This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
File: wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft (raw, json)
Hash identifier: pprmRV76Gstj5YaGWWeGh5T0k+TMJK4MuAe3wei9M0E=
Subject key identifier: EC:81:B8:5E:47:98:F3:90:32:BF:F6:9C:69:90:57:70:13:2E:2D:D4
Authority key identifier: C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
Certificate issuer: /CN=A91731AD/serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
Manifest number: 76
Signing time: Sun 25 Jan 2026 05:59:55 +0000
Manifest this update: Sun 25 Jan 2026 05:59:54 +0000
Manifest next update: Sun 01 Feb 2026 05:59:54 +0000
Files and hashes: 1: wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl (hash: yKcUeJWNO85vAODKYH0f14HspAqMZ70j9qLik/RYqbE=)
2: 31D77D7ED99811F0B81C7A7265D3641D.roa (hash: UGcEdy2YnXgl+J1snGlC99HRrkyZEQrbBCiTVou5PQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl
rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91731AD, serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Validity
Not Before: Jan 25 05:59:54 2026 GMT
Not After : Feb 1 05:59:54 2026 GMT
Subject: CN=6975b15a-1864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:e7:f0:a2:bb:3a:6d:c4:d0:ef:a6:67:59:
13:02:14:68:63:84:0f:b3:4a:ab:3f:2a:95:a8:82:
4c:fa:b8:ec:47:71:74:e9:a0:ba:1c:c4:6e:8f:f2:
91:48:b3:78:6a:d7:12:b4:87:86:2e:cf:44:02:2b:
e6:3b:86:31:02:81:e6:4a:18:59:14:c3:67:3d:2a:
d8:4f:5b:39:5c:c9:6e:bc:89:ae:47:c5:db:be:57:
ee:05:ae:f3:5d:4a:58:c3:3d:45:46:e4:c8:09:e7:
fe:dd:6b:d5:dd:9b:18:54:e1:a1:03:f6:63:03:6d:
9d:e3:b2:f4:9d:96:4c:22:fc:7c:5f:a8:8b:b8:44:
d5:ad:b7:b2:b1:24:a5:a4:95:ab:8c:9b:f3:60:a1:
c4:71:b1:4e:99:0a:07:1b:71:e1:0b:25:32:5c:b8:
9c:8f:9e:8c:a8:aa:0e:33:21:db:ea:4a:bb:ae:84:
73:27:bd:48:e5:92:e6:91:28:b9:21:6d:3f:39:9b:
1c:9e:e8:6e:cf:e4:2d:18:6c:1f:90:96:c9:e5:46:
71:fd:b0:77:fc:dc:d7:37:86:50:69:91:a6:44:95:
66:cd:1f:fa:2f:a4:1d:99:81:2e:ed:fb:8d:ae:dc:
0f:b2:fc:46:3c:8a:77:b2:9e:bf:9d:26:7b:6f:48:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:81:B8:5E:47:98:F3:90:32:BF:F6:9C:69:90:57:70:13:2E:2D:D4
X509v3 Authority Key Identifier:
keyid:C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:d8:aa:e7:83:6f:3b:03:99:42:3d:b4:42:fd:fa:2d:6a:11:
d4:86:9a:aa:3d:d3:9d:3a:41:c7:32:9f:26:d6:21:3c:cd:f6:
ca:f7:99:9c:7b:07:a3:d8:b6:5c:e0:5d:f6:0f:88:21:ea:83:
81:ee:f7:2f:4d:c1:94:5b:9d:06:a6:09:76:b9:9b:85:ba:e5:
5e:48:3a:be:1b:33:37:68:88:02:23:1c:97:f3:6e:a6:cb:08:
de:e4:c5:f7:48:8b:92:3f:de:07:c7:c1:4b:08:29:14:80:8b:
ae:1a:ee:a4:a1:b7:90:ad:32:88:30:1b:f4:17:72:6c:5c:7a:
4b:09:90:50:07:c5:de:9f:b1:36:dd:54:f0:5b:45:7b:96:d2:
c1:e9:7d:18:b7:07:cc:9a:3f:3e:ff:07:f1:51:3c:eb:4a:02:
16:a9:13:0d:a1:8a:b3:b0:92:3e:42:4b:22:d6:14:0d:65:d2:
4e:e9:bd:c2:8a:2e:fe:00:8b:84:a5:2e:99:31:08:85:cb:87:
4a:18:09:cb:a5:82:43:a7:c6:69:a6:15:41:3e:19:65:98:8d:
1c:24:c0:a0:dc:53:d7:90:3d:11:8c:94:0f:8e:51:d8:87:66:
3c:e4:d7:41:fa:d9:7d:9c:29:6d:de:85:98:ca:15:1b:9a:6b:
b1:bd:be:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:09:07 2026 by rpki-client