b3:b8:66:05:f4:7a:
c9:54:70:38:19:a9:13:ab:87:43:18:ce:99:08:58:6d:d2:9a:
2d:d8:76:91:b1:73:c5:9c:74:c0:69:fc:29:71:b3:ec:f6:a6:
83:de:a8:0d:39:b8:dd:2c:e6:bc:2c:1d:c7:fe:15:2d:59:2b:
f3:2f:93:f7:d5:3e:8d:6e:39:fd:e5:0f:a6:9b:d7:03:1d:46:
21:0d:5e:d8:85:f7:69:ab:b5:de:94:03:79:6b:d7:fa:33:49:
2c:44:e6:b3:11:cf:de:88:31:d1:a6:84:0a:6c:71:ad:85:f2:
d3:0f:6c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:32:25 2026 by rpki-client