This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File: cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier: B+xDibhdx7tM5XKsh0NLNw81G3oqw/NIewUaz6LCvIE=
Subject key identifier: 49:F6:BF:6F:11:22:84:14:27:9C:87:C4:CA:94:32:57:5C:1B:87:D5
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial: 07BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number: 07A9
Signing time: Sat 10 Jan 2026 20:48:17 +0000
Manifest this update: Sat 10 Jan 2026 20:48:17 +0000
Manifest next update: Sat 17 Jan 2026 20:48:17 +0000
Files and hashes: 1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: k9bOq8XLE5DbMFqFylMGJq7hZGtrhv5p2NS3fDlnzfk=)
2: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: QcINMhPugXakfHhYWsf4t0lmoNzm+ZXfVIXhNA2VxIA=)
3: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: C9YBNy3SJzx+k9ZBQHZtbIXi++eZ8FDncm2ByZsrMrw=)
4: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: ms/taZmD2/o24c1Khq9ZB9VElH0aqAVMPoZoMLJ7l7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 20:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1979 (0x7bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Validity
Not Before: Jan 10 20:48:17 2026 GMT
Not After : Jan 17 20:48:17 2026 GMT
Subject: CN=6962bb11-3598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:32:61:25:4d:bb:43:31:51:b7:ff:30:c5:
e8:a8:2c:65:0a:1b:35:17:ee:25:64:ec:2e:89:6b:
c4:69:34:0b:96:37:9a:cb:6b:de:3e:6d:e4:03:20:
45:26:7d:93:7c:bc:45:ea:6f:82:c7:78:4f:ed:a3:
7c:cf:94:55:67:34:33:fc:10:68:0b:30:8e:a0:13:
44:c9:df:8c:12:3f:a9:5b:96:96:f7:05:13:54:b6:
ba:dd:c2:32:dc:4f:b2:eb:40:a9:3c:3a:c7:c6:47:
5f:44:1b:55:e0:80:73:a5:58:39:68:d1:c2:ca:37:
65:3f:a8:27:1a:8d:27:6e:ea:5e:1e:a2:64:ed:ac:
c9:2e:98:db:c1:5a:bb:3e:a6:3e:76:8f:f4:b5:bf:
b1:4b:5c:1b:76:ef:81:0b:89:97:53:d5:3a:d8:e0:
98:7f:a5:ba:86:33:b7:a5:be:70:89:86:a0:83:47:
eb:60:7e:ec:68:7c:3b:fc:df:6f:81:cc:8b:72:38:
a6:e7:a0:da:57:dd:57:70:dc:b7:91:fa:29:3e:4b:
36:08:4a:38:88:37:ca:ff:88:21:27:c2:9b:d0:ba:
0d:0f:9b:2d:30:ac:45:51:9a:f0:60:98:23:1a:18:
7f:d9:46:59:47:1d:2a:92:23:1e:d4:2a:b3:94:e0:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F6:BF:6F:11:22:84:14:27:9C:87:C4:CA:94:32:57:5C:1B:87:D5
X509v3 Authority Key Identifier:
keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:86:d8:91:4e:b8:14:e4:73:c1:5d:37:e0:77:2d:a6:57:66:
cf:ed:48:e1:05:c8:20:bb:8b:0c:91:78:eb:88:bd:46:f1:44:
21:c3:15:92:74:fc:1d:de:9c:79:50:d3:fb:db:a8:6a:f6:6f:
be:78:a9:bb:98:7f:48:b0:1e:24:2a:9b:61:6b:8b:a0:9a:69:
fd:a8:02:ca:7f:fa:85:2b:6e:5c:3f:bd:b7:31:a5:64:59:c6:
58:ab:40:4f:de:cc:b2:09:a4:d0:de:1e:90:f8:b5:7d:0f:85:
d6:c7:9c:26:7a:50:21:e8:a7:a1:3c:b0:04:23:b9:77:37:2f:
42:b6:e7:3c:fe:57:20:8c:2a:1b:27:36:98:1f:5a:ce:90:cc:
3d:5b:0f:83:01:4a:cc:bb:4d:76:8f:fe:4a:4f:3a:8b:9d:98:
2d:69:51:a1:26:6d:ab:73:f2:a9:f3:9b:d2:3d:da:e1:7c:a1:
dd:ca:8b:ce:c5:84:2b:c8:60:08:f4:5c:e8:26:1e:1c:4d:4c:
99:20:68:a0:2a:af:1d:6d:b3:c7:b6:5b:99:61:13:79:3a:0b:
51:5d:b3:e2:1c:0c:27:9b:a6:2a:06:af:81:a6:5e:c9:5c:76:
ce:c9:b5:92:94:bb:98:bf:6b:1f:29:0e:64:44:2c:0e:ab:e6:
ea:39:c8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 17:51:21 2026 by rpki-client