This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json)
Hash identifier: b9ej9YvAanciwaTHmiwtAJftt/Pa8ZxxxR1FaipvRlM=
Subject key identifier: 91:E0:DC:AF:EF:56:77:2B:9F:43:4D:A6:DF:41:65:55:FC:EB:64:06
Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Certificate serial: 0E47
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
Manifest number: 0E32
Signing time: Tue 20 Jan 2026 14:38:55 +0000
Manifest this update: Tue 20 Jan 2026 14:38:55 +0000
Manifest next update: Tue 27 Jan 2026 14:38:55 +0000
Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: 3NZYTKORzPEgRPjSoLliJlnwEdWIa5BEstWp30hKRn8=)
2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VLsVnxxlVtlgcvP3UYgj2e5kasbUoQl98RO4NGwLI8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 14:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3655 (0xe47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Validity
Not Before: Jan 20 14:38:55 2026 GMT
Not After : Jan 27 14:38:55 2026 GMT
Subject: CN=696f937f-23eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:af:c0:cd:6c:d3:4c:92:57:5f:b9:d3:90:
91:0c:e2:d8:1d:74:45:df:1f:c6:a9:67:03:08:1a:
b9:b0:c8:c9:ee:25:05:14:b3:0c:de:21:4d:3a:2f:
ee:b5:d2:ba:1c:31:5a:15:b0:87:e0:26:03:54:58:
4b:5a:e0:b0:af:ca:18:5c:02:33:b7:b6:7b:57:79:
a8:16:93:a7:60:cc:cd:07:8c:be:be:69:3a:eb:25:
e1:22:dc:66:42:51:03:9d:86:8f:1d:ed:e4:0a:77:
ac:36:a6:a7:b0:ea:3b:44:b5:24:4e:26:fd:3b:83:
7f:7e:a3:5d:ed:fa:19:bb:bb:6f:fd:61:b9:8f:7a:
f9:c2:c7:ee:24:f3:85:e0:ca:31:67:8c:a4:46:f6:
a3:4b:80:d1:a1:59:88:20:c7:00:0c:55:6c:2e:a1:
cb:aa:b3:ff:6c:97:3f:fa:0e:a3:df:4f:42:df:da:
0a:96:8c:14:b4:a8:5f:1d:90:2f:84:c7:25:f3:ab:
85:69:a2:3b:b7:8d:ca:e8:dd:e2:c2:47:a8:f3:6a:
c6:cf:f4:f5:3f:90:ce:1d:56:3e:80:af:4b:7e:c7:
82:d3:bd:80:1e:f7:6b:83:45:28:15:65:de:f9:2c:
67:c7:24:82:ea:3e:c4:62:0e:53:7b:a5:bd:9f:c1:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E0:DC:AF:EF:56:77:2B:9F:43:4D:A6:DF:41:65:55:FC:EB:64:06
X509v3 Authority Key Identifier:
keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:e9:27:1b:8c:2e:08:5c:20:73:ce:a5:9d:a0:e6:54:a3:da:
10:c4:c4:c3:51:de:70:7b:35:c8:91:1e:d3:fd:4b:d2:71:06:
28:ad:7f:07:30:0e:64:85:27:82:cb:58:f7:c9:84:5e:cd:54:
d0:79:87:5e:c3:d2:83:84:ec:9f:ef:b3:ea:d9:24:7f:80:01:
a6:a6:8c:02:89:05:6a:c3:60:6f:44:cf:a4:ec:03:1b:93:f8:
9e:da:89:65:56:09:57:f4:36:0f:57:c7:e3:3f:a6:ad:f5:56:
1b:62:58:43:6c:e1:9b:5b:35:7a:b6:50:de:ec:3d:36:be:c1:
5b:b3:fb:6e:6a:3e:c3:a8:33:57:ca:fc:1a:b1:d4:a2:e3:34:
25:9e:73:eb:1f:b6:fb:b2:0b:bd:c0:4c:fa:94:20:2c:dc:7a:
b4:8e:00:07:57:4f:a5:45:56:fc:42:ae:5b:30:a6:3d:b3:04:
d8:9b:36:af:69:95:17:7a:02:bd:c9:d8:26:94:1a:49:a3:95:
65:70:57:af:95:62:4c:cf:99:1a:ee:ae:9d:27:79:97:8f:c3:
d7:09:cc:32:6e:64:d3:76:4d:75:b0:21:64:6e:20:e5:9e:0d:
e5:81:7f:84:71:8e:c9:16:f2:bd:0b:8f:23:64:01:91:ac:da:
69:33:0c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:50:52 2026 by rpki-client