This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json)
Hash identifier: uu5AYU8pC+WM1Nx3gCS+spOOtA1+FxlQ2+l3eJrWXVo=
Subject key identifier: 37:3B:84:B1:D9:76:07:80:35:C2:54:AE:9F:A0:36:D9:0C:B3:CB:E1
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
Manifest number: 013D
Signing time: Sun 25 Jan 2026 03:43:34 +0000
Manifest this update: Sun 25 Jan 2026 03:43:34 +0000
Manifest next update: Sun 01 Feb 2026 03:43:34 +0000
Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: vXsB0lVD2/Ad8r2hD4vaNuKfZnVTDO/d9wTt0ZkeeVI=)
2: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: 51G/atnUP8WE3vN2KzPoIXBsyS6vS2RXr0QbqdKbjAA=)
3: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: CpFFYzKvaiG5h+2sUf464A2//gzHqQgpH0EvUR1TKwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:43:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Validity
Not Before: Jan 25 03:43:34 2026 GMT
Not After : Feb 1 03:43:34 2026 GMT
Subject: CN=69759166-a354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:12:b6:e2:7e:ef:89:52:c1:04:7c:f3:4c:
a1:33:00:9e:1a:83:71:79:0b:9d:08:2c:c1:99:9a:
3f:90:a6:e6:b2:6e:5a:00:93:cf:35:da:ae:2b:9f:
21:56:5a:4c:54:b8:c1:f6:8e:a1:70:eb:17:68:54:
df:98:a4:32:eb:39:3d:f3:e1:ca:33:5e:16:5d:8d:
40:33:89:4e:18:15:e7:5d:5e:c4:cf:ca:45:64:8e:
39:a9:80:5a:6d:57:e6:6c:8f:21:9b:74:13:eb:50:
77:6e:12:a7:26:ee:18:4f:fe:bb:31:47:4b:c1:17:
14:a1:be:43:68:be:be:45:65:cc:7a:22:38:22:d8:
95:d1:88:cd:50:50:01:7e:f9:ea:84:bb:a4:fa:f0:
13:a2:bb:e6:69:99:d5:c2:dc:fc:62:5c:8d:93:b1:
99:af:b7:76:7a:c9:d7:17:ee:ea:a5:64:a2:26:38:
07:41:40:ef:0d:91:d2:6c:2e:b5:1a:b7:2c:1a:8d:
2e:54:d8:62:ea:e7:1d:71:eb:13:d8:f1:5e:b4:65:
0f:06:74:5d:58:6f:80:1f:0c:50:d8:4d:be:86:68:
97:3a:a1:86:d9:60:13:d1:b5:04:22:57:c4:92:5f:
95:b4:9e:9e:9f:5d:9d:b1:53:09:e8:9b:0d:12:6e:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3B:84:B1:D9:76:07:80:35:C2:54:AE:9F:A0:36:D9:0C:B3:CB:E1
X509v3 Authority Key Identifier:
keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:55:3f:f8:a3:e9:e9:65:1c:b2:6f:59:d1:6d:82:1a:94:08:
91:83:36:d3:06:b8:1b:f2:dd:b4:3d:4d:be:a0:e1:9a:d4:03:
04:50:45:b4:1d:df:58:48:88:67:71:6b:9d:93:eb:75:11:c7:
76:3b:ba:03:f9:e1:bb:aa:16:d5:b1:cd:c5:be:bb:8a:ec:a8:
d7:d2:e8:d6:17:02:86:df:e2:c8:db:f5:72:d2:8e:b3:0b:a1:
ab:c3:11:ca:27:52:58:36:09:ea:67:2b:00:40:d0:6a:8e:66:
29:15:81:af:6a:f5:2f:ee:eb:21:95:9e:ea:c0:fe:90:3a:e2:
33:ad:6e:2d:11:df:d1:bf:d0:d4:e5:9c:fe:96:3b:11:46:73:
53:0c:65:f0:c1:10:a4:1b:a7:b9:e2:79:a3:87:30:cc:3d:fb:
ec:ff:f0:00:f3:98:70:82:b9:3c:bc:ae:23:24:c9:a9:ac:bc:
52:3e:f5:0f:9f:c7:b6:c3:32:a6:88:26:15:ba:ac:86:37:c3:
db:dc:a4:40:cb:d3:e3:c6:ae:56:1e:ee:f1:ea:d2:de:ce:21:
ec:06:8f:8e:ec:31:48:89:c5:12:22:ce:a0:6c:3b:e4:65:6b:
8e:ba:00:14:a6:dd:51:80:a0:bb:42:38:29:97:3a:9e:e4:a6:
66:bc:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:28:42 2026 by rpki-client