This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
File: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft (raw, json)
Hash identifier: x37yF1hu/Hprfnlu4l64Svr4sRxJK+5My3NaI1ldgis=
Subject key identifier: 84:23:B6:8B:62:2B:F9:39:EA:6F:A4:A1:07:90:58:0A:A4:70:D1:B8
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Certificate issuer: /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial: 3594
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
Manifest number: 3542
Signing time: Sat 24 Jan 2026 14:17:19 +0000
Manifest this update: Sat 24 Jan 2026 14:17:19 +0000
Manifest next update: Sat 31 Jan 2026 14:17:19 +0000
Files and hashes: 1: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl (hash: NtXhpZBfsFlhi/GvdRnV9an2YnKSJrgO6rHYwCL2qUk=)
2: 19ACBFF66CDF11EAB92A3A24C4F9AE02.roa (hash: rb6m6NgtqMNqMVoEYBcUFewdPh6xLzsagwAw8cSDCbE=)
3: EDCDDF00FA7811EFAF0CDF57C4F9AE02.roa (hash: kN3zyoollwJXDugnYM0yHLk48cRpRCSo426eiI4jnbk=)
4: 797B4DEC293B11E8B187196DC4F9AE02.roa (hash: m0T5p+j/9s+rm9D6YdSh//2Alx2Eae+Du8lbaB1hR7Y=)
5: 6A18A5B0F88811EF9CB20317C4F9AE02.roa (hash: H76rrDZxK8h/g51b1krAIQ2ulCKuPO82m4joCbnFfEs=)
6: 1921C8926CDF11EAB92A3A24C4F9AE02.roa (hash: IkqW+PwyXlQ+AUTKEJ4fHo5q5mHtKj5Ve8Q8p0ADu48=)
7: 749BE0C8F94711EF9B713B3AC4F9AE02.roa (hash: D48/pxU7MzDuerY2hyHqIJz8Ni5AYoPlrPyxeWvQn8M=)
8: 73E75DA6F94711EF9B713B3AC4F9AE02.roa (hash: jqW67pSJSIsRiaBgE6s/DK3BAL3JeM6fk0sbod9Ihss=)
9: 35415D50FA7711EFB598EF54C4F9AE02.roa (hash: tqonfMb2T4kEzGLFTTW3PK/xQqepl87jr8dA78s4VGI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13716 (0x3594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Validity
Not Before: Jan 24 14:17:19 2026 GMT
Not After : Jan 31 14:17:19 2026 GMT
Subject: CN=6974d46f-8df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:a2:c5:93:47:3a:2a:52:23:81:8e:12:3c:
41:59:92:44:7e:ad:ab:f3:7e:7a:74:10:99:97:de:
76:ff:66:28:91:13:10:4f:4b:4c:33:97:21:32:62:
ce:58:fa:fa:45:be:dd:87:c4:b0:11:e8:75:a2:32:
bc:e6:21:6f:9b:24:f9:c1:ad:58:d0:e5:95:d5:a1:
25:ef:7b:38:2e:cb:ac:a4:ee:13:1d:8b:e1:d9:20:
3b:9a:f3:30:d2:bc:0f:02:d2:17:57:37:56:7c:d8:
57:55:83:3e:f0:62:37:7e:64:ab:f0:f4:c7:35:58:
25:b3:55:d5:28:d3:06:09:85:61:6b:e4:0b:08:2b:
44:1d:49:73:f5:c6:53:9d:66:49:a2:42:34:c2:49:
1a:a6:32:de:ef:08:54:19:b2:44:2b:8c:1c:47:76:
55:b7:90:55:13:43:76:62:2c:34:f3:44:76:dd:43:
cf:be:43:05:6a:b2:a7:e2:11:99:98:38:1b:9f:47:
e4:d0:c7:e3:b2:c1:a0:2b:1a:b5:b1:45:37:4e:3d:
2d:4c:d0:3d:8a:ef:28:cd:4b:38:82:47:d5:4e:b3:
5f:7d:24:8b:71:e3:28:eb:bd:91:b7:4c:77:29:51:
7b:bf:79:e7:16:42:6c:35:e2:70:41:cb:b2:b6:4e:
