This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
File: MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json)
Hash identifier: l5QjVr8zyduxb4qgz4Jx8WfleiplV+yOCNLI4oMLz/M=
Subject key identifier: 88:83:32:F4:B2:C7:B6:B6:8C:03:1C:0E:3E:04:92:F6:32:67:DE:F1
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Certificate issuer: /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
Manifest number: 0121
Signing time: Sun 25 Jan 2026 04:14:32 +0000
Manifest this update: Sun 25 Jan 2026 04:14:32 +0000
Manifest next update: Sun 01 Feb 2026 04:14:32 +0000
Files and hashes: 1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: 8bt+80pAN2eRzV+vEvuKhuW6cI2f6WLPqiddNzGadQA=)
2: F0CEC2E2663811F089040A3DC4F9AE02.roa (hash: 4eCQXPIoXqLFis62/nmMgnZplG75TTG2mCb5ZkTz7as=)
3: 144D9AA823F011F0B0D6F263C4F9AE02.roa (hash: lyaciBaHQ7wicHWM/adA9CDhCXcjs8ttP7h7VzDSE2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:14:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Validity
Not Before: Jan 25 04:14:32 2026 GMT
Not After : Feb 1 04:14:32 2026 GMT
Subject: CN=697598a8-a9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:71:df:c9:72:ae:81:24:c0:65:1f:44:2c:
dd:ab:b8:82:ae:cc:6b:ee:1c:f7:c9:31:22:a7:66:
5c:c4:a2:e1:1e:21:37:e1:fd:0d:a6:a3:84:3f:c0:
83:dc:4c:44:2e:06:3c:91:16:b1:ad:fb:b0:84:dd:
0f:c7:5b:28:ca:97:68:12:c6:f2:0a:a3:d3:4b:a7:
1a:9a:bf:c0:6f:57:38:2d:08:93:6c:a1:ab:77:8c:
e2:c0:06:03:db:08:01:f2:76:dd:27:1b:71:d1:7b:
73:5d:27:99:d7:fa:c8:0c:47:c4:14:8d:b8:32:1c:
38:cf:05:69:12:88:20:4f:d8:5d:50:af:0a:b5:5f:
1d:f7:77:01:69:19:52:01:4c:2f:ce:6d:f2:ef:11:
b6:9b:3e:db:5f:83:d9:49:6d:32:a5:9a:ce:20:72:
be:4a:33:d8:14:f0:23:ef:71:99:d7:b8:db:be:ce:
c4:27:b5:15:f3:66:b1:f9:77:99:ae:08:25:78:75:
52:a3:2c:59:d4:b4:a0:2a:be:6d:b9:21:40:f0:e3:
36:da:8f:46:c2:96:81:02:61:0e:ac:8f:2f:cf:9e:
be:b2:85:b1:c4:79:87:97:d5:3a:91:ea:66:6f:bf:
b6:fd:57:6f:81:57:10:de:d9:8e:d8:a4:82:d1:5f:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:83:32:F4:B2:C7:B6:B6:8C:03:1C:0E:3E:04:92:F6:32:67:DE:F1
X509v3 Authority Key Identifier:
keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3a:c7:58:71:7a:47:15:58:85:86:21:77:de:7d:8a:cc:69:
90:67:af:cc:28:b3:f1:30:dc:e8:28:9a:38:07:a2:62:32:ed:
b2:ac:6b:cb:52:de:3b:f8:74:4e:d3:9d:27:d9:1d:19:c1:7d:
1f:b7:4c:86:10:e0:55:dc:6e:29:fb:9e:46:43:72:d1:55:e4:
bd:01:95:81:41:e0:74:2d:21:4f:59:d3:98:1e:5a:47:63:c0:
56:d1:d9:38:c4:ba:9d:58:cb:92:3b:08:15:b9:4e:e4:1d:0f:
6e:fd:d2:a3:73:1f:5f:df:56:55:15:d4:68:58:22:f8:18:9e:
af:15:f8:48:76:d0:c9:5b:73:6d:07:f7:1c:5e:d4:8c:06:24:
ef:9f:3e:fd:7c:ce:db:55:4b:bf:f3:e1:05:47:0b:c4:9e:e9:
25:5a:d1:13:d3:6e:04:04:21:72:0c:34:4b:c9:94:b0:ae:22:
d8:4b:09:c1:93:8c:a0:4a:29:1d:48:0e:ac:72:00:2b:36:8f:
91:3d:e8:c8:c9:0e:15:5c:18:7f:f1:4c:1b:d5:81:da:09:90:
df:bd:6b:4f:fb:bc:cd:12:84:5a:06:b6:a5:61:ed:19:8d:a7:
47:f6:10:3f:65:e5:b1:5c:7f:78:ae:52:4b:88:3c:f6:3f:20:
d2:ee:89:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlGNjQxMTAvBgNVBAUTKDMyRDM1Mzc0M0M4RkUyRjA4RTk3QjIyRTVCNjA5QUJD
MTRDQ0ZFM0IwHhcNMjYwMTI1MDQxNDMyWhcNMjYwMjAxMDQxNDMyWjAYMRYwFAYD
VQQDDA02OTc1OThhOC1hOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzKBx38lyroEkwGUfRCzdq7iCrsxr7hz3yTEip2ZcxKLhHiE34f0NpqOEP8CD
3ExELgY8kRaxrfuwhN0Px1soypdoEsbyCqPTS6camr/Ab1c4LQiTbKGrd4ziwAYD
2wgB8nbdJxtx0XtzXSeZ1/rIDEfEFI24Mhw4zwVpEoggT9hdUK8KtV8d93cBaRlS
AUwvzm3y7xG2mz7bX4PZSW0ypZrOIHK+SjPYFPAj73GZ17jbvs7EJ7UV82ax+XeZ
rggleHVSoyxZ1LSgKr5tuSFA8OM22o9GwpaBAmEOrI8vz56+soWxxHmHl9U6kepm
b7+2/VdvgVcQ3tmO2KSC0V/hAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiDMvSy
x7a2jAMcDj4EkvYyZ97xMB8GA1UdIwQYMBaAFDLTU3Q8j+LwjpeyLltgmrwUzP47
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC83N0JGMDE5MjYy
NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2Q09sN0l1VzJDYXZCVE1f
anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL010TlRkRHlQNHZDT2w3SXVXMkNhdkJUTV9qcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUY2NC83N0JGMDE5MjYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2
Q09sN0l1VzJDYXZCVE1fanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8OsdYcXpHFViFhiF33n2KzGmQZ6/MKLPxMNzoKJo4B6JiMu2yrGvL
Ut47+HRO050n2R0ZwX0ft0yGEOBV3G4p+55GQ3LRVeS9AZWBQeB0LSFPWdOYHlpH
Y8BW0dk4xLqdWMuSOwgVuU7kHQ9u/dKjcx9f31ZVFdRoWCL4GJ6vFfhIdtDJW3Nt
B/ccXtSMBiTvnz79fM7bVUu/8+EFRwvEnuklWtET024EBCFyDDRLyZSwriLYSwnB
k4ygSikdSA6scgArNo+RPejIyQ4VXBh/8Uwb1YHaCZDfvWtP+7zNEoRaBralYe0Z
jadH9hA/ZeWxXH94rlJLiDz2PyDS7onN
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:48 2026 by rpki-client