This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
File: elR0EjxUiBfiXzSEzCa2CwZBvWk.mft (raw, json)
Hash identifier: dLfTS7nupt2bBm0i105PRdCqxlFIrTxCSuz/M8MZ8rs=
Subject key identifier: 5D:3F:2B:07:C2:A1:06:7E:AA:24:53:C1:7A:0D:A3:6A:69:C2:CD:AA
Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69
Certificate issuer: /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69
Certificate serial: 07EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
Manifest number: 07DB
Signing time: Tue 06 Jan 2026 20:44:19 +0000
Manifest this update: Tue 06 Jan 2026 20:44:18 +0000
Manifest next update: Tue 13 Jan 2026 20:44:18 +0000
Files and hashes: 1: elR0EjxUiBfiXzSEzCa2CwZBvWk.crl (hash: /2MRf/tKmvi0LEGGRsfuC71SlT0Jw0DIOOia84eNIc8=)
2: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (hash: dk2P7YS4UEzdhYSweMgpjO1Pw3svDbIzP68IGqk5fxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl
rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Jan 2026 20:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2031 (0x7ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6F87, serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69
Validity
Not Before: Jan 6 20:44:18 2026 GMT
Not After : Jan 13 20:44:18 2026 GMT
Subject: CN=695d7422-4eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:13:8b:ac:76:c6:b8:b5:3a:5a:a8:96:9f:
bf:0d:f4:8e:69:26:3a:ad:47:87:f4:b8:8a:86:8b:
73:b5:9f:10:9c:12:b9:91:2c:a8:1d:dd:e4:c7:45:
a9:d9:2d:86:8b:e3:83:3c:10:e0:32:b6:5f:e0:da:
64:a8:c8:3b:8a:2e:c1:29:a2:70:0b:b6:0c:c0:60:
fb:ab:f4:30:e2:67:05:cb:4c:d7:24:f3:8c:35:12:
6c:45:77:d5:9e:d3:c0:a1:9f:5a:4c:39:2b:a1:7f:
52:5b:b3:6a:71:02:43:d8:6c:14:42:77:c1:43:85:
2c:a6:86:2e:ed:9e:34:fe:58:cf:52:2e:6d:1c:21:
45:79:45:5d:df:f2:fa:5d:74:15:5e:96:db:c0:c0:
68:3c:fb:5c:cd:ab:a8:56:17:32:01:a6:e2:63:26:
15:67:d7:e2:cd:fa:1c:05:2b:09:d2:24:43:fc:28:
de:0d:2d:ee:1d:7a:ec:27:a3:31:49:cc:03:b2:da:
d4:e4:02:4a:19:64:d3:db:de:42:7f:7f:d3:fa:12:
f0:78:b7:21:52:a4:3b:90:ae:85:ae:18:c0:c5:bc:
a6:d6:3d:8c:d7:22:00:e6:65:6f:c6:f5:09:ce:43:
40:52:9c:9c:de:05:37:58:b6:db:19:fd:51:9b:7e:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3F:2B:07:C2:A1:06:7E:AA:24:53:C1:7A:0D:A3:6A:69:C2:CD:AA
X509v3 Authority Key Identifier:
keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:c1:30:a5:6a:07:79:39:6e:88:24:da:7d:9d:56:26:80:dc:
49:a8:ca:f3:71:c3:d2:78:bc:a3:2e:d7:dd:58:34:63:21:0d:
1d:b7:52:59:f2:85:e8:1e:86:7e:60:61:77:60:78:64:02:f2:
af:b9:6c:c6:12:e7:bd:60:04:b0:fb:ce:30:fe:ee:44:de:18:
85:70:c4:e5:38:ab:2d:af:b3:b2:20:e6:d7:0b:26:47:bd:73:
26:e9:54:43:5a:71:3e:9e:cc:64:ed:76:cf:c0:24:b8:6c:e5:
a4:8a:5e:44:95:06:b9:21:9d:4c:bb:43:2d:55:b3:d1:da:0c:
b5:dd:f1:55:54:65:7b:93:f3:62:93:8f:cf:e1:17:40:be:8f:
cd:a8:12:bb:40:e5:30:33:fc:e8:26:91:e1:ac:8d:5e:9b:1e:
13:d0:1e:f4:8c:5a:73:d0:5c:b1:95:44:fa:a2:af:57:38:81:
e9:19:f4:15:f0:6e:85:90:ac:9d:2f:5f:c6:5f:1e:3f:69:1f:
f2:d4:4b:f6:89:8e:9f:3b:b8:e8:5b:f8:75:7a:60:0f:79:da:
64:86:a5:64:93:ed:b9:d6:54:0c:0c:75:48:6d:74:00:2f:a2:
0e:b0:c5:63:85:bc:a1:30:40:49:5c:6c:ca:d8:4f:cc:7d:e0:
24:43:90:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 10:24:57 2026 by rpki-client