This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
File: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft (raw, json)
Hash identifier: 5s8pSmfMxzzhrFTjVZdAh3FmBx3pJHtUVaKbicOZP7o=
Subject key identifier: 1E:5A:E1:ED:5A:40:D8:8A:FA:C8:4D:9E:DD:CF:C9:1E:56:19:CC:AC
Authority key identifier: B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59
Certificate issuer: /CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
Manifest number: 012A
Signing time: Sat 17 Jan 2026 03:55:16 +0000
Manifest this update: Sat 17 Jan 2026 03:55:16 +0000
Manifest next update: Sat 24 Jan 2026 03:55:16 +0000
Files and hashes: 1: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl (hash: jlZJlKoMChe25y40T06oXQ//sEkLq/eyD9UdYdUom1A=)
2: B4F165084F1F11EFA3B1F709C4F9AE02.roa (hash: 6g7DJTli/YH5hSeeCwQn1OlBs7GZnC1wNbHw8krPxSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl
rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 03:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF17A, serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759
Validity
Not Before: Jan 17 03:55:16 2026 GMT
Not After : Jan 24 03:55:16 2026 GMT
Subject: CN=696b0824-689e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:7f:e8:fa:6e:3b:0e:9f:d6:50:05:d6:aa:
6d:00:8a:dd:21:73:7e:7c:3f:9f:78:eb:0e:04:90:
85:86:87:72:dc:46:ef:1c:96:f7:87:3d:05:0f:1c:
33:5e:20:3d:39:a8:4b:3c:d8:33:3c:2b:e1:91:6a:
84:c1:22:9b:59:b2:e2:67:14:f2:c2:06:43:57:29:
71:89:06:e9:17:03:55:72:ad:00:c1:ad:d4:99:20:
79:6a:1b:d7:8b:fd:c6:11:f2:61:96:1d:54:0f:83:
21:da:e2:ec:1e:b4:34:86:50:97:91:32:40:99:a1:
a1:1a:71:c9:79:b7:9c:49:33:51:79:71:8a:6d:2c:
ee:62:f1:2f:87:7d:c8:30:1a:cd:6c:92:57:5b:01:
04:b6:d6:2d:1a:3c:1f:08:0f:f3:02:57:0e:40:9c:
41:1c:df:f7:f7:8a:5a:91:23:5e:cf:8e:18:ae:59:
9d:a7:e9:39:6b:a4:23:48:28:54:e0:5a:d9:58:ee:
c7:72:8c:a9:01:57:cb:e0:ab:a2:08:cd:3c:6c:46:
49:4d:fd:8c:8e:1d:2b:1a:c8:d4:6a:c4:07:ea:54:
b6:ba:dd:24:88:31:eb:a8:22:aa:6c:eb:a8:70:74:
cd:10:00:2f:4c:6a:f3:d6:fd:1c:5c:71:ec:c1:d0:
80:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5A:E1:ED:5A:40:D8:8A:FA:C8:4D:9E:DD:CF:C9:1E:56:19:CC:AC
X509v3 Authority Key Identifier:
keyid:B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:64:a9:12:77:03:bd:39:80:31:51:31:90:54:6a:01:e9:c5:
65:ae:03:e1:00:9a:ec:ef:3c:78:be:e6:98:1a:45:7e:dd:fc:
50:29:4f:68:d0:02:87:cd:95:0b:58:a3:48:48:2f:f2:ab:41:
a3:71:86:39:f3:55:95:f9:a6:ba:2b:be:59:02:66:48:e4:4e:
b5:81:c8:21:74:cb:46:a4:be:0d:fe:91:2d:c9:84:16:c0:c5:
f2:af:0e:dd:77:24:6f:0c:1b:91:86:4b:f4:8f:ef:cd:d4:90:
26:21:a6:24:10:82:ac:5f:3f:98:5e:f1:dc:ae:df:94:8d:dd:
54:d6:a7:ba:bb:c4:40:e4:9d:05:7a:6b:13:c2:e5:49:e1:56:
b0:02:e8:89:a5:67:56:69:b2:7e:5d:0c:ec:e4:98:f7:b6:3f:
ec:8b:4c:d1:fc:29:c4:f8:84:ef:a8:d3:55:e9:11:32:24:91:
cd:bb:9a:93:c4:72:da:9b:6a:bd:05:c8:55:a3:aa:c1:00:ed:
a0:ac:6f:50:6c:01:13:3f:d1:0d:05:91:cf:e3:4e:43:2e:22:
20:3c:4c:d5:ad:e0:4f:f9:81:d5:e1:e8:7d:f4:1a:75:56:8d:
15:ea:ad:fb:a8:32:13:c1:83:92:a2:09:84:a3:c6:cd:d3:66:
fa:d5:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:11:56 2026 by rpki-client