ad:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:23:B6:8B:62:2B:F9:39:EA:6F:A4:A1:07:90:58:0A:A4:70:D1:B8
X509v3 Authority Key Identifier:
keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c8:ce:5f:43:27:b3:8c:f1:08:47:aa:25:16:72:43:ed:2d:
f6:9e:c4:2a:a6:ab:e1:b5:42:ed:77:83:84:01:c0:8a:48:ad:
d7:84:70:e3:94:38:3a:b7:3a:df:69:11:cc:ed:4b:94:fc:66:
66:57:2e:72:d0:bc:4c:f0:79:1e:7b:2c:d6:9d:ab:74:1d:f8:
c4:cf:40:05:8c:cc:35:92:fa:b0:81:32:8d:05:eb:64:53:ec:
67:31:e1:0c:ed:53:30:bd:fb:dd:3c:64:ed:e6:0e:b0:51:b5:
8e:52:5b:75:63:83:42:26:fe:6a:7f:81:af:01:f6:0d:c5:1f:
60:2f:8d:f3:2c:b9:36:f7:f8:96:8b:fb:1c:48:1c:e4:7a:d6:
19:13:ea:62:b0:50:9b:47:ac:6f:4b:82:08:a4:dc:13:94:c4:
54:b3:8d:36:ac:0b:c2:65:3f:91:6a:10:9d:51:eb:4c:12:f6:
91:a7:16:fa:71:2f:df:de:1e:44:2c:bc:4e:36:65:ec:e4:04:
e1:a3:96:5d:12:76:b1:56:3d:88:00:d5:f7:d2:89:1a:e5:b9:
b8:59:6a:cc:65:80:6e:89:1c:e3:e2:57:62:59:ef:16:c4:e2:
26:d9:c2:dc:9b:14:88:0a:4f:68:be:4e:21:20:4c:8f:d9:df:
50:d8:dc:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODcyRUQxMTAvBgNVBAUTKDY4RkFGOURBQ0UxOTc2OENBQzNENEVEN0JCMjQzNzJC
RkZBNkQwMTgwHhcNMjYwMTI0MTQxNzE5WhcNMjYwMTMxMTQxNzE5WjAYMRYwFAYD
VQQDDA02OTc0ZDQ2Zi04ZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyy2ixZNHOipSI4GOEjxBWZJEfq2r8356dBCZl952/2YokRMQT0tMM5chMmLO
WPr6Rb7dh8SwEeh1ojK85iFvmyT5wa1Y0OWV1aEl73s4LsuspO4THYvh2SA7mvMw
0rwPAtIXVzdWfNhXVYM+8GI3fmSr8PTHNVgls1XVKNMGCYVha+QLCCtEHUlz9cZT
nWZJokI0wkkapjLe7whUGbJEK4wcR3ZVt5BVE0N2Yiw080R23UPPvkMFarKn4hGZ
mDgbn0fk0MfjssGgKxq1sUU3Tj0tTNA9iu8ozUs4gkfVTrNffSSLceMo672Rt0x3
KVF7v3nnFkJsNeJwQcuytk6tSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQjtoti
K/k56m+koQeQWAqkcNG4MB8GA1UdIwQYMBaAFGj6+drOGXaMrD1O17skNyv/ptAY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzJFRC9FRDhDOTY5MDFE
NkMxMUUyOEEzOEEzQUQwOEIwMkNEMi9hUHI1MnM0WmRveXNQVTdYdXlRM0tfLW0w
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FQcjUyczRaZG95c1BVN1h1eVEzS18tbTBCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzJFRC9FRDhDOTY5MDFENkMxMUUyOEEzOEEzQUQwOEIwMkNEMi9hUHI1MnM0WmRv
eXNQVTdYdXlRM0tfLW0wQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAKyM5fQyezjPEIR6olFnJD7S32nsQqpqvhtULtd4OEAcCKSK3XhHDj
lDg6tzrfaRHM7UuU/GZmVy5y0LxM8HkeeyzWnat0HfjEz0AFjMw1kvqwgTKNBetk
U+xnMeEM7VMwvfvdPGTt5g6wUbWOUlt1Y4NCJv5qf4GvAfYNxR9gL43zLLk29/iW
i/scSBzketYZE+pisFCbR6xvS4IIpNwTlMRUs402rAvCZT+RahCdUetMEvaRpxb6
cS/f3h5ELLxONmXs5ATho5ZdEnaxVj2IANX30oka5bm4WWrMZYBuiRzj4ldiWe8W
xOIm2cLcmxSICk9ovk4hIEyP2d9Q2NyI
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:49 2026 by rpki-client