This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
File: -c2wYYjVT9E3MDC5IMjkRdstPVc.mft (raw, json)
Hash identifier: rYuYSGePe4QfSDm9HSt8ITGLBtQ+WhpmmtzuNVlv8o8=
Subject key identifier: 85:9F:9F:7A:4E:ED:50:07:58:AD:F6:00:D4:8B:E5:3C:21:D6:3C:D2
Authority key identifier: F9:CD:B0:61:88:D5:4F:D1:37:30:30:B9:20:C8:E4:45:DB:2D:3D:57
Certificate issuer: /CN=A91A99F8/serialNumber=F9CDB06188D54FD1373030B920C8E445DB2D3D57
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
Manifest number: A8
Signing time: Sun 25 Jan 2026 05:29:50 +0000
Manifest this update: Sun 25 Jan 2026 05:29:50 +0000
Manifest next update: Sun 01 Feb 2026 05:29:50 +0000
Files and hashes: 1: -c2wYYjVT9E3MDC5IMjkRdstPVc.crl (hash: aquB+Zp6RpaoGoATxX2rgshleyAM6cf+PlIkcj/3Zvo=)
2: C4D0CEECACF611F0AC34117FC4F9AE02.roa (hash: 7ucYBUaCLmqgDRuv79Vd3l7kVK2Q22cJEETdC+Ms3yg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.crl
rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A99F8, serialNumber=F9CDB06188D54FD1373030B920C8E445DB2D3D57
Validity
Not Before: Jan 25 05:29:50 2026 GMT
Not After : Feb 1 05:29:50 2026 GMT
Subject: CN=6975aa4e-a8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:47:fe:00:42:b3:f4:be:9d:5a:23:cb:4e:
be:23:0e:2a:20:79:f4:c1:8f:11:91:f9:5f:00:8c:
92:0f:b0:ac:b7:92:4a:f1:98:9d:54:4f:a3:33:b9:
e9:b6:70:94:45:80:18:7f:ee:19:db:b5:f9:aa:04:
b9:60:c6:51:0b:94:a0:38:1a:41:82:07:05:0c:b7:
69:bc:52:f1:0a:38:2a:af:eb:32:f7:9f:95:09:74:
28:72:4d:6c:07:a3:6e:19:6f:f2:8f:a6:b6:e4:81:
24:b6:da:c3:37:97:50:7d:a6:ee:05:f0:ec:4a:d4:
4d:d0:32:e4:4b:0a:04:b7:0c:89:19:b4:86:ad:59:
d9:ae:57:58:bc:01:59:9d:7e:3d:25:65:bb:68:89:
12:32:cf:6f:4a:9c:a0:c8:9a:c5:1c:92:55:18:48:
02:5f:bb:64:88:5f:ca:c9:07:a1:51:2e:eb:1d:54:
4b:ac:cc:67:f9:db:e4:29:70:61:ca:25:13:80:25:
68:97:dc:75:86:17:06:be:81:10:45:bd:db:5c:e9:
0c:0f:80:ea:a3:b6:7a:70:0f:44:66:35:b4:73:80:
2f:b7:7d:c7:ff:7d:b5:5a:6f:42:a4:aa:e5:f4:77:
fe:4f:80:02:ae:3b:4a:56:05:57:bd:02:8b:ca:e5:
9c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9F:9F:7A:4E:ED:50:07:58:AD:F6:00:D4:8B:E5:3C:21:D6:3C:D2
X509v3 Authority Key Identifier:
keyid:F9:CD:B0:61:88:D5:4F:D1:37:30:30:B9:20:C8:E4:45:DB:2D:3D:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8c:69:03:b1:bd:7f:3d:6b:d6:48:7c:2d:c1:95:6c:4a:58:
