This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
File: 30fOzFfqiK65ajhlVgufImC6mQ4.mft (raw, json)
Hash identifier: wj+KZFMr4gn5vRsRZ7rBIyJ21ns1Yw+fHWz/Vtau6JU=
Subject key identifier: BD:34:49:E5:A3:F0:48:90:47:1A:4D:B9:76:5C:87:2C:C2:F6:61:93
Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E
Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
Manifest number: F7
Signing time: Thu 01 Jan 2026 04:49:20 +0000
Manifest this update: Thu 01 Jan 2026 04:49:20 +0000
Manifest next update: Thu 08 Jan 2026 04:49:20 +0000
Files and hashes: 1: 30fOzFfqiK65ajhlVgufImC6mQ4.crl (hash: xWcjnOuPLhQKlrUEMKnVZONHITRMZ2nVcyffaYcb5lk=)
2: 02389B7670E811EFA8DBE571C4F9AE02.roa (hash: VymoAbVW0Xjer0qffAdo09mun74sopBFqTSpIfpfxa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl
rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Jan 2026 04:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E
Validity
Not Before: Jan 1 04:49:20 2026 GMT
Not After : Jan 8 04:49:20 2026 GMT
Subject: CN=6955fcd0-ed47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:92:24:77:92:69:b9:b9:a0:f7:67:8c:ff:
6f:4a:c2:8a:60:bc:5a:09:13:ce:a1:22:78:6a:89:
f7:82:43:80:e1:a6:b0:39:8a:45:71:d2:33:45:4d:
36:ea:6a:87:b4:11:7c:3e:e9:e5:e8:9c:bc:f1:30:
04:1a:c3:40:8f:21:6c:4f:f8:91:ba:fe:a1:bf:2d:
6f:f0:b4:73:f5:5e:fe:cf:33:7e:9c:24:5b:84:ed:
b0:38:6b:c5:24:d8:46:ae:59:a1:05:ec:a2:ae:b1:
2a:32:3c:e2:d7:31:49:6b:d2:0d:11:13:e6:3d:a5:
9b:25:55:af:21:89:d8:93:5b:cd:88:c7:68:58:b2:
97:27:15:ed:52:77:98:6a:4d:ff:8d:68:68:e0:c4:
65:6c:eb:08:d5:88:e7:c0:42:c0:ab:eb:4a:31:cc:
60:9f:8c:1b:c2:a3:57:49:75:cc:0e:75:2e:a9:12:
58:1b:22:33:1f:1e:56:f3:a5:da:a1:aa:af:1c:55:
4b:0f:49:8b:b7:69:43:ba:1e:1f:00:35:7e:45:0d:
78:31:ad:3f:46:2e:ad:d9:2c:8a:da:5b:bb:df:d5:
61:7c:65:82:91:4a:c9:a1:44:0a:f4:cb:12:9c:10:
6f:c0:f1:11:3b:96:b0:93:54:8a:b9:6c:3d:54:be:
ea:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:34:49:E5:A3:F0:48:90:47:1A:4D:B9:76:5C:87:2C:C2:F6:61:93
X509v3 Authority Key Identifier:
keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:df:43:90:2e:24:d4:ae:d7:18:3a:01:c2:13:7e:23:68:49:
cb:a0:b1:6d:e9:9a:f9:a6:20:6e:ff:88:03:31:7c:52:55:23:
48:29:96:c5:3d:df:e5:de:f2:ff:e9:c0:24:e5:f9:11:18:e2:
66:40:91:d2:85:aa:a5:1a:70:8d:30:23:00:71:fe:79:ae:39:
9b:6d:bf:13:e2:fa:a6:5f:20:96:af:25:a0:fa:b7:fe:0b:28:
70:2b:c1:21:d6:a0:51:44:57:c7:ef:0b:42:a1:a0:0f:39:70:
2d:95:ee:54:c8:99:54:75:16:c7:ac:22:c0:78:7c:98:d3:28:
27:0d:d2:f6:d1:3d:e0:18:69:15:e6:f8:71:ca:a1:ba:81:96:
89:b7:f9:47:de:ba:f6:21:a9:ed:d1:ec:75:6f:cc:ca:2b:85:
f7:55:0b:62:38:fc:4e:c9:0f:d4:54:2d:b1:ca:65:f6:b1:45:
cf:86:b2:f7:e3:78:bf:97:73:ed:5c:0f:d7:d6:1d:92:ad:f6:
13:23:51:80:2f:d3:dd:85:23:93:4a:86:58:2e:2d:52:c1:9b:
e0:cd:6d:7a:ce:f1:19:29:52:2c:c2:d8:dc:b1:88:e2:de:ce:
6b:be:c0:74:28:1b:d6:9f:49:4b:31:4d:12:f9:fe:84:c0:48:
91:7a:fd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 14:24:41 2026 by rpki-client