This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
File: E7lE6lgzzbdBH9TsaqHJYs87CIA.mft (raw, json)
Hash identifier: dge9vbB5m+Xl0lC+LQypof5AIdvEYgOVNuDHt6W+44o=
Subject key identifier: 8B:17:49:36:FC:61:08:4D:E0:D4:84:8B:3B:38:21:4E:9D:FC:53:C9
Authority key identifier: 13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
Certificate issuer: /CN=A91FCF44/serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
Certificate serial: D7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
Manifest number: D7
Signing time: Wed 21 Jan 2026 04:13:27 +0000
Manifest this update: Wed 21 Jan 2026 04:13:26 +0000
Manifest next update: Wed 28 Jan 2026 04:13:26 +0000
Files and hashes: 1: E7lE6lgzzbdBH9TsaqHJYs87CIA.crl (hash: xZgrsy37jHNq+lfV8LW8SmBETdu9eoMo15MDss0LPXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl
rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 02:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCF44, serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
Validity
Not Before: Jan 21 04:13:26 2026 GMT
Not After : Jan 28 04:13:26 2026 GMT
Subject: CN=69705267-4778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:c4:8e:5e:26:89:ed:c0:82:2d:11:20:2e:
ba:02:b9:dd:ea:bc:41:d7:33:2d:81:b9:d1:02:7f:
0d:e9:d1:c1:00:ec:ad:5f:92:55:98:fc:af:e2:b8:
cc:c9:42:43:1b:fb:ef:34:8a:a4:71:26:2f:2c:d5:
3a:7d:28:6f:79:88:f7:6c:43:ab:e3:04:bb:54:7a:
19:d4:12:71:87:28:9c:e6:ee:aa:95:6c:e6:1d:16:
95:56:67:e2:da:26:b6:03:2a:77:de:f3:2e:68:7e:
11:fd:7e:76:14:d9:b1:9e:b6:54:e2:b3:59:3c:0d:
34:ac:16:40:3d:38:b0:26:de:2c:40:d4:3d:88:d1:
25:09:bc:3a:c3:fd:31:79:cb:99:48:9a:8e:a8:14:
77:bc:14:73:55:91:9e:67:ea:df:a9:3b:3d:53:79:
b9:28:54:34:81:90:2a:d8:05:65:9d:06:ed:c7:17:
5f:10:28:5b:67:31:59:8b:d0:aa:54:ab:69:05:49:
75:85:c0:19:ee:bc:00:1f:d2:81:20:eb:2d:b5:22:
28:07:eb:4a:c4:61:94:2a:fc:d8:9c:01:a9:fd:90:
44:75:e1:53:25:c4:41:3a:bc:60:6a:73:56:ec:0a:
62:ff:cc:58:e3:ff:a4:f7:19:b1:31:e1:76:f9:2f:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:17:49:36:FC:61:08:4D:E0:D4:84:8B:3B:38:21:4E:9D:FC:53:C9
X509v3 Authority Key Identifier:
keyid:13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1a:d5:1c:2a:70:58:67:e6:c2:72:d2:f5:bb:4d:d6:2f:68:
55:56:6b:93:78:dd:4a:bb:2d:33:69:7e:d5:e5:36:30:60:44:
cb:e2:d0:0b:3f:be:a2:4d:aa:84:68:e5:e4:cd:4a:c8:de:60:
36:b2:51:2d:5b:92:88:ce:e6:4a:e6:ca:f2:0d:7c:12:9c:5a:
9d:ff:98:b8:24:28:9d:0a:75:da:f0:98:63:9a:3f:d6:b2:9f:
72:d9:0a:d0:6b:ea:38:37:aa:2e:82:dd:a2:bc:9f:b6:42:02:
d9:8c:2c:8f:b0:61:11:1d:c1:c2:e5:81:1d:5d:79:f2:2d:98:
11:57:b4:47:da:41:b0:5d:bb:08:be:23:59:c6:be:95:40:64:
c8:f1:d0:d7:b9:90:7c:b1:c4:05:dc:02:45:68:c9:4c:58:ce:
ae:98:b9:0a:63:68:0b:e4:0f:5a:90:4f:9c:47:f4:0c:fa:6a:
1c:d8:4f:70:00:0b:84:16:1f:a1:67:a8:f6:73:2e:6c:ae:d0:
75:65:8e:01:8a:d0:46:f5:a2:77:64:e0:5f:6e:f1:91:24:ca:
8a:10:bd:d7:c2:b8:3c:11:5b:24:64:72:45:cd:ff:23:ca:4c:
97:f5:d6:c7:ee:7c:1b:83:6d:05:2e:99:3e:a8:dc:20:c8:4e:
66:b1:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:52:45 2026 by rpki-client