6c:2f:79:93:55:bd:74:e4:93:93:2d:51:d4:db:c6:81:f9:ef:
75:c6:fa:37:9c:21:47:cf:b5:03:02:e0:6f:31:ca:be:a4:46:
12:9f:a1:20:35:ca:10:9e:64:4b:0e:10:25:b3:0b:1f:97:b3:
82:62:c1:3e:6d:90:31:20:9e:ca:3f:81:ac:c7:55:bb:9b:75:
d3:5d:f2:29:04:c6:14:5f:2f:bd:96:3f:3d:5c:75:61:84:ef:
7d:b7:fd:6f:53:6f:5a:60:f8:e2:6e:6c:9c:7f:9f:87:fb:5d:
60:0a:d4:a5:05:25:63:0c:ec:23:37:fe:e8:f4:20:0f:e6:b3:
7c:5f:d6:7c:04:29:79:a2:cf:28:97:b9:87:e3:dc:b9:a4:40:
84:0b:6f:03:34:85:f1:13:77:fb:1a:1a:95:3b:68:fb:4e:70:
73:61:d0:2b:4e:24:b5:ef:bf:32:e8:b4:a8:62:f9:1a:74:d0:
5e:60:33:fc:ba:ed:01:29:45:48:ff:7e:b3:e4:0a:b4:4c:fe:
98:15:f5:ce:02:e3:36:1b:fe:62:ef:74:d5:78:c3:a8:3d:50:
6a:ca:7e:e7:42:ca:1d:11:79:4b:c1:97:f9:fb:ec:1c:7c:4b:
63:39:a1:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk5RjgxMTAvBgNVBAUTKEY5Q0RCMDYxODhENTRGRDEzNzMwMzBCOTIwQzhFNDQ1
REIyRDNENTcwHhcNMjYwMTI1MDUyOTUwWhcNMjYwMjAxMDUyOTUwWjAYMRYwFAYD
VQQDDA02OTc1YWE0ZS1hOGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3mNH/gBCs/S+nVojy06+Iw4qIHn0wY8RkflfAIySD7Cst5JK8ZidVE+jM7np
tnCURYAYf+4Z27X5qgS5YMZRC5SgOBpBggcFDLdpvFLxCjgqr+sy95+VCXQock1s
B6NuGW/yj6a25IEkttrDN5dQfabuBfDsStRN0DLkSwoEtwyJGbSGrVnZrldYvAFZ
nX49JWW7aIkSMs9vSpygyJrFHJJVGEgCX7tkiF/KyQehUS7rHVRLrMxn+dvkKXBh
yiUTgCVol9x1hhcGvoEQRb3bXOkMD4Dqo7Z6cA9EZjW0c4Avt33H/321Wm9CpKrl
9Hf+T4ACrjtKVgVXvQKLyuWcgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWfn3pO
7VAHWK32ANSL5Twh1jzSMB8GA1UdIwQYMBaAFPnNsGGI1U/RNzAwuSDI5EXbLT1X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTlGOC83QTREN0I4ODA0
QTcxMUYwQjRENzM5ODJDNEY5QUUwMi8tYzJ3WVlqVlQ5RTNNREM1SU1qa1Jkc3RQ
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1jMndZWWpWVDlFM01EQzVJTWprUmRzdFBWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTlGOC83QTREN0I4ODA0QTcxMUYwQjRENzM5ODJDNEY5QUUwMi8tYzJ3WVlqVlQ5
RTNNREM1SU1qa1Jkc3RQVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBujGkDsb1/PWvWSHwtwZVsSlhsL3mTVb105JOTLVHU28aB+e91xvo3
nCFHz7UDAuBvMcq+pEYSn6EgNcoQnmRLDhAlswsfl7OCYsE+bZAxIJ7KP4Gsx1W7
m3XTXfIpBMYUXy+9lj89XHVhhO99t/1vU29aYPjibmycf5+H+11gCtSlBSVjDOwj
N/7o9CAP5rN8X9Z8BCl5os8ol7mH49y5pECEC28DNIXxE3f7GhqVO2j7TnBzYdAr
TiS1778y6LSoYvkadNBeYDP8uu0BKUVI/36z5Aq0TP6YFfXOAuM2G/5i73TVeMOo
PVBqyn7nQsodEXlLwZf5++wcfEtjOaHy
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:26:48 2026 by rpki-client