This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
File: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json)
Hash identifier: qrqaHL4QujLSBkO6So7ac+e+aJhi5DWoo196g7/O5+A=
Subject key identifier: 66:20:3D:48:17:3A:FE:16:D1:9B:CD:D8:CF:91:AA:8D:81:CB:66:7E
Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
Certificate issuer: /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
Manifest number: DE
Signing time: Sun 25 Jan 2026 04:49:59 +0000
Manifest this update: Sun 25 Jan 2026 04:49:58 +0000
Manifest next update: Sun 01 Feb 2026 04:49:58 +0000
Files and hashes: 1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: IgFYTBjdV88pQgW8yonaEo3m3faFy77GywxMJ287cFg=)
2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: i0ORlhZOKsAGkbvWhGFe0p7d5mIlyQ7Mxy4cSYnkDVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Validity
Not Before: Jan 25 04:49:58 2026 GMT
Not After : Feb 1 04:49:58 2026 GMT
Subject: CN=6975a0f7-7fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:26:42:73:ae:da:b3:f7:ab:87:c5:9e:45:
7b:be:8a:e7:ef:e5:cd:01:d3:0c:86:cc:18:1b:80:
f8:ed:9f:9e:db:90:7d:d0:89:7e:72:c0:f3:4d:73:
87:46:b5:03:38:ae:e2:09:89:b5:db:5d:53:a4:6c:
b5:37:19:39:ff:2d:47:f9:15:35:9f:6a:95:d3:d3:
e4:a0:7b:a9:6b:56:87:b8:83:bc:b3:24:36:6b:eb:
fd:37:f8:6e:8a:ab:85:24:63:84:88:27:3c:e8:4f:
d8:4e:56:92:57:ba:42:f6:3f:6b:89:01:fc:fc:1d:
4b:b9:0c:1a:64:14:13:2f:f9:f9:6f:07:2f:47:03:
d1:45:00:14:4c:c9:8e:59:a7:d3:5f:4b:4f:1b:02:
af:aa:16:25:eb:45:53:08:d6:c1:36:a7:59:c6:67:
ea:15:79:0f:1a:09:b5:39:f7:bc:1f:fc:ab:51:fc:
d2:91:21:d2:d4:93:c1:83:63:2d:39:74:da:0f:39:
f0:c8:35:6f:1c:61:76:09:cb:df:ff:32:25:11:f7:
08:7e:e2:81:6f:97:9e:8e:23:a2:fc:dc:cc:27:14:
75:c5:e9:05:bf:44:ea:2f:98:1f:8d:69:81:e5:54:
e0:ad:a6:60:ba:10:1b:b1:0b:2a:fa:17:ba:13:f3:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:20:3D:48:17:3A:FE:16:D1:9B:CD:D8:CF:91:AA:8D:81:CB:66:7E
X509v3 Authority Key Identifier:
keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:49:80:9e:33:2d:fd:54:83:8b:ed:05:99:2a:3a:3f:25:43:
04:cf:19:bc:30:33:49:9b:f2:ef:99:5a:b0:23:8a:dc:12:c1:
a3:57:43:6d:a5:bb:ff:41:fd:76:3e:fe:0a:90:5c:96:97:10:
dc:c5:a7:8c:0e:82:18:1b:05:80:03:7a:93:a9:d7:3e:a6:71:
58:4c:6f:59:36:a2:6f:f0:6d:f2:37:06:1c:f4:0d:3d:89:2a:
30:34:da:e7:f8:41:0c:11:40:73:3d:b7:60:6b:13:39:43:5f:
6b:78:5c:2e:17:b4:1d:16:67:81:ef:9b:31:0b:6e:7e:5a:20:
db:74:83:4d:cc:ee:e6:07:23:c3:a4:af:5f:2d:63:74:32:b8:
8d:df:7b:af:40:7b:ff:f4:88:de:ea:56:63:87:39:be:7e:1e:
76:af:f6:cf:ec:13:26:cc:4c:6a:87:49:5c:23:a9:47:ae:c2:
51:72:e6:eb:24:f8:43:51:6c:4e:3d:f9:bd:93:83:47:c0:82:
08:ae:c3:4e:89:03:e3:20:9e:6e:e5:89:76:c2:89:e6:38:fd:
48:db:27:be:90:79:3c:58:d8:7d:6f:b0:20:ce:9d:51:a8:3f:
f0:fc:c2:ed:7e:ce:f3:55:a8:02:2a:4a:d5:03:36:1d:bf:37:
fa:2a:38:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OTIxQUUxMTAvBgNVBAUTKEY2RDM3OTMwMjc3NTFDNjJGOEFCQjkwODg2RUE5M0Y0
OUIzM0Y2NEMwHhcNMjYwMTI1MDQ0OTU4WhcNMjYwMjAxMDQ0OTU4WjAYMRYwFAYD
VQQDDA02OTc1YTBmNy03ZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtzQmQnOu2rP3q4fFnkV7vorn7+XNAdMMhswYG4D47Z+e25B90Il+csDzTXOH
RrUDOK7iCYm1211TpGy1Nxk5/y1H+RU1n2qV09PkoHupa1aHuIO8syQ2a+v9N/hu
iquFJGOEiCc86E/YTlaSV7pC9j9riQH8/B1LuQwaZBQTL/n5bwcvRwPRRQAUTMmO
WafTX0tPGwKvqhYl60VTCNbBNqdZxmfqFXkPGgm1Ofe8H/yrUfzSkSHS1JPBg2Mt
OXTaDznwyDVvHGF2Ccvf/zIlEfcIfuKBb5eejiOi/NzMJxR1xekFv0TqL5gfjWmB
5VTgraZguhAbsQsq+he6E/PIIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYgPUgX
Ov4W0ZvN2M+Rqo2By2Z+MB8GA1UdIwQYMBaAFPbTeTAndRxi+Ku5CIbqk/SbM/ZM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjFBRS82QzcwNDhBNkFD
NzMxMUVGQTNDQkQxNEFDNEY5QUUwMi85dE41TUNkMUhHTDRxN2tJaHVxVDlKc3o5
a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzl0TjVNQ2QxSEdMNHE3a0lodXFUOUpzejlrdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjFBRS82QzcwNDhBNkFDNzMxMUVGQTNDQkQxNEFDNEY5QUUwMi85dE41TUNkMUhH
TDRxN2tJaHVxVDlKc3o5a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCuSYCeMy39VIOL7QWZKjo/JUMEzxm8MDNJm/LvmVqwI4rcEsGjV0Nt
pbv/Qf12Pv4KkFyWlxDcxaeMDoIYGwWAA3qTqdc+pnFYTG9ZNqJv8G3yNwYc9A09
iSowNNrn+EEMEUBzPbdgaxM5Q19reFwuF7QdFmeB75sxC25+WiDbdINNzO7mByPD
pK9fLWN0MriN33uvQHv/9Ije6lZjhzm+fh52r/bP7BMmzExqh0lcI6lHrsJRcubr
JPhDUWxOPfm9k4NHwIIIrsNOiQPjIJ5u5Yl2wonmOP1I2ye+kHk8WNh9b7Agzp1R
qD/w/MLtfs7zVagCKkrVAzYdvzf6Kjid
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:44:20 2026 by rpki-client