This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
File: M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json)
Hash identifier: f607J9eSQi910KNChwTO9UKQkyAXbVHADULpnYBuU20=
Subject key identifier: 10:CA:A8:5A:8F:B4:A0:D8:53:28:35:CC:D3:05:27:20:71:91:B3:F1
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial: 050C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
Manifest number: 0501
Signing time: Sat 24 Jan 2026 19:58:06 +0000
Manifest this update: Sat 24 Jan 2026 19:58:05 +0000
Manifest next update: Sat 31 Jan 2026 19:58:05 +0000
Files and hashes: 1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: SogNB8TRpgfosHbmrad86NeBzR7F1cuRO6Q/ovWMwZs=)
2: E763AA76A3E811EC8665D621C4F9AE02.roa (hash: trLJfSwyymOYXghPy0PGh0ipgzAzEgwWMLJxE/C/bWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1292 (0x50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Validity
Not Before: Jan 24 19:58:05 2026 GMT
Not After : Jan 31 19:58:05 2026 GMT
Subject: CN=6975244d-a5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:6f:16:f2:12:ff:e3:c3:f9:29:29:86:fd:
d8:9d:d2:45:dc:a4:fa:95:fc:86:3d:ae:e6:f9:80:
2d:8d:a5:76:cf:fa:36:b4:f3:21:11:d1:f4:a7:14:
85:4f:c1:a3:e2:da:4c:0f:f0:22:b6:71:ce:99:fe:
6c:9c:8d:9d:9b:51:bf:e8:2c:58:3f:5e:5a:f5:6c:
9e:e5:18:df:17:b3:5d:b3:04:09:1b:a2:fe:15:ad:
1f:8a:9b:a4:7a:31:3e:1e:91:40:92:5d:46:ed:f1:
29:3b:60:4e:b0:ff:21:f2:06:98:d4:0b:ec:db:d6:
5c:89:51:62:3d:a1:f3:b4:f2:b8:5c:28:03:70:cb:
3c:61:37:fe:82:70:24:aa:c9:6b:ac:5b:72:17:b6:
27:49:61:30:28:6e:06:78:3a:ee:31:ae:95:a6:8d:
65:37:50:f9:10:2b:b4:2b:9e:ca:83:d1:1b:8e:9f:
d4:74:96:42:11:00:b3:bc:df:2d:83:c7:07:0f:ab:
4b:6c:4d:99:62:89:78:00:ee:5b:53:e5:dc:c7:af:
6f:89:ab:ef:10:f2:ea:54:56:e6:7a:1d:32:21:3a:
d1:f6:bf:6e:7a:ad:6a:f5:cb:9b:dd:64:d0:53:c5:
66:f2:27:f6:82:03:59:ee:e3:bc:64:01:af:e5:f6:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CA:A8:5A:8F:B4:A0:D8:53:28:35:CC:D3:05:27:20:71:91:B3:F1
X509v3 Authority Key Identifier:
keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:91:cf:3c:1d:ec:3a:55:4a:17:9f:a7:73:f7:fc:15:9b:9e:
0e:04:10:3d:a2:d5:c0:ac:fe:a1:41:07:14:56:9d:24:d0:b9:
d4:ec:1d:5e:66:f3:7d:6b:1e:c9:cd:07:40:92:7a:eb:3e:e8:
29:23:1c:d9:cf:a1:7a:ef:c4:fe:14:b6:b6:64:85:29:48:8c:
ae:71:51:7c:f4:05:8c:33:96:14:d5:c7:00:4f:5e:f5:b1:87:
f4:44:5b:f1:96:b1:d3:d1:78:d2:45:63:84:03:ca:0a:53:54:
1d:61:b8:0e:92:ce:07:1a:15:c6:c9:19:47:b8:3a:3b:c6:06:
86:03:82:11:30:ad:25:ef:89:72:51:3f:56:81:82:c5:b4:4f:
a5:94:6e:1f:a1:24:e9:f0:3d:07:ea:aa:a1:1b:5e:ba:00:9a:
e2:6f:8c:41:db:01:f2:1e:7e:86:3a:8e:e2:25:de:9a:7b:6d:
2e:db:33:df:2a:ea:9c:70:ee:ed:e5:95:d5:b8:c0:22:90:60:
e1:04:c0:5a:c7:79:b9:b7:80:07:a5:fb:4f:28:8d:c1:e6:c4:
bf:55:56:2c:a0:bd:47:7e:c6:59:de:d9:d8:0c:d2:78:03:01:
f5:fe:b3:19:9a:12:ae:d0:ed:2e:a4:47:b6:2f:d6:61:7b:c9:
cb:83:c9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:08 2026 by rpki-client