This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json)
Hash identifier: 03qoJmfjq6BUdawMF3QOfcBKP6ca/SP0YvSBcdDAVpw=
Subject key identifier: 35:8E:71:C5:AD:36:56:E4:B0:74:C4:DB:46:BD:2A:9B:38:F5:D1:BA
Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A
Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
Certificate serial: 0AFA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
Manifest number: 0AE5
Signing time: Mon 26 Jan 2026 18:53:47 +0000
Manifest this update: Mon 26 Jan 2026 18:53:47 +0000
Manifest next update: Mon 02 Feb 2026 18:53:47 +0000
Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: lBjK7HA4KjB8ZgSDNAaaOCbE2pdoK3orXu9W90/Uqvw=)
2: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: QgJRfFH6YN7lRNZNVoON5AcD6zI0xlKC/pPKsOyjCXg=)
3: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: z5ES9QnxCtUmMGb5rTePskEShI6wqlkuHRSuLJa+HEo=)
4: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: Sq5YLnrI6niWLMeWLjro3RFtUrBz6mhWVJH2BrDvMPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl
rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 18:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2810 (0xafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
Validity
Not Before: Jan 26 18:53:47 2026 GMT
Not After : Feb 2 18:53:47 2026 GMT
Subject: CN=6977b83b-dd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:50:d5:d1:71:ac:e0:47:3f:ab:ee:ab:48:
76:43:c5:b1:92:e9:f2:cb:eb:46:88:80:7b:ce:33:
e1:be:5a:a1:8f:3f:28:7f:b7:92:6d:6f:e7:be:bf:
f3:66:4e:cd:fc:f2:2c:ab:fe:ed:03:29:76:1c:9c:
8e:0c:48:4f:84:94:d9:1c:cb:6a:16:aa:c9:7f:a4:
bf:2a:f1:42:b6:35:f8:9a:63:91:16:8d:f4:fb:7f:
87:87:0c:e2:9c:97:ba:72:09:8a:26:e1:bc:a1:e2:
4b:c5:de:bb:0a:3d:61:05:f7:92:d8:91:53:0f:c8:
51:10:41:dc:ed:c4:b2:27:f0:b1:9e:6a:2d:5c:e5:
a9:56:63:5d:e1:f1:d8:d8:58:46:a6:46:7e:02:3c:
10:03:61:8a:56:a7:65:69:e5:65:cc:ab:c1:1d:19:
ee:86:24:3a:5e:20:db:c4:4a:64:ed:d9:4e:ff:11:
e4:63:98:1a:a6:85:57:91:3a:2e:34:3b:4c:6b:59:
63:73:94:e6:01:0e:b5:e7:20:79:b5:b6:50:bc:8f:
da:f0:73:ee:37:18:06:51:9c:6f:70:20:31:14:bb:
ba:18:01:05:be:0c:fe:82:30:b6:cf:a3:19:28:dd:
57:41:f5:41:22:db:50:0d:f5:dc:b8:9a:19:f7:f6:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8E:71:C5:AD:36:56:E4:B0:74:C4:DB:46:BD:2A:9B:38:F5:D1:BA
X509v3 Authority Key Identifier:
keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:49:2c:ac:74:c5:91:0e:42:31:ea:86:ba:11:9b:c8:24:0b:
ee:66:6f:28:5e:a5:be:71:ef:db:d5:3a:b6:6e:41:e2:16:2b:
b3:53:da:5b:b0:8a:6e:ac:11:fe:25:80:83:32:0f:35:ea:04:
de:9a:9a:10:62:2a:3f:52:7a:61:92:8f:c5:41:87:9d:98:cc:
f6:08:62:4c:13:8f:c1:1e:91:48:58:81:21:04:e2:fd:5e:40:
ff:13:64:70:0d:30:4c:2d:42:e7:06:dc:a8:e4:4f:15:f5:05:
88:2f:27:d1:a4:d8:d3:e4:e0:50:15:90:76:94:4f:d0:f0:4f:
88:36:14:65:e7:83:68:6f:ed:e4:af:d7:38:6b:cf:01:18:46:
6f:af:dc:58:9d:ec:5e:d1:3c:7c:1f:c7:11:2b:43:6c:cf:79:
e4:77:4e:17:03:c5:45:38:65:2f:eb:77:9b:a9:e2:eb:eb:3c:
64:fd:a8:b8:a8:7c:b1:4e:2f:93:55:27:c5:ed:ff:b5:c8:4b:
a6:61:35:6f:a4:d6:ed:26:9e:ae:6f:f9:0c:47:de:39:61:65:
87:dc:f7:ef:7c:43:bb:8c:43:b9:2d:56:b3:7e:07:d6:f8:c0:
f8:bc:ae:5f:de:da:69:bc:d8:06:a2:9c:e4:0b:69:29:fc:7f:
58:22:00:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 05:35:59 2026 by rpki-client