This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json)
Hash identifier: JCN5KSgFD96zTc8BvwHqSrHROPgJoPRg4biEh34W3Yk=
Subject key identifier: 77:04:F2:19:09:DE:8F:CD:CF:EC:65:98:86:6D:C3:93:7A:81:4A:DB
Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Certificate serial: 081C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
Manifest number: 080C
Signing time: Fri 16 Jan 2026 20:27:50 +0000
Manifest this update: Fri 16 Jan 2026 20:27:49 +0000
Manifest next update: Fri 23 Jan 2026 20:27:49 +0000
Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: uc0De+VvMk+ZP/JELrCyW2ZvYPFCE+2FD668i9fBNYM=)
2: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: jJ0R9nlsxr/hD0yE5HWBzoK4P8dusyIdKYfDRYhWQyU=)
3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: 8jSRLsCTFalWuMWmzctOoaeQi0LA+9F2nrcfuS55eGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 20:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Validity
Not Before: Jan 16 20:27:49 2026 GMT
Not After : Jan 23 20:27:49 2026 GMT
Subject: CN=696a9f45-082d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:05:eb:e6:9e:fd:51:76:21:dc:92:aa:71:
c1:a5:c0:e5:53:ee:5c:28:5d:01:51:d5:03:d0:16:
f9:71:74:39:19:04:cc:8f:5a:17:84:18:fb:e8:27:
a7:2d:5b:8d:27:c6:18:1a:bf:8d:65:13:a8:3c:35:
34:d8:7a:ee:d4:96:c4:41:73:80:1d:5b:c6:60:c0:
a3:a4:e8:6f:d1:51:4d:de:e1:7c:e0:42:52:66:4a:
90:bf:27:22:99:1b:63:ff:0f:a6:84:0c:15:8d:1b:
ec:2a:7e:ef:f2:ab:01:6a:a5:a6:90:f1:14:20:4d:
70:e1:e2:7e:8d:6a:26:4c:9f:9b:d3:62:43:b6:03:
6f:b2:21:12:3c:d7:01:9f:26:f1:8f:7c:3b:5d:d4:
d5:62:3a:8d:fe:52:03:da:79:de:e4:23:2f:3d:ac:
2c:c4:ef:1c:79:0b:44:5e:fe:cd:90:94:6c:0c:5b:
59:c8:be:a2:05:c0:57:29:fd:7b:d3:dc:25:28:47:
20:fa:6e:1d:b5:70:69:f1:86:93:25:cd:eb:6e:d9:
2f:32:ff:83:79:e1:03:47:b0:f5:94:68:03:fb:6c:
63:96:8b:d9:ef:8c:2a:4b:bf:98:a6:f8:f5:5d:e0:
ad:ba:10:39:09:f2:94:92:6a:42:1f:7f:5d:0b:b5:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:04:F2:19:09:DE:8F:CD:CF:EC:65:98:86:6D:C3:93:7A:81:4A:DB
X509v3 Authority Key Identifier:
keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:79:74:ba:ef:b7:f5:00:78:35:9f:e4:f2:dd:5b:dc:3b:e3:
ab:1f:48:d6:f4:77:6e:cf:b8:00:0a:9a:76:a8:c8:d6:3b:e5:
ae:49:09:54:f3:54:57:d5:67:72:ca:a2:a8:95:85:d2:ab:17:
6d:93:38:9d:ea:f5:91:9f:d1:63:f9:68:76:14:18:ab:a8:38:
b8:7b:e0:fb:ed:0c:d4:c3:e5:d0:2d:91:eb:05:0d:06:71:f3:
3a:d4:79:06:43:5d:88:bd:aa:6e:1a:ea:ba:01:25:71:bd:be:
36:0b:92:66:20:d4:f1:d5:60:f5:d2:21:c9:90:ee:ce:17:2b:
c2:82:bb:01:99:2f:f9:75:1a:a2:f9:f2:4f:80:a2:56:f4:ac:
4e:7e:c1:14:dd:9e:96:c8:aa:85:34:fe:82:0b:f2:91:a7:dd:
11:c7:a3:d5:06:43:06:79:ea:b8:da:36:15:f7:45:bb:99:f4:
e5:32:60:3f:5e:ab:cc:28:57:61:f3:ff:fc:94:3c:ac:81:96:
df:3a:c8:e9:50:6d:12:c0:6b:27:5a:be:d7:7f:2f:e6:87:d1:
96:82:37:b9:65:aa:6c:d1:08:ae:eb:ff:9f:5c:8e:6a:e5:d1:
ea:7a:38:8b:b2:4f:fc:91:ad:2a:42:28:a6:9c:52:32:d9:ba:
90:0d:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 09:53:27 2026 by rpki-client