This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json)
Hash identifier: I/ooGyKKPxuOspsX7LJG65IDEYGc0u2LXMTeOVHmKbg=
Subject key identifier: E5:CE:C8:58:81:2F:31:E3:66:4B:C6:AE:9F:B3:EC:D8:95:EE:79:4D
Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Certificate serial: 352F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
Manifest number: 3522
Signing time: Sat 24 Jan 2026 14:55:35 +0000
Manifest this update: Sat 24 Jan 2026 14:55:35 +0000
Manifest next update: Sat 31 Jan 2026 14:55:35 +0000
Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: 3EFOkbkLy/owH30bj8Qoq23TNvbCQZJ2CVJ/AUAGym0=)
2: C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa (hash: v6QDKHGNgQsriG4lPK9GtQgpf0BZUi9e8DtrdXFAk8A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13615 (0x352f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Validity
Not Before: Jan 24 14:55:35 2026 GMT
Not After : Jan 31 14:55:35 2026 GMT
Subject: CN=6974dd67-09ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:8d:cc:b3:2c:86:3d:cf:10:df:39:7e:14:
d7:83:55:c7:94:57:ed:39:2a:3d:87:7f:ed:b0:01:
84:d4:90:be:31:1c:c2:cf:6a:d4:a7:a8:3a:e1:49:
e7:3e:f5:0d:47:9c:5b:fc:81:3f:3e:a7:51:24:4c:
79:ef:d2:92:0f:d6:dc:b4:84:ba:5d:ce:f5:03:b5:
2f:5d:26:57:67:7b:11:02:36:6f:10:f2:31:07:94:
61:7a:97:15:ff:7f:d7:d5:9c:c9:23:b1:74:97:7c:
04:e6:d8:40:ca:c8:03:3e:fd:1c:a9:a6:90:81:ca:
3b:f9:27:90:a6:29:66:88:7d:29:f5:79:c0:88:fc:
d8:3d:84:24:21:58:27:97:99:4b:ba:63:aa:80:75:
25:ba:49:d3:15:41:4a:56:38:64:4d:ee:5c:15:38:
c7:15:b5:70:71:ac:7d:29:69:51:dc:64:0f:d7:25:
cf:32:2d:f8:89:33:ee:6a:7c:2f:63:84:29:db:ef:
8d:3b:81:b7:88:92:c5:99:1c:6b:aa:a4:9d:3a:51:
72:bc:c8:34:32:a4:92:29:0e:4f:6d:32:a1:4f:70:
aa:71:37:86:76:e6:f4:3d:76:7d:c5:67:ac:64:00:
1c:4b:51:99:bc:bf:03:bd:03:af:39:44:ae:3d:99:
ee:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CE:C8:58:81:2F:31:E3:66:4B:C6:AE:9F:B3:EC:D8:95:EE:79:4D
X509v3 Authority Key Identifier:
keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:13:8e:f0:bf:40:67:18:06:69:28:7f:19:37:ef:79:ae:7b:
13:30:4d:e4:ab:f8:c6:9f:08:de:7c:39:45:d7:08:60:e8:0e:
62:a6:0e:49:ec:7f:af:00:d5:d9:a8:66:5e:73:26:0a:e3:85:
85:5b:00:c1:6a:25:94:a3:ca:af:59:38:35:fa:33:4a:aa:16:
19:3e:c8:f5:45:83:0b:78:a1:1d:04:00:90:a2:4e:49:0f:00:
5f:36:ef:02:31:ab:cd:3a:da:f7:e9:f3:2d:1d:2a:b0:96:07:
33:a8:78:65:ad:aa:87:7a:98:cf:b8:3f:aa:24:9d:55:dd:9c:
d6:54:27:04:97:da:3d:58:ea:86:e2:c7:b4:79:14:db:7d:84:
e2:77:77:c1:ca:60:f7:ce:35:f4:7e:64:7d:04:91:ea:9a:5a:
bc:ac:bc:16:e9:c6:ac:cf:92:e6:1a:5a:f5:da:95:a3:f4:e5:
6a:8b:30:11:27:f5:17:2f:b9:2d:13:6d:a2:90:7b:fa:88:b3:
9f:42:4f:fc:3f:99:df:7e:7b:7a:b1:bc:06:07:7e:8f:8d:49:
59:cb:43:47:61:ba:fa:7f:cb:8c:17:41:10:61:a9:89:1d:e4:
f7:9f:a6:c6:8f:6a:66:f8:e4:3d:ba:ae:ff:a5:c7:16:0e:94:
0c:17:e0:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2
QzQ4OEREMTUwHhcNMjYwMTI0MTQ1NTM1WhcNMjYwMTMxMTQ1NTM1WjAYMRYwFAYD
VQQDDA02OTc0ZGQ2Ny0wOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxKONzLMshj3PEN85fhTXg1XHlFftOSo9h3/tsAGE1JC+MRzCz2rUp6g64Unn
PvUNR5xb/IE/PqdRJEx579KSD9bctIS6Xc71A7UvXSZXZ3sRAjZvEPIxB5RhepcV
/3/X1ZzJI7F0l3wE5thAysgDPv0cqaaQgco7+SeQpilmiH0p9XnAiPzYPYQkIVgn
l5lLumOqgHUluknTFUFKVjhkTe5cFTjHFbVwcax9KWlR3GQP1yXPMi34iTPuanwv
Y4Qp2++NO4G3iJLFmRxrqqSdOlFyvMg0MqSSKQ5PbTKhT3CqcTeGdub0PXZ9xWes
ZAAcS1GZvL8DvQOvOUSuPZnulQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXOyFiB
LzHjZkvGrp+z7NiV7nlNMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE
OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew
VmJiYU1XRHQtUHRzU0kzUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC4E47wv0BnGAZpKH8ZN+95rnsTME3kq/jGnwjefDlF1whg6A5ipg5J
7H+vANXZqGZecyYK44WFWwDBaiWUo8qvWTg1+jNKqhYZPsj1RYMLeKEdBACQok5J
DwBfNu8CMavNOtr36fMtHSqwlgczqHhlraqHepjPuD+qJJ1V3ZzWVCcEl9o9WOqG
4se0eRTbfYTid3fBymD3zjX0fmR9BJHqmlq8rLwW6casz5LmGlr12pWj9OVqizAR
J/UXL7ktE22ikHv6iLOfQk/8P5nffnt6sbwGB36PjUlZy0NHYbr6f8uMF0EQYamJ
HeT3n6bGj2pm+OQ9uq7/pccWDpQMF+Cc
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:54 2026 by rpki-client