This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
File: CJy1orM7eG11SgfWgKnElBQmGeE.mft (raw, json)
Hash identifier: xT2dPZOBLudYHCdn0XskHiWL9WEm5jI6AVgDr18ItU4=
Subject key identifier: F6:74:4D:53:F0:4C:B4:8D:80:E4:BA:FF:5C:4D:9A:7A:6B:6E:82:34
Authority key identifier: 08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1
Certificate issuer: /CN=A91D0C18/serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
Manifest number: 0105
Signing time: Sat 17 Jan 2026 04:13:12 +0000
Manifest this update: Sat 17 Jan 2026 04:13:11 +0000
Manifest next update: Sat 24 Jan 2026 04:13:11 +0000
Files and hashes: 1: CJy1orM7eG11SgfWgKnElBQmGeE.crl (hash: ZVuY83bxadqtG3m2MlUuqeebnGXKWS+uPkIIpO/sxvE=)
2: EEE0092A646611EFA25D167EC4F9AE02.roa (hash: 2I1s5RbX9mRnDSwDS9XqFVY3yT7dmC+Kb1B8YfP6Dhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl
rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 04:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C18, serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1
Validity
Not Before: Jan 17 04:13:11 2026 GMT
Not After : Jan 24 04:13:11 2026 GMT
Subject: CN=696b0c58-0402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:bd:fc:10:d4:c4:35:c4:24:ca:d5:01:23:
6f:01:14:b2:dc:c2:c9:92:18:d6:c7:95:89:bd:a8:
83:5d:91:52:9b:b4:1f:a6:15:7b:f5:44:49:62:c0:
e2:e8:8d:fa:c0:a1:3a:f3:22:1c:fa:9f:19:dd:06:
93:81:0c:23:1a:ae:af:0e:74:27:4e:aa:7d:e2:9d:
b8:09:ee:51:17:5c:ad:8a:2b:27:84:f7:78:4c:1e:
b8:8f:0f:65:b4:2e:18:c0:88:f7:64:2e:e7:7a:5e:
5c:b4:74:66:ac:4f:70:12:da:2c:4a:93:26:75:5d:
02:ee:6a:f0:d2:15:df:96:e4:88:20:c6:f8:ff:f7:
f6:c4:f4:ae:68:73:e0:13:7c:a4:d8:d2:24:3c:1a:
08:fe:ea:09:e5:d1:8f:95:0c:ca:f2:bd:33:9d:1e:
d2:57:a4:93:6e:f0:55:64:ce:54:51:7e:5d:40:93:
60:a4:b1:36:f0:ad:99:98:62:1b:65:44:b1:91:e4:
b1:a3:2d:cf:ba:bc:f0:9f:85:31:63:62:d4:9c:3e:
2e:20:29:35:1f:c7:b8:4f:00:b5:e6:49:f3:18:a7:
8b:a2:c0:01:70:fe:0d:aa:2d:19:24:3a:cd:44:72:
5a:ee:9a:e6:ec:ce:99:68:66:f0:13:f7:b2:5b:b8:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:74:4D:53:F0:4C:B4:8D:80:E4:BA:FF:5C:4D:9A:7A:6B:6E:82:34
X509v3 Authority Key Identifier:
keyid:08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1f:5e:8e:26:97:98:72:65:fb:a3:ff:1b:8e:77:6d:67:a0:
92:55:6a:03:07:bd:34:1d:ca:ea:16:92:a7:61:d4:5c:92:b3:
58:0b:36:ff:e3:5b:27:1b:97:dc:50:a4:bf:36:a6:5c:2d:19:
9d:5d:38:bf:62:67:ad:61:23:1a:2b:6c:43:dc:0b:7f:82:37:
33:fa:5e:1f:a4:e9:ac:a1:a6:c0:08:e4:85:8f:5d:c2:a4:c7:
9d:1c:51:25:7c:fe:90:ea:65:a4:fb:49:29:c6:41:65:6a:37:
60:75:e5:f9:6c:7a:d3:78:ed:6d:06:1e:8c:78:26:c1:8a:7f:
9d:d5:d5:cb:13:c2:98:37:51:1c:1a:69:52:7b:42:08:4d:50:
e8:a2:90:0c:f6:2d:dc:fb:00:f9:b8:22:d9:ac:3b:30:ee:bc:
ba:b0:20:de:2c:a3:9e:77:b3:2d:f1:aa:af:98:08:3a:4b:51:
26:7e:8d:fc:6c:15:43:fe:5e:e3:d7:2b:ca:f6:7e:9b:42:28:
3b:96:3b:7d:20:a6:b6:41:64:62:17:7c:7c:c3:bb:ca:c8:a8:
24:76:e2:20:81:18:18:72:57:35:91:0b:76:81:dd:6a:5d:ea:
db:1a:db:d2:42:88:56:4c:51:a0:31:26:b9:0e:d0:f5:3e:b1:
4c:1e:74:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:11:15 2026 by rpki-client