This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json)
Hash identifier: e6bKx0U5YVL6NqF9nWY4evO6p4OsoRD4bxT42nKtL6c=
Subject key identifier: E4:A1:41:1B:6C:E1:A0:EE:52:FB:55:5B:A5:42:CF:3A:84:59:CE:81
Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
Manifest number: 86
Signing time: Sat 17 Jan 2026 05:43:05 +0000
Manifest this update: Sat 17 Jan 2026 05:43:04 +0000
Manifest next update: Sat 24 Jan 2026 05:43:04 +0000
Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: YmOEJhTQZQuqY446EpXqtTuPsRinFfel4boiJ/vWI8A=)
2: 05F9354AB48011F088AD0013C4F9AE02.roa (hash: pomJDchvt2RN7hAYLHjLN2Mga9nkvGsLFywiYuDOK+8=)
3: 07D143BC294811F0BE054340C4F9AE02.roa (hash: K8uT5TP7//cBmcF7feLDT0FFy5NmQsLnJ4R26tv3O6s=)
4: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: BGxaxmK1Rc2u9Sc8xMRRL969zXBpia6mSkZ8lM9pZcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 05:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Validity
Not Before: Jan 17 05:43:04 2026 GMT
Not After : Jan 24 05:43:04 2026 GMT
Subject: CN=696b2169-7f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3e:ec:76:93:f1:62:c4:c1:9d:b8:37:9d:86:
fd:f5:00:7a:96:77:33:b8:ca:6f:6b:22:e9:00:75:
98:56:dc:97:6f:5a:d3:07:e8:24:89:fb:21:78:fd:
ce:3c:56:df:f2:e1:27:c2:20:8a:39:b9:83:3d:e7:
5b:de:c8:48:03:71:ae:8c:7b:ed:38:c9:1c:cc:73:
50:8e:3b:de:bb:16:cd:4b:ac:83:6d:59:24:95:d3:
0d:66:1b:ab:84:70:95:37:0e:81:b1:2a:ec:f3:a1:
4d:47:2f:3b:cd:28:6d:4a:9b:87:55:fa:24:b3:33:
f6:2d:c8:0d:7f:7a:21:47:53:4f:f9:9d:4a:30:88:
1b:52:15:a4:99:1e:b3:8e:0d:36:58:da:9e:80:66:
8b:bb:67:d7:56:32:b5:36:50:75:e4:ce:c3:84:d9:
cb:b8:5f:3c:67:71:20:81:dc:0a:71:5b:6a:ba:3b:
a5:f9:41:fd:a5:95:b3:ab:4d:43:31:4c:8b:5d:9c:
b1:b4:eb:9c:cd:8b:1e:39:5e:f8:2a:be:e8:cc:a8:
97:80:c8:ff:c1:f9:b9:32:45:8a:d5:de:41:7e:9a:
a5:3f:af:8a:3b:3e:13:e3:44:f1:d6:a7:51:5e:37:
ec:dd:ee:95:6e:78:e9:ab:45:48:98:f4:f0:b5:b3:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A1:41:1B:6C:E1:A0:EE:52:FB:55:5B:A5:42:CF:3A:84:59:CE:81
X509v3 Authority Key Identifier:
keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d7:b9:f3:cc:bd:01:78:39:4e:94:eb:29:02:ac:04:5f:f3:
48:f8:44:3e:2c:0f:2c:aa:2b:0b:62:8a:62:b0:36:b7:d8:5f:
14:5b:c7:e9:06:ea:74:a1:b7:cb:07:f0:3c:cc:eb:86:4b:d7:
fd:84:ec:f4:0a:b7:16:f0:57:ac:b7:63:bc:4c:c3:6e:78:62:
9d:30:7a:d9:1e:d5:2e:56:38:35:25:78:e8:8c:e9:ee:8a:73:
c9:35:d9:8d:77:1f:be:6c:08:3c:6e:7f:17:e8:0b:ce:1f:93:
e6:1e:87:dd:17:7e:52:ba:d0:a3:3b:5b:9c:b3:6b:c0:ee:5f:
dd:22:ce:72:22:20:ab:0f:e2:dc:b6:08:15:ae:34:46:e3:5e:
15:0e:43:2f:0b:7a:96:49:81:88:7c:a3:49:44:a2:4c:9a:5a:
d1:55:c2:12:39:76:0f:e7:bd:ad:61:81:7f:b6:a1:37:02:2b:
3d:6b:ab:2a:18:a0:9a:9d:bb:82:d2:00:5d:d3:46:1b:47:3c:
d3:43:f3:19:86:dd:8a:02:73:e5:ed:95:ae:f7:72:bc:95:f3:
83:3f:d9:31:1a:84:f7:97:cd:5b:31:32:f9:5b:96:d3:c6:4f:
96:7e:c3:8d:9a:c9:3d:b5:55:e8:9b:87:82:af:32:c6:e1:ed:
7d:4f:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 03:11:18 2026 by rpki-client