This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
File: jsMzdX42OhcRsAJzJQRG_htJONs.mft (raw, json)
Hash identifier: XQHvKBT6+xzDh4YL0tt0uCw1wj6Y7uhVNHJSTln3CNQ=
Subject key identifier: 5E:52:9B:1E:96:D3:4F:5F:2C:51:4F:03:0A:5F:BE:1A:F2:46:D1:F0
Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
Certificate issuer: /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Certificate serial: 02EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
Manifest number: 02D3
Signing time: Tue 03 Feb 2026 00:53:57 +0000
Manifest this update: Tue 03 Feb 2026 00:53:57 +0000
Manifest next update: Tue 10 Feb 2026 00:53:57 +0000
Files and hashes: 1: jsMzdX42OhcRsAJzJQRG_htJONs.crl (hash: lgZZIRbQUnDsVOQOcoMQyRP9R/X8NBRpwkMI/0PSq8w=)
2: E1870478616C11F0A254E10BC4F9AE02.roa (hash: PUky37fAI8Ys1qLflElYkqRy1kwJKllU0o6ewDp0S2M=)
3: 984E33E4E01F11F0913A4E89646F56BC.roa (hash: h1lloM3qutmm3K+EkhpjQTIwoXx66vHf2PQkMLd+MTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl
rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Feb 2026 00:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750 (0x2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Validity
Not Before: Feb 3 00:53:57 2026 GMT
Not After : Feb 10 00:53:57 2026 GMT
Subject: CN=69814725-2573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:15:e2:13:53:98:55:51:4e:dc:62:66:56:
93:36:f1:5a:e0:84:a2:c0:1a:00:09:47:e8:e6:f0:
18:99:c8:4b:63:60:ed:f2:80:5d:14:04:53:b5:94:
87:68:05:d8:ef:ad:dc:96:77:c6:dc:3c:ad:6b:ea:
b1:83:60:b9:19:65:34:40:77:b0:26:bb:3d:f1:aa:
97:71:92:32:3e:3d:54:b6:70:14:31:af:e3:41:65:
b1:aa:2c:d1:fb:08:2a:35:c9:36:1f:d5:ca:b1:ac:
fb:51:38:79:3d:a6:d1:ef:dc:40:9e:f6:9e:0d:7c:
b3:27:8a:53:88:1a:02:ed:80:73:dc:02:54:37:51:
c8:66:b5:0f:01:26:12:d7:70:e2:db:ec:be:0b:1a:
af:f0:e0:74:1e:a2:7f:35:86:aa:47:f3:ea:c0:0b:
51:81:cf:09:cb:d3:bf:64:7f:83:88:48:03:63:0b:
70:83:c2:e6:9a:e5:fc:b5:04:64:a0:4f:ef:ad:0c:
56:83:1b:16:98:82:4b:45:06:97:6a:48:9f:d2:ef:
80:79:f7:d8:fa:36:f5:a4:8d:a7:b6:61:b0:49:f7:
45:13:35:0c:0d:76:ad:7a:96:03:c1:e9:b2:17:fc:
a6:3f:c8:62:a5:15:f7:62:e3:6d:81:81:5d:c6:e5:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:52:9B:1E:96:D3:4F:5F:2C:51:4F:03:0A:5F:BE:1A:F2:46:D1:F0
X509v3 Authority Key Identifier:
keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:73:9f:af:57:17:86:6f:20:67:fb:0d:77:1d:ca:d8:2d:44:
b3:35:3f:a1:17:1b:4d:19:ff:c6:bd:05:91:2f:6f:4b:05:5b:
ea:2e:43:2b:75:81:29:30:4b:ff:18:01:be:b8:20:9e:ad:8b:
61:4a:6c:03:49:0b:23:9a:38:4c:10:f6:37:be:2e:b2:2c:e8:
1f:a9:e7:aa:f9:2b:21:36:7c:06:43:56:5b:5c:fc:e7:27:be:
03:67:e9:f4:40:50:81:4b:3b:9c:ff:0e:2e:e1:bb:b8:f5:5a:
ca:64:aa:ea:8c:4e:ed:9c:d9:24:5b:5d:76:38:9b:db:72:97:
07:71:0f:aa:bb:02:81:c8:f7:c8:44:1a:28:22:dc:fb:f1:45:
7f:2f:6f:ea:16:fd:ad:d4:08:f6:16:db:36:54:c3:b0:fb:f5:
32:06:0c:94:67:63:dd:c4:aa:d8:fc:3e:80:49:73:d8:4e:e3:
bd:7a:84:35:7a:8d:d1:77:7f:99:bf:32:63:81:ca:da:30:2f:
e0:8b:4f:65:01:ab:e2:1b:b3:c0:4f:8f:bf:89:d8:18:93:3f:
f9:53:77:6e:05:66:01:23:9e:5b:64:0d:90:77:f3:9d:19:7a:
9e:13:26:43:24:49:23:c9:df:89:f4:44:eb:a7:f0:f8:ef:80:
05:da:79:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 08:13:51 2026 by rpki-client