This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
File: MoQzhPrmr2wxduHfdOkIgdbZdZI.mft (raw, json)
Hash identifier: YL0K5CLqjMYgAw6QnNNV9XJiXksCTxy4QzLipTPrEw0=
Subject key identifier: 1A:F6:B8:AC:BF:43:33:55:C1:E4:97:8B:D0:CE:03:52:C9:82:5D:61
Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
Certificate issuer: /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Certificate serial: 0A4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
Manifest number: 0A33
Signing time: Sat 24 Jan 2026 19:13:30 +0000
Manifest this update: Sat 24 Jan 2026 19:13:30 +0000
Manifest next update: Sat 31 Jan 2026 19:13:30 +0000
Files and hashes: 1: MoQzhPrmr2wxduHfdOkIgdbZdZI.crl (hash: +xhzM+41G0OdMsQ5sLjTqU8zHOs9HuSgQL+Ks/Gf74o=)
2: D02785608C0911EAAFF6CD27C4F9AE02.roa (hash: Jhv7IIpmMM0oZ7iAKkds1Qiv2p8w6iMgKtc0KDhD18s=)
3: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (hash: WlJN5u1oi9WPrD229vbsWsLGL/hLS+xCYNJ5+hmxu8E=)
4: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (hash: 9Z+s94Y5T1K7IVPTPlx/BgDTI68R9a8i/jpS5x1Nr4c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2634 (0xa4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Validity
Not Before: Jan 24 19:13:30 2026 GMT
Not After : Jan 31 19:13:30 2026 GMT
Subject: CN=697519da-074f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0e:2b:17:39:2f:59:fe:db:f8:64:a3:36:bb:
3c:ad:79:19:a0:c1:31:0d:ef:43:ac:a2:ae:f4:92:
16:e4:2d:f0:4a:61:2b:c1:f6:ba:a3:10:a2:1d:11:
73:b1:2b:1c:3a:a2:be:d4:59:8b:e1:7e:c4:a6:b5:
34:93:5d:36:ef:36:09:55:3e:1a:67:43:40:b3:09:
dc:27:b1:9d:bc:4a:31:5c:cb:93:f7:79:ba:fe:b4:
cd:eb:da:57:d9:3c:59:61:98:1c:82:68:b5:46:65:
af:f3:b0:66:5d:2e:4c:c0:68:4f:ad:31:fd:09:3d:
fe:6f:ec:2f:22:39:4b:c5:ec:50:96:f5:c7:a4:4e:
65:88:e8:62:be:10:ac:12:ae:bf:e7:8b:f1:17:69:
61:9b:d5:a6:6c:39:4d:0a:37:9b:e3:5c:74:97:8e:
2a:2f:10:c6:c1:4c:95:f8:f6:b4:cb:54:3d:84:87:
5c:3f:cc:05:8c:7e:d0:be:f1:20:32:d1:a5:1e:05:
f7:11:ca:47:f6:f1:2b:f4:c2:8b:b2:9b:9e:d0:c4:
8a:2f:0c:83:a4:47:f5:aa:59:80:50:2f:e3:ae:42:
67:fc:d8:11:4d:7e:0d:19:00:a9:41:42:e2:f4:f9:
52:e2:db:d5:04:33:10:60:45:5c:31:45:4c:8e:27:
c6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F6:B8:AC:BF:43:33:55:C1:E4:97:8B:D0:CE:03:52:C9:82:5D:61
X509v3 Authority Key Identifier:
keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:46:fd:07:f3:47:13:a8:e2:24:bb:88:eb:73:b6:fa:21:c7:
bd:9b:1b:90:00:64:f9:6a:e9:c2:65:e2:5d:66:eb:bb:78:b4:
7f:2b:34:be:ae:5f:a9:81:9e:2e:31:6e:66:55:af:de:9c:b2:
da:4f:b0:a3:04:98:17:99:84:01:ba:42:9b:08:d1:b2:f8:75:
3f:43:4e:89:1b:db:d5:0b:44:c3:75:f1:d0:06:1f:49:bc:a8:
3d:c3:19:7c:b6:a3:26:86:1a:46:74:11:4c:c9:33:fd:ba:e7:
ac:0e:ae:76:64:34:0c:46:fd:c3:41:e7:9b:92:ac:cd:b7:4f:
66:08:6a:de:51:05:43:91:da:fe:0a:97:5a:dc:26:2b:59:cb:
4a:8b:80:6c:82:7a:5b:b4:f0:67:04:9b:12:b2:1f:43:6f:e1:
f0:21:8b:60:c3:d9:04:7a:24:28:3f:37:81:23:73:b1:c5:41:
56:0c:aa:ca:10:2f:72:f0:d6:7d:94:6e:c7:a6:de:7d:ba:aa:
65:91:f5:f1:42:c1:01:90:47:ed:1f:7b:30:e1:f9:a3:6d:8e:
d7:7d:05:98:23:e3:33:58:02:fa:f2:6f:0d:49:d6:da:09:df:
98:c2:96:af:6a:fb:71:43:72:a4:f6:94:ea:b7:f9:7d:d2:0e:
2a:22:3f:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg2NjYxMTAvBgNVBAUTKDMyODQzMzg0RkFFNkFGNkMzMTc2RTFERjc0RTkwODgx
RDZEOTc1OTIwHhcNMjYwMTI0MTkxMzMwWhcNMjYwMTMxMTkxMzMwWjAYMRYwFAYD
VQQDDA02OTc1MTlkYS0wNzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7g4rFzkvWf7b+GSjNrs8rXkZoMExDe9DrKKu9JIW5C3wSmErwfa6oxCiHRFz
sSscOqK+1FmL4X7EprU0k1027zYJVT4aZ0NAswncJ7GdvEoxXMuT93m6/rTN69pX
2TxZYZgcgmi1RmWv87BmXS5MwGhPrTH9CT3+b+wvIjlLxexQlvXHpE5liOhivhCs
Eq6/54vxF2lhm9WmbDlNCjeb41x0l44qLxDGwUyV+Pa0y1Q9hIdcP8wFjH7QvvEg
MtGlHgX3EcpH9vEr9MKLspue0MSKLwyDpEf1qlmAUC/jrkJn/NgRTX4NGQCpQULi
9PlS4tvVBDMQYEVcMUVMjifGxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBr2uKy/
QzNVweSXi9DOA1LJgl1hMB8GA1UdIwQYMBaAFDKEM4T65q9sMXbh33TpCIHW2XWS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY2Ni82MjNDRDZFNDg0
RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIyd3hkdUhmZE9rSWdkYlpk
WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01vUXpoUHJtcjJ3eGR1SGZkT2tJZ2RiWmRaSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODY2Ni82MjNDRDZFNDg0RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIy
d3hkdUhmZE9rSWdkYlpkWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCkRv0H80cTqOIku4jrc7b6Ice9mxuQAGT5aunCZeJdZuu7eLR/KzS+
rl+pgZ4uMW5mVa/enLLaT7CjBJgXmYQBukKbCNGy+HU/Q06JG9vVC0TDdfHQBh9J
vKg9wxl8tqMmhhpGdBFMyTP9uuesDq52ZDQMRv3DQeebkqzNt09mCGreUQVDkdr+
Cpda3CYrWctKi4BsgnpbtPBnBJsSsh9Db+HwIYtgw9kEeiQoPzeBI3OxxUFWDKrK
EC9y8NZ9lG7Hpt59uqplkfXxQsEBkEftH3sw4fmjbY7XfQWYI+MzWAL68m8NSdba
Cd+YwpavavtxQ3Kk9pTqt/l90g4qIj85
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:01 2026 by rpki-client