This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
File: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft (raw, json)
Hash identifier: 4egqJhHftNdTNUiPWKBr3t+rMh6hQU1WGhTGYpLShBE=
Subject key identifier: 02:E2:CD:E7:A5:96:E7:70:38:D4:65:85:51:FB:15:B8:31:A1:AA:17
Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
Certificate issuer: /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Certificate serial: 0309
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
Manifest number: 02F7
Signing time: Sun 25 Jan 2026 00:29:39 +0000
Manifest this update: Sun 25 Jan 2026 00:29:38 +0000
Manifest next update: Sun 01 Feb 2026 00:29:38 +0000
Files and hashes: 1: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl (hash: A+laZK9PdteJ34RFcRMy4EaIaqJD4bedE5ZVOM8y+44=)
2: 60A2CF98817811EE9E9A211DC4F9AE02.roa (hash: aB3dythZL58wPQ38hpXRQSekusK0F1zAbGBxXUIobiU=)
3: 195EA596AC8711EEAC4B2427C4F9AE02.roa (hash: ImPy7S1POa8U9HTb3lUMJQCI8t5ncYSuN7VvXCvciPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl
rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 777 (0x309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91447E7, serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Validity
Not Before: Jan 25 00:29:38 2026 GMT
Not After : Feb 1 00:29:38 2026 GMT
Subject: CN=697563f3-3d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:eb:56:d1:09:9f:d0:37:9e:9d:0d:5a:a5:
4f:d7:49:a2:97:0d:97:b4:f8:0c:5d:2c:d4:31:ce:
5a:4c:b5:a4:04:72:53:b7:dd:0c:4a:e3:38:8d:ae:
2d:f8:5a:2e:38:d4:cb:ed:9e:af:1e:2a:c7:fb:f5:
27:2a:61:44:ab:76:db:01:f4:33:a5:20:fe:08:f8:
da:7c:2c:13:31:78:e2:c6:8e:34:51:1c:13:22:29:
c6:38:1f:5e:bf:a1:2f:82:ac:aa:04:e5:58:0d:8f:
4d:a8:aa:5f:e0:5c:22:87:c1:e1:00:93:b4:14:0d:
b4:33:4a:77:99:95:94:5b:66:74:98:01:a0:35:10:
eb:5e:9c:8a:5f:ac:0c:08:df:7e:23:ff:52:91:e1:
ad:60:bc:c0:f6:c8:f0:68:8f:97:e7:d3:ff:6b:c8:
be:37:93:f2:d0:38:46:b5:43:06:68:07:22:d5:ad:
eb:73:6e:27:48:2a:cb:71:a8:c5:43:be:2a:19:b9:
73:a0:2e:65:76:d2:3e:69:9c:5c:32:24:aa:ed:48:
2f:03:6f:c9:55:83:c9:94:8a:7b:72:1a:d6:0e:cf:
46:f5:30:17:0d:e7:c1:04:9b:9d:82:6b:47:bf:47:
07:0d:91:ae:33:5c:63:29:b1:72:6c:95:48:73:78:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E2:CD:E7:A5:96:E7:70:38:D4:65:85:51:FB:15:B8:31:A1:AA:17
X509v3 Authority Key Identifier:
keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:c3:c2:9f:65:c1:ff:d7:3e:da:3a:90:48:dc:13:a3:31:0e:
ec:8d:a3:59:41:0a:47:7e:ce:23:16:b1:90:c5:6c:3a:23:66:
0d:75:b2:80:74:7f:ff:ce:72:4e:12:91:76:3c:b7:5c:ed:9a:
af:4e:82:e6:94:42:1a:7d:5c:85:57:ae:62:7e:49:29:65:54:
f8:45:8b:bd:a1:a4:99:82:f7:06:2d:2c:bb:11:13:c4:45:f3:
06:6e:c3:42:0c:5f:20:7f:84:00:6e:c9:66:c1:d4:c7:bf:38:
6d:f6:cb:81:2f:7d:dd:ce:91:34:d4:9a:52:ae:31:c6:02:e2:
7e:44:17:ba:a7:dc:7e:86:34:1a:67:9e:c1:d8:6e:4d:2d:58:
31:65:9f:34:83:81:d9:c8:0e:7c:5d:d7:1b:f0:f5:7c:ac:1a:
2b:ae:d1:5c:03:ff:78:ca:f0:28:f2:a5:da:01:cd:f2:73:ec:
25:41:26:82:69:f1:a2:ea:e5:0b:5d:68:f8:3e:4a:f5:64:14:
6e:e6:98:6e:66:e8:e0:0b:89:2e:11:cf:ea:30:e3:ea:e2:5a:
42:19:62:03:0d:6a:0c:e2:27:4a:0d:ed:52:a7:4b:77:ca:ee:
53:51:fc:11:72:a8:07:bc:b1:9b:b0:e4:49:80:f4:b9:45:7d:
d7:18:cc:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ3RTcxMTAvBgNVBAUTKEU3N0I4NzE0NjgwNUUyNjA0QjQ5RUVGMkI0QTQzOENC
RDJBNTE0MjQwHhcNMjYwMTI1MDAyOTM4WhcNMjYwMjAxMDAyOTM4WjAYMRYwFAYD
VQQDDA02OTc1NjNmMy0zZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo5zrVtEJn9A3np0NWqVP10milw2XtPgMXSzUMc5aTLWkBHJTt90MSuM4ja4t
+FouONTL7Z6vHirH+/UnKmFEq3bbAfQzpSD+CPjafCwTMXjixo40URwTIinGOB9e
v6EvgqyqBOVYDY9NqKpf4Fwih8HhAJO0FA20M0p3mZWUW2Z0mAGgNRDrXpyKX6wM
CN9+I/9SkeGtYLzA9sjwaI+X59P/a8i+N5Py0DhGtUMGaAci1a3rc24nSCrLcajF
Q74qGblzoC5ldtI+aZxcMiSq7UgvA2/JVYPJlIp7chrWDs9G9TAXDefBBJudgmtH
v0cHDZGuM1xjKbFybJVIc3gJkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALizeel
ludwONRlhVH7FbgxoaoXMB8GA1UdIwQYMBaAFOd7hxRoBeJgS0nu8rSkOMvSpRQk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDdFNy9GRTQ0NjlEMjEz
MDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRtQkxTZTd5dEtRNHk5S2xG
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUzdUhGR2dGNG1CTFNlN3l0S1E0eTlLbEZDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDdFNy9GRTQ0NjlEMjEzMDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRt
QkxTZTd5dEtRNHk5S2xGQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJw8KfZcH/1z7aOpBI3BOjMQ7sjaNZQQpHfs4jFrGQxWw6I2YNdbKA
dH//znJOEpF2PLdc7ZqvToLmlEIafVyFV65ifkkpZVT4RYu9oaSZgvcGLSy7ERPE
RfMGbsNCDF8gf4QAbslmwdTHvzht9suBL33dzpE01JpSrjHGAuJ+RBe6p9x+hjQa
Z57B2G5NLVgxZZ80g4HZyA58Xdcb8PV8rBorrtFcA/94yvAo8qXaAc3yc+wlQSaC
afGi6uULXWj4Pkr1ZBRu5phuZujgC4kuEc/qMOPq4lpCGWIDDWoM4idKDe1Sp0t3
yu5TUfwRcqgHvLGbsORJgPS5RX3XGMym
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:33 2026 by rpki-client