This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json)
Hash identifier: rtJiPYr4qKRTVnT4NfOOgsXuzLFeEZcMbzYGTooN/L8=
Subject key identifier: 20:9D:85:41:E1:79:BF:3D:5A:BA:C9:C5:FF:FF:BD:6C:3C:63:A3:F4
Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
Manifest number: 014B
Signing time: Fri 23 Jan 2026 03:28:38 +0000
Manifest this update: Fri 23 Jan 2026 03:28:37 +0000
Manifest next update: Fri 30 Jan 2026 03:28:37 +0000
Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: XuyfhVtVRrjENIhuNcOGnWGxdYdgI+sGBhHE71KNx88=)
2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: 7/3ODwQ2dlZbxqeVnJstobH8SWsvoