This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json)
Hash identifier: SKPzzZfgzxphtu9CtVN3fDOE0ShxkZvJXNgdy60YPVI=
Subject key identifier: 41:0E:A3:57:BE:FD:85:4B:AD:DE:59:A7:DB:E8:85:18:5B:8D:7F:13
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial: 2657
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
Manifest number: 2645
Signing time: Tue 20 Jan 2026 15:33:39 +0000
Manifest this update: Tue 20 Jan 2026 15:33:38 +0000
Manifest next update: Tue 27 Jan 2026 15:33:38 +0000
Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: zeUaOnzXpHgx5HNKWza6wsJ7eltTXEdaLM0msaRJSm8=)
2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: MwkxKey8SdTfX3rA2ndaHPVnUsJ97475p+Dzwmyl9SQ=)
3: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: gP1rmRhgK5le3CICuUOYmVhhDItIyOhZ8RIHh+3gkE8=)
4: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: UiQJQcjiTKGUKZaMNBKg71L13IK59w5XS6QCL7nnWSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 15:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9815 (0x2657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Validity
Not Before: Jan 20 15:33:38 2026 GMT
Not After : Jan 27 15:33:38 2026 GMT
Subject: CN=696fa052-ca6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:22:56:f7:59:e0:bc:14:f0:7f:b2:8b:ad:
71:6b:27:8c:31:fc:4a:ae:52:cd:ce:a5:27:cc:b6:
8b:df:d9:50:11:68:e4:8d:b2:ca:fe:25:00:3c:c0:
a1:7b:1d:48:3b:ba:f1:36:52:ac:27:19:af:38:45:
0c:a0:26:6f:e1:92:ef:b5:17:b9:1a:14:16:a4:c5:
98:38:a1:70:e4:6d:9e:97:fa:95:3e:83:c7:1e:a8:
fe:e7:fc:c7:b4:ae:25:b0:01:b3:d1:d0:04:49:50:
5f:24:f9:b0:eb:1c:86:91:45:c3:d3:a8:04:ff:b5:
3d:27:bc:a6:d0:4d:37:8b:95:e6:f5:ef:90:01:42:
d9:8d:53:89:ab:19:71:35:76:f3:36:e9:a5:2a:6f:
fc:ba:41:84:c7:54:d6:5f:64:2c:5a:4c:b0:81:79:
8c:40:a0:06:9a:e7:7c:68:3a:4d:5b:78:ec:ac:fc:
cd:a7:b0:20:35:55:ac:8b:79:67:78:7f:07:83:f5:
42:99:a5:30:c0:3f:41:b0:af:55:a4:5b:a4:1e:2b:
be:28:d8:6b:97:84:a8:71:d5:96:0b:7c:cf:e0:51:
72:dd:e5:db:fe:5a:81:b6:18:8a:98:9d:1f:72:2b:
38:0d:ce:71:ed:5e:74:b6:89:8a:16:be:a9:d5:54:
de:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:A3:57:BE:FD:85:4B:AD:DE:59:A7:DB:E8:85:18:5B:8D:7F:13
X509v3 Authority Key Identifier:
keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:2f:e4:21:92:f6:9e:d4:e5:2d:30:5c:aa:1d:fe:2a:0b:33:
2d:8d:6a:a1:eb:ee:a4:e3:60:8e:7a:fc:04:57:ff:18:18:e2:
c4:e4:0a:d2:4e:c2:b3:c1:fa:55:7d:72:44:04:5b:14:51:e9:
2f:0a:e2:39:c1:83:d4:67:04:a9:b3:70:9b:39:50:30:3b:21:
6c:21:ae:bf:1b:24:f8:df:eb:31:58:6e:99:dd:1a:4c:23:65:
c7:e5:60:02:f8:41:d5:8b:58:04:7c:6b:fe:e2:60:83:43:5b:
10:04:78:ec:1f:54:7a:90:5b:e3:b0:a1:82:cd:75:b6:4d:79:
b5:28:a4:14:df:02:23:bd:bb:a9:c8:cb:3c:c5:0b:32:a4:a0:
cb:5f:d2:5c:fe:16:d1:3f:67:0c:89:f1:2c:c3:45:1a:a4:25:
f5:bb:e0:30:9a:7b:40:96:fa:84:fe:fe:ac:24:ad:a1:7c:60:
d5:7a:05:b4:d3:6d:40:79:54:a8:6c:f5:29:04:17:17:b7:9f:
68:d3:50:35:7f:02:50:3e:1d:8b:b6:6e:4c:25:30:0c:e7:91:
85:54:c5:72:be:4e:49:e7:8a:b4:1e:8d:77:84:95:93:d9:cb:
e5:5b:29:89:4e:7a:c4:03:a8:03:fc:33:75:a7:2a:6f:a2:3a:
5b:97:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:44:22 2026 by rpki-client