This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json)
Hash identifier: P/Vf/oYNdZFGZRtui4X1cuKb/7PT/XaEYXl9dTcwTP0=
Subject key identifier: CB:2A:85:D6:CD:D5:E4:A9:EE:AF:D4:A3:AA:57:A7:14:A5:BE:3E:48
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial: 0442
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
Manifest number: 0438
Signing time: Mon 26 Jan 2026 23:28:09 +0000
Manifest this update: Mon 26 Jan 2026 23:28:09 +0000
Manifest next update: Mon 02 Feb 2026 23:28:09 +0000
Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: bLm6abhSO4X7GOrRnIY2VStbphtW4J1BqjgU2OWbKM8=)
2: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: dBKzmRV5kLqxEgnT/9vEMvol4LmNVdPd79i3sVZVmJg=)
3: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: 9DfUOxvFR13SpwnP9dE6JJ+qwtWuEZ4XB8tC3ndW1gI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 23:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1090 (0x442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Validity
Not Before: Jan 26 23:28:09 2026 GMT
Not After : Feb 2 23:28:09 2026 GMT
Subject: CN=6977f889-e6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:09:c5:b6:31:79:97:b6:53:da:a0:63:7e:
fd:22:8e:d5:86:80:8a:24:e4:2b:b8:66:05:6e:22:
29:ab:d4:ac:7f:71:54:a7:ba:9e:ca:5e:a0:ed:16:
47:b1:40:05:18:cd:6e:95:db:ce:93:6f:71:78:d6:
cc:5a:53:64:41:12:05:10:64:06:50:57:6b:42:d7:
b2:bc:91:53:dd:3b:b3:b4:9d:d5:42:43:dd:9b:a1:
69:2b:23:72:16:ae:84:a7:fc:ca:a0:b8:67:8c:56:
84:d4:0d:5f:af:9c:93:70:3c:86:fe:bc:a6:61:59:
8d:6c:a6:d2:f7:57:da:e5:6f:e4:43:2f:1a:cf:05:
d2:50:52:53:63:4d:ce:bf:e7:ee:63:e5:96:cb:19:
dc:72:14:54:a1:9d:2e:c1:0a:76:5d:71:e1:63:68:
ed:37:e1:7e:ab:53:66:80:84:65:4e:26:15:6a:d7:
43:a5:e3:b9:c0:da:87:37:53:3d:70:77:40:4d:c5:
c5:f1:13:0f:d0:f4:9a:a0:7d:3c:95:92:65:56:d2:
8e:8b:3f:b4:01:99:8b:e3:d0:31:21:d9:44:28:ed:
27:d1:8c:f1:0a:b6:8f:3a:ec:e8:50:f6:68:9a:d9:
fc:7c:98:af:4d:e5:79:2b:5f:73:2d:d1:f7:08:32:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2A:85:D6:CD:D5:E4:A9:EE:AF:D4:A3:AA:57:A7:14:A5:BE:3E:48
X509v3 Authority Key Identifier:
keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:46:5c:f8:e7:07:1e:6b:1c:0e:33:5a:e4:2e:fd:62:4b:07:
3c:80:eb:4b:54:87:62:46:98:14:89:94:bb:5a:39:2b:f3:dc:
b3:0c:b1:19:ed:a5:6d:ba:91:a5:af:72:5a:db:9b:03:a3:dd:
e7:a1:66:10:e4:00:4c:80:ae:57:c4:fb:d9:00:25:69:03:4d:
83:9e:3e:e4:69:7a:0e:0b:9a:20:fb:98:99:f8:5a:91:4a:a0:
f5:94:22:94:6e:ac:4c:20:0e:5a:2e:a5:cd:b5:04:f0:5b:c5:
b8:fd:c1:b9:14:4e:9d:1a:33:be:c4:7a:b2:3f:e6:31:24:27:
3b:9d:5a:93:ad:cd:95:28:42:92:41:ea:10:db:24:34:cc:54:
a2:26:c3:b6:0c:45:fe:25:a3:45:b0:e5:94:19:af:28:1c:c8:
28:7e:b1:f3:60:fe:38:0f:54:7c:b1:0b:f1:60:52:f9:12:4d:
ac:ea:61:21:af:57:51:a1:64:f1:45:d7:c2:1f:5e:42:44:5c:
55:b7:0c:8b:52:b8:de:0f:d2:96:3c:5f:8c:65:fe:06:f9:f0:
ea:a6:59:04:b0:9a:89:ac:5f:3d:1f:48:43:e5:43:12:aa:f0:
c6:77:e4:37:80:7d:40:18:ce:b8:53:e8:fb:0d:be:8f:a0:4b:
25:0d:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:38:52 2026 by rpki-client