This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json)
Hash identifier: 5aKKgIKbK7IPMvdg0aEHlZe9StnXon3PbPCh4DjnIZc=
Subject key identifier: BB:FD:FD:C5:A9:53:56:E9:BF:87:E5:DC:04:B6:4E:F9:78:C1:C9:E5
Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
Manifest number: 0110
Signing time: Tue 27 Jan 2026 04:12:30 +0000
Manifest this update: Tue 27 Jan 2026 04:12:30 +0000
Manifest next update: Tue 03 Feb 2026 04:12:30 +0000
Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: fMAg+tsikqzZO0SUs+3giDLzDm6Dr2wne2HHKNk9cW4=)
2: DF6D4464818211F097447962C4F9AE02.roa (hash: uFriQ+Hd3GtX+b70XPw86L5pzFQw2KnB4KHG3QJkhcY=)
3: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: V41vD109qFi79qtSI0V3NbHmJv38JNXS4Cmmah3H2Gs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 04:12:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Validity
Not Before: Jan 27 04:12:30 2026 GMT
Not After : Feb 3 04:12:30 2026 GMT
Subject: CN=69783b2e-3bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:6d:69:48:c2:4a:41:2e:3b:24:e0:14:ef:
b9:49:ee:fc:43:70:aa:9b:92:96:31:cb:c7:5c:d9:
d4:27:4d:55:d7:5e:87:45:d7:15:4b:16:96:cc:9a:
39:0b:49:c2:84:48:7a:4f:4e:85:7d:6a:82:92:8b:
5c:4a:23:d5:54:84:e4:32:68:e6:87:00:d3:c7:ac:
9d:55:f0:9b:65:a2:54:63:9c:c4:4e:38:a2:b6:e1:
be:b2:ef:22:71:55:3d:07:c4:e9:04:51:26:14:c6:
9f:7e:96:9e:1f:f0:4f:b4:21:46:b4:b1:bc:d2:4f:
02:3f:99:d0:96:d5:25:e6:06:73:d9:7d:13:ec:4e:
4e:eb:f1:7f:c1:cc:97:75:e1:cf:98:f8:3f:f5:1e:
7a:09:42:ab:3a:1b:d9:ec:fc:02:5e:88:db:3b:7a:
49:e4:5e:fe:1d:73:37:64:30:be:3d:1b:df:29:24:
59:72:fb:04:46:57:a8:2a:8a:64:e5:8d:d6:6e:6a:
e6:fe:15:c2:24:20:44:71:ed:4f:15:77:cd:7f:3f:
4a:eb:c6:6a:9d:b5:dd:7b:a9:02:ab:af:87:80:30:
33:a9:71:34:8f:89:58:fb:a6:60:88:4e:9b:d9:50:
b0:05:d2:79:10:a3:51:f0:0b:f1:79:7f:3f:94:4b:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FD:FD:C5:A9:53:56:E9:BF:87:E5:DC:04:B6:4E:F9:78:C1:C9:E5
X509v3 Authority Key Identifier:
keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1b:1a:5e:b3:88:82:87:4b:00:a5:c0:15:d8:85:42:b2:d3:
58:a7:a6:0d:50:e6:ce:b8:f9:f4:74:d1:3c:56:ff:9f:63:f5:
26:bc:01:9e:ff:6d:a1:6d:40:ba:07:2c:73:0c:12:b2:c6:6e:
4f:07:84:b3:2e:f1:14:f5:57:9c:85:fe:e3:2d:a7:6f:3c:e2:
dc:a6:54:5e:1a:01:e1:96:ca:5e:b1:fb:b4:d1:d8:12:68:c3:
54:ee:26:e9:5a:67:35:23:aa:9d:16:9e:d2:84:84:6b:00:8e:
fc:91:72:0a:32:0b:3e:a1:90:73:1c:d8:f9:fa:94:ca:e1:ff:
5a:83:87:0e:47:a9:48:e6:8b:46:f6:4b:62:f0:fa:89:1e:d2:
b8:c3:b1:0a:8d:6f:b1:de:3e:b9:a4:db:bf:1f:a4:d0:53:46:
4f:78:c3:f8:f8:7d:59:a8:29:43:da:40:a6:f7:81:3d:60:71:
ea:ef:b0:56:6f:65:e6:f8:01:b2:66:44:a3:61:b2:73:19:c6:
34:ab:96:7d:28:80:91:ac:56:6d:8c:d1:5f:25:8f:24:12:fc:
d9:86:f2:ff:b9:d9:af:4a:57:e1:4d:23:20:ec:3a:77:64:f7:
28:5a:d3:40:da:04:ae:a4:81:bf:cb:a6:d4:1c:a4:44:04:2e:
3c:99:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:38:48 2026 by rpki-client