This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
File: C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json)
Hash identifier: tfiUQncS3cjAz3yrFbKmVJDpEEfNg+qI1sVLAaKApZE=
Subject key identifier: 03:1F:0D:68:A3:2C:D2:C6:E4:90:75:45:88:8C:F4:24:05:02:FD:98
Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89
Certificate issuer: /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
Manifest number: 015C
Signing time: Sun 25 Jan 2026 03:22:30 +0000
Manifest this update: Sun 25 Jan 2026 03:22:30 +0000
Manifest next update: Sun 01 Feb 2026 03:22:30 +0000
Files and hashes: 1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: njCmgaQOfjoq5O4KBKmw1FJImc97OgrbVxeraFNqhRM=)
2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: EyKD4I3R8YSy4asXY+8xvf07IP4owJwI772hb1AAhAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl
rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
Validity
Not Before: Jan 25 03:22:30 2026 GMT
Not After : Feb 1 03:22:30 2026 GMT
Subject: CN=69758c76-b7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:37:9a:ba:d0:7b:3f:87:6e:cb:df:15:b4:42:
75:f8:da:24:60:99:06:d5:ba:43:ab:33:fa:bc:b6:
46:c2:b5:01:01:4f:c6:31:51:a9:cd:06:e2:f5:8a:
26:56:70:73:3b:2a:22:6e:76:c8:11:61:b0:c8:ed:
0c:10:04:22:a5:80:64:05:eb:a0:54:b9:ee:6d:20:
d5:cf:ba:8b:f4:85:6d:15:80:c0:2d:2a:db:a5:cd:
59:3f:08:15:a2:d9:1a:59:2c:0b:3c:2b:e8:14:0e:
d2:72:a3:ad:81:0e:d3:41:20:ce:c0:82:4b:41:2c:
82:a8:05:40:a4:f7:e8:46:f8:88:3c:7e:76:64:2b:
50:81:f9:8b:8c:18:c6:e9:8b:c2:d3:94:e7:f5:08:
19:86:c1:4f:20:fa:b7:1c:02:55:3f:ef:b1:be:f4:
5d:97:6d:45:19:14:75:ea:62:3f:e9:e8:d2:0b:df:
cd:84:9b:84:43:08:e7:5c:e1:a8:16:0f:3f:72:44:
b2:99:a4:6f:ef:33:b2:ce:75:d6:e7:b7:fa:a3:4d:
00:52:ac:5d:a5:82:9d:ff:6c:0d:1e:c7:24:8c:e5:
b7:c3:fd:df:c8:77:2d:46:ee:04:82:bd:0e:5d:2c:
99:4c:ee:f8:3f:85:eb:bb:8f:05:64:93:ce:92:ea:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1F:0D:68:A3:2C:D2:C6:E4:90:75:45:88:8C:F4:24:05:02:FD:98
X509v3 Authority Key Identifier:
keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:83:f0:0e:f8:f7:de:60:69:6a:e8:75:0f:21:0e:8b:52:1e:
ae:28:c7:34:40:4d:1d:fd:aa:31:ec:83:bb:d6:5d:3f:40:d1:
e6:31:c9:68:3a:8b:ba:3a:ea:01:10:af:89:57:31:fe:aa:e7:
d2:fd:0e:0a:9a:77:44:94:9d:21:c1:18:0f:81:0e:9f:15:a4:
fe:aa:f3:a8:75:1e:f9:67:9e:0c:56:ab:c1:ef:3a:7a:52:ab:
53:d6:95:9c:9e:b4:3e:a2:88:05:6c:93:b6:0d:41:95:bd:2f:
2f:58:68:c4:a7:75:5d:bc:9f:dc:e5:2f:62:76:61:49:88:a2:
62:79:16:0d:b1:e6:6b:e4:21:2c:7f:8f:05:14:3b:26:b1:35:
d4:11:0a:83:1e:3c:c0:ca:0f:57:ed:96:db:d5:c6:57:31:44:
5a:ee:f7:35:90:77:a6:b9:00:18:a2:42:f1:84:29:60:1e:e8:
55:ba:86:ac:6b:ae:a0:c8:02:86:e3:30:e7:fc:8f:1d:5e:18:
b7:cd:ed:18:48:3d:b0:dd:5d:41:ba:50:72:56:63:14:10:21:
83:90:09:c7:bf:e8:3a:39:45:84:de:89:50:99:5a:2b:9a:d5:
45:43:60:02:e9:c7:4f:20:23:3e:2c:a8:0f:a9:cf:49:f8:22:
34:56:a6:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI2QjMxMTAvBgNVBAUTKDBCREFCNjA4NjE3RjNDMzE4M0M0NzBGNEU2MTlCMjc5
NUY3NUMzODkwHhcNMjYwMTI1MDMyMjMwWhcNMjYwMjAxMDMyMjMwWjAYMRYwFAYD
VQQDDA02OTc1OGM3Ni1iN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjDeautB7P4duy98VtEJ1+NokYJkG1bpDqzP6vLZGwrUBAU/GMVGpzQbi9Yom
VnBzOyoibnbIEWGwyO0MEAQipYBkBeugVLnubSDVz7qL9IVtFYDALSrbpc1ZPwgV
otkaWSwLPCvoFA7ScqOtgQ7TQSDOwIJLQSyCqAVApPfoRviIPH52ZCtQgfmLjBjG
6YvC05Tn9QgZhsFPIPq3HAJVP++xvvRdl21FGRR16mI/6ejSC9/NhJuEQwjnXOGo
Fg8/ckSymaRv7zOyznXW57f6o00AUqxdpYKd/2wNHsckjOW3w/3fyHctRu4Egr0O
XSyZTO74P4Xru48FZJPOkupV3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMfDWij
LNLG5JB1RYiM9CQFAv2YMB8GA1UdIwQYMBaAFAvatghhfzwxg8Rw9OYZsnlfdcOJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DNTU0MjNBQUU2
OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BER0R4SEQwNWhteWVWOTF3
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0M5cTJDR0ZfUERHRHhIRDA1aG15ZVY5MXc0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjZCMy9DNTU0MjNBQUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BE
R0R4SEQwNWhteWVWOTF3NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJg/AO+PfeYGlq6HUPIQ6LUh6uKMc0QE0d/aox7IO71l0/QNHmMclo
Oou6OuoBEK+JVzH+qufS/Q4KmndElJ0hwRgPgQ6fFaT+qvOodR75Z54MVqvB7zp6
UqtT1pWcnrQ+oogFbJO2DUGVvS8vWGjEp3VdvJ/c5S9idmFJiKJieRYNseZr5CEs
f48FFDsmsTXUEQqDHjzAyg9X7Zbb1cZXMURa7vc1kHemuQAYokLxhClgHuhVuoas
a66gyAKG4zDn/I8dXhi3ze0YSD2w3V1BulByVmMUECGDkAnHv+g6OUWE3olQmVor
mtVFQ2AC6cdPICM+LKgPqc9J+CI0Vqbw
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:45 2026 by rpki-client