This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json)
Hash identifier: 53F7DOVWZgNE1+8/tyU9vPYjeNwXLDWUmjI5xJAT2dw=
Subject key identifier: FD:A2:17:DC:1A:9B:88:DC:88:C8:D4:53:4C:3A:95:4D:FF:A9:16:8A
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
Manifest number: 0175
Signing time: Tue 20 Jan 2026 23:06:18 +0000
Manifest this update: Tue 20 Jan 2026 23:06:17 +0000
Manifest next update: Tue 27 Jan 2026 23:06:17 +0000
Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: zjjf8l3QtWM0CerqisMlWVTF3/Hwx0rUP55ag3qeHKY=)
2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: 2SwNRMkj6T5I+xJhiTiqcowlNSulg8/xazw4aFKGVAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 23:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Validity
Not Before: Jan 20 23:06:17 2026 GMT
Not After : Jan 27 23:06:17 2026 GMT
Subject: CN=69700a6a-a925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:a3:de:ad:ca:f6:9a:40:df:94:1b:01:28:
fb:0c:ae:66:e3:21:d2:a8:ba:7f:4e:bc:0b:42:fe:
57:b5:c0:bb:89:50:d1:64:f6:e1:f9:cd:6a:fa:8f:
a7:48:77:7b:5e:ce:15:1d:d2:d2:2a:19:2c:87:b9:
20:e0:07:1d:f6:25:d6:80:73:bc:06:f3:60:e1:e1:
4e:1a:e6:ea:c4:d3:79:87:db:12:1c:e8:8c:64:4b:
1b:7a:73:29:86:24:19:a8:fc:84:d1:6d:66:9b:a8:
8c:74:57:32:20:09:bb:a7:18:f4:c5:11:76:62:da:
c4:8e:7f:cb:2d:de:fc:21:c4:e6:16:57:45:55:15:
ab:ae:05:1c:be:2c:5a:60:81:07:24:17:3b:ed:82:
62:27:5a:58:ef:c1:9b:20:dd:e4:8c:37:cb:77:0f:
cf:dc:c7:55:e0:fa:f2:9e:97:ca:25:02:d6:b6:a4:
d1:17:95:3d:8a:d6:f9:c6:5f:c9:59:58:39:1e:f8:
26:dc:8a:86:44:65:57:5e:e4:07:55:c7:4b:36:5a:
d1:9c:22:02:39:6f:98:9e:3d:5e:ce:22:fa:fd:dc:
3a:47:bd:68:a8:51:26:4f:83:ef:de:46:1e:87:44:
6a:81:0b:18:32:50:57:ca:62:fe:7e:9c:47:e4:e6:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A2:17:DC:1A:9B:88:DC:88:C8:D4:53:4C:3A:95:4D:FF:A9:16:8A
X509v3 Authority Key Identifier:
keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:90:a5:20:a5:83:fc:e6:ab:7d:82:d2:4c:18:93:37:44:35:
26:19:a3:79:a2:ee:e3:93:5a:a2:8e:85:d9:47:f8:53:09:e3:
bd:71:de:49:7e:4a:7d:98:04:73:3b:9e:6e:08:2d:9c:ee:86:
24:9e:da:4d:29:b8:dc:67:5b:c9:ea:d9:89:1d:2c:78:7a:4d:
2a:04:eb:4b:e6:f7:83:a0:49:3e:ed:dc:89:a4:2f:27:e1:c9:
eb:f2:62:fa:61:8d:77:b9:c2:a3:67:fd:a4:e9:70:a6:08:d5:
26:9d:2c:36:1b:ea:63:c1:3e:b6:f5:4b:45:f4:1f:81:ed:50:
e8:35:e8:91:cc:b6:c7:92:77:56:5a:02:28:e3:91:c8:52:1e:
0e:35:9f:84:b8:df:7d:73:81:71:29:ea:55:bd:6e:a6:ac:3a:
fb:db:29:63:70:60:c3:e5:13:4d:bb:84:32:12:e9:36:d0:7d:
85:5f:6d:14:07:a1:48:10:d9:5d:94:5a:e5:c1:70:62:14:9a:
5a:b6:bf:c0:9c:b3:8b:44:d2:a9:4a:b9:f9:75:52:89:74:00:
65:42:05:3a:6b:eb:a4:e3:a8:fa:1e:93:78:e7:7d:d6:e6:37:
a8:d8:10:1a:ff:12:82:c0:c0:60:bd:73:56:42:90:4a:cb:c9:
ae:e2:cd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:51:35 2026 by rpki-client