This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
File: J1jGz4tSiWbUNxO7G86OA9ymGxw.mft (raw, json)
Hash identifier: Qux0anp9UG/edH7PIvw7Opmu4snJGTN+aQGJ35u7h7Q=
Subject key identifier: 1C:25:4B:50:8C:81:E5:B8:0F:3D:55:4B:9F:9B:8B:C6:8A:81:BB:E9
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Certificate issuer: /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial: 03B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
Manifest number: 03AE
Signing time: Tue 03 Feb 2026 00:10:23 +0000
Manifest this update: Tue 03 Feb 2026 00:10:22 +0000
Manifest next update: Tue 10 Feb 2026 00:10:22 +0000
Files and hashes: 1: J1jGz4tSiWbUNxO7G86OA9ymGxw.crl (hash: BHhLoOPanICIyDofKV4t5QtIq1WsnqE099C8SGFdu9M=)
2: 4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (hash: xwWWISkzf0btU4XnSYbv2CyxUkjvyAAYT2JHS7cyDnY=)
3: 5A0EFF08D55011EF9880B254C4F9AE02.roa (hash: dxa4kBT2lvl3oboOGNPEyKat95ik2LOjHGB6LQMSuIY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Feb 2026 00:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951 (0x3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Validity
Not Before: Feb 3 00:10:22 2026 GMT
Not After : Feb 10 00:10:22 2026 GMT
Subject: CN=69813cef-6e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:48:d1:d2:b0:9d:c0:e2:aa:8b:5f:c5:e9:
66:a1:11:ad:b1:94:38:8b:97:5a:f3:24:0b:8a:93:
c7:c4:55:44:16:79:e5:8c:80:5c:23:9a:3f:92:8c:
f2:74:d1:39:93:1d:95:59:c7:3f:b5:a5:41:5c:3e:
3a:da:a8:3a:cf:ec:e1:01:bc:3a:8a:68:9f:79:86:
13:77:70:a5:fb:7a:c8:05:a9:69:3d:d4:4f:36:2a:
4f:5a:ac:ef:ad:69:09:ff:a5:e6:52:53:8e:51:11:
51:ed:fc:c7:fb:a7:fc:8a:55:0b:81:dc:4d:dd:e6:
7c:ca:8d:a4:77:b1:47:2c:ab:27:ae:fd:d7:0d:ca:
00:23:67:3b:16:7b:52:3d:18:3f:11:b7:a1:50:02:
65:7e:58:10:e9:24:21:cb:6d:40:f9:55:71:d4:59:
88:0d:5d:fc:33:21:e9:1e:c9:5e:62:9a:ae:e0:f1:
cc:a5:47:6a:66:62:af:7a:82:af:04:73:bd:a1:79:
eb:6d:3f:01:0b:7f:74:9b:73:50:a4:f2:cb:a8:d4:
2b:8a:d5:d0:f4:74:c2:29:62:77:fa:ea:ff:3a:85:
ef:87:1f:97:de:11:fd:41:f2:b8:09:ee:e0:9b:15:
77:87:33:83:fa:a5:c8:57:a5:c3:07:9a:56:fd:65:
04:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:25:4B:50:8C:81:E5:B8:0F:3D:55:4B:9F:9B:8B:C6:8A:81:BB:E9
X509v3 Authority Key Identifier:
keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:72:a9:d0:3f:d5:08:dc:d8:0c:44:0d:36:44:32:fd:4a:86:
e3:35:e0:1d:54:bd:11:1c:ef:5d:24:a6:cf:ad:ce:cb:73:2b:
6b:d4:06:e2:38:57:95:82:50:41:97:6c:42:ed:31:dd:cd:05:
13:14:fc:3d:f6:a2:97:bf:9e:71:e5:18:45:7f:e5:e8:6a:95:
c6:b8:8b:44:51:c2:23:58:cc:74:95:53:a3:eb:63:45:16:dd:
95:b8:d1:15:cd:6b:77:b9:4a:ee:bb:f6:3e:a2:fe:f9:32:eb:
38:d6:fc:34:b2:84:21:68:45:27:97:89:b0:79:02:10:ee:01:
c7:fe:6a:2e:01:78:05:8a:d4:a8:06:2c:f4:3d:36:76:4e:8c:
6e:4e:35:21:45:21:5b:3d:17:aa:2f:29:fe:f2:57:5f:4e:29:
0c:e5:05:6b:2d:22:19:04:43:8f:d8:46:1e:e6:0d:2f:bc:a4:
12:91:8a:4e:35:52:3a:f7:05:33:77:29:1e:7a:65:5b:c4:a1:
a7:5f:fa:c3:be:46:c1:aa:71:cc:f7:c5:37:b4:4d:b5:dc:11:
25:71:5d:d9:e6:0d:bd:bd:61:c9:c2:db:62:76:0a:ff:f7:73:
6d:29:a8:b4:b8:ff:68:f6:dc:75:31:3f:ad:be:70:0c:4c:84:
de:80:7c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:14:11 2026 by rpki-client