This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json)
Hash identifier: jDW2ZJbmnsCRc/3+OfUCdBQI9a6xddwwbsWezO9t/N0=
Subject key identifier: 23:D5:4C:12:16:CC:07:AD:EE:D9:7C:F0:76:A0:1B:7D:EF:82:C1:44
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial: 04B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
Manifest number: 04B3
Signing time: Sat 24 Jan 2026 23:09:33 +0000
Manifest this update: Sat 24 Jan 2026 23:09:32 +0000
Manifest next update: Sat 31 Jan 2026 23:09:32 +0000
Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: ZDbGaVRWZEsGW61FwPckHw/IqieXlmSyiUE9S+69Osw=)
2: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: XCMHw1WVIEMLU74HMo1cPz+oPVQmbB2z+VPLna5yZDg=)
3: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: wqkVYDxZ6HBCzKePRiH5zEB/9I/WLKOX58mvYx8PpGA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1209 (0x4b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Validity
Not Before: Jan 24 23:09:32 2026 GMT
Not After : Jan 31 23:09:32 2026 GMT
Subject: CN=6975512d-b07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:e1:26:85:32:87:99:0a:2a:8f:1f:94:a7:
f9:16:c9:41:bc:a6:90:8f:8c:8c:ec:8f:d9:06:f2:
03:b9:fe:14:bd:03:d2:19:2d:f3:95:07:7a:6b:a5:
2e:5c:ab:2d:38:95:15:4b:66:51:c7:8e:88:f8:8f:
03:62:93:b0:32:7e:fa:67:d1:1e:41:85:f7:ba:14:
b0:21:8a:f7:b0:84:94:85:a4:5f:02:e8:04:98:33:
52:23:6c:8b:7a:7d:71:ee:2b:84:34:5f:07:ad:60:
fe:3a:c8:04:79:77:cf:9a:e8:5b:e0:92:03:f5:45:
f7:8c:ea:45:25:9a:30:16:48:d9:d3:13:03:af:0d:
04:30:50:cc:25:2c:62:62:5f:99:82:b4:ed:97:c0:
2b:17:33:7c:8a:47:a6:04:36:d5:8d:af:d7:db:e5:
bd:1f:22:df:00:88:19:57:96:00:3f:68:2e:af:b3:
c2:f1:c1:a4:08:58:47:df:b4:11:22:82:84:3c:52:
15:5d:01:ef:12:bb:4e:27:2f:69:53:cc:a7:f1:37:
71:2b:dd:f6:28:1b:97:7f:b0:5c:ee:a0:05:35:e1:
84:6f:1c:95:c3:f7:d9:c9:b8:05:1b:18:94:6d:d1:
0b:86:4f:5a:ce:e8:10:fe:6e:30:b8:92:62:0f:0a:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D5:4C:12:16:CC:07:AD:EE:D9:7C:F0:76:A0:1B:7D:EF:82:C1:44
X509v3 Authority Key Identifier:
keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:89:af:ab:14:22:0d:bb:1f:14:6e:54:e3:81:36:3f:c2:87:
14:4c:f5:4e:35:b7:d3:2a:3c:02:b4:f3:10:3d:9a:45:5d:be:
80:a2:2c:47:2a:34:0d:28:59:df:b7:74:da:85:6c:87:0a:ea:
d8:32:8a:d4:dc:7f:1b:85:61:ef:d5:d2:eb:92:33:48:8a:07:
9e:40:91:c3:84:e5:3d:ae:c9:63:02:5e:a6:8e:a8:51:fb:c9:
50:a7:56:0d:2b:02:d7:d9:55:5b:c5:6d:af:f0:74:8a:9b:55:
00:17:39:51:5a:c0:d6:6e:29:6f:76:41:18:c2:05:23:1e:75:
7c:49:61:8f:5b:8d:58:e4:b6:ca:5c:d7:57:30:0b:1d:d3:86:
5f:77:8a:b6:43:cd:ea:c5:65:d3:d2:66:74:6e:0a:ec:cc:bb:
aa:ae:18:83:aa:a0:38:99:88:d6:1f:0e:80:cf:2d:77:0b:b5:
bf:f3:b5:35:af:d2:36:89:78:20:6b:dd:fb:63:fa:30:9e:7d:
08:49:d6:6a:a7:5a:c6:b6:a7:f1:8a:06:6b:65:15:63:a0:0b:
d9:09:e2:0c:a8:44:1f:1e:ea:57:65:06:ff:1b:c3:c1:e2:0d:
b6:f9:a0:e1:4e:3f:d1:01:2c:e1:9e:14:68:2a:81:0d:dd:c3:
92:9c:24:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0
NkVBNzI1MjAwHhcNMjYwMTI0MjMwOTMyWhcNMjYwMTMxMjMwOTMyWjAYMRYwFAYD
VQQDDA02OTc1NTEyZC1iMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvdnhJoUyh5kKKo8flKf5FslBvKaQj4yM7I/ZBvIDuf4UvQPSGS3zlQd6a6Uu
XKstOJUVS2ZRx46I+I8DYpOwMn76Z9EeQYX3uhSwIYr3sISUhaRfAugEmDNSI2yL
en1x7iuENF8HrWD+OsgEeXfPmuhb4JID9UX3jOpFJZowFkjZ0xMDrw0EMFDMJSxi
Yl+ZgrTtl8ArFzN8ikemBDbVja/X2+W9HyLfAIgZV5YAP2gur7PC8cGkCFhH37QR
IoKEPFIVXQHvErtOJy9pU8yn8TdxK932KBuXf7Bc7qAFNeGEbxyVw/fZybgFGxiU
bdELhk9azugQ/m4wuJJiDwrZMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPVTBIW
zAet7tl88HagG33vgsFEMB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE
OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K
U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01
dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFia+rFCINux8UblTjgTY/wocUTPVONbfTKjwCtPMQPZpFXb6AoixH
KjQNKFnft3TahWyHCurYMorU3H8bhWHv1dLrkjNIigeeQJHDhOU9rsljAl6mjqhR
+8lQp1YNKwLX2VVbxW2v8HSKm1UAFzlRWsDWbilvdkEYwgUjHnV8SWGPW41Y5LbK
XNdXMAsd04Zfd4q2Q83qxWXT0mZ0bgrszLuqrhiDqqA4mYjWHw6Azy13C7W/87U1
r9I2iXgga937Y/ownn0ISdZqp1rGtqfxigZrZRVjoAvZCeIMqEQfHupXZQb/G8PB
4g22+aDhTj/RASzhnhRoKoEN3cOSnCT+
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:28 2026 by rpki-client