This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json)
Hash identifier: /5BgO2wTVP41P+97nnta3BKekV8gZJBsn4ln9LiX4D4=
Subject key identifier: 7B:9B:3A:32:2A:0E:3B:00:5E:5C:B1:CB:19:B8:C4:B1:50:93:36:3E
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial: 355F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
Manifest number: 3532
Signing time: Tue 20 Jan 2026 14:35:46 +0000
Manifest this update: Tue 20 Jan 2026 14:35:46 +0000
Manifest next update: Tue 27 Jan 2026 14:35:46 +0000
Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: a00CzBXxGgGUAwz77esuU/QIH1sOR9oW1JAwfVC4AfQ=)
2: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: YTAhLYofQ5bGqpN1MRJJdGJjIa93aOaav1SZOkx9D70=)
3: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: tRzHmoCM5bp0eiCAe2WTWAhqYkb98p9OjQpa6ZuzTto=)
4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: 2sM6dqjwFaWvanKsFaRgJilTOFHKXatSdEC+MoptC6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 14:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13663 (0x355f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Validity
Not Before: Jan 20 14:35:46 2026 GMT
Not After : Jan 27 14:35:46 2026 GMT
Subject: CN=696f92c2-5cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:02:50:fc:d8:ce:8a:9e:4c:ee:fb:ce:fd:
76:c8:ca:66:26:ac:6f:0f:46:4a:c5:cd:6e:ba:ac:
65:2c:3c:cf:05:36:9c:41:0f:95:b3:12:fb:4d:c2:
9f:58:2b:50:8b:70:59:cf:6d:80:8f:bf:59:5b:75:
b0:12:fd:7e:d2:ca:84:7c:a4:e5:eb:2b:7b:b6:ec:
81:37:40:98:d1:a1:ff:81:3e:2b:ec:49:45:88:a5:
8c:72:59:7c:a1:c2:ff:d9:54:df:ae:67:d4:8d:a1:
46:8e:e0:b8:dd:3d:6d:02:7d:92:e6:02:2d:f6:d7:
3f:ab:ec:71:73:85:50:cf:f3:6d:dc:48:33:c4:4e:
46:91:d3:de:e8:58:0a:1e:78:7d:15:df:bf:09:6b:
7d:72:65:c8:34:72:66:30:08:29:82:bd:57:82:6d:
34:11:4d:11:1c:4a:5c:69:74:d8:48:e7:00:9a:31:
a5:63:a8:c0:c8:86:1a:0b:23:bc:a8:77:48:18:72:
6c:74:9d:2a:a1:4d:fb:9e:9e:86:87:eb:b3:e6:6b:
75:4a:f1:4e:46:b6:16:83:c9:0f:3f:c1:ab:42:39:
01:73:b4:70:52:a8:ef:e4:d2:ac:1c:9d:d6:07:00:
fa:0e:5d:bf:93:1a:07:15:05:be:da:db:c6:17:2c:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9B:3A:32:2A:0E:3B:00:5E:5C:B1:CB:19:B8:C4:B1:50:93:36:3E
X509v3 Authority Key Identifier:
keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e4:5c:97:1e:ef:af:d3:12:63:e6:f1:85:7d:df:11:0e:dc:
e1:89:bb:1e:b4:86:9b:16:48:12:fa:ea:85:76:9a:83:34:be:
d8:7e:83:79:a7:10:2e:a2:db:b0:81:d2:fc:85:52:65:83:1e:
ee:ed:16:ba:0f:d5:ed:1b:09:86:9c:b4:b8:3c:d7:48:cb:24:
fa:e6:6f:9b:ff:73:79:1d:8e:e0:d0:54:04:6d:43:3a:26:f3:
d5:b7:f2:10:4e:06:76:c2:51:34:ec:a0:36:26:15:c6:f4:e3:
4c:89:d4:3c:eb:a8:73:f9:2d:09:c4:4e:0a:4a:37:20:48:d8:
d1:49:40:35:4b:35:cf:ec:76:23:1c:66:cf:94:0c:e2:53:a2:
f7:83:d6:ab:bf:52:ae:61:4e:e8:9d:65:40:69:08:49:41:fe:
9d:6d:cc:39:1f:b0:c9:43:06:f9:4e:8c:43:9c:93:39:c2:8b:
8f:27:74:a6:af:54:6f:b2:3f:13:53:dd:66:1c:6d:0f:4e:ea:
da:18:89:a2:15:ed:14:d1:95:bc:ef:67:08:05:22:07:33:dd:
9f:1e:4d:07:64:c5:79:d0:4f:28:16:c5:0a:dd:7e:37:b7:2a:
ab:95:82:fd:ad:0f:c9:db:cb:ae:9d:09:4c:9f:7a:4b:cf:47:
cd:ab:51:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:36:53 2026 by rpki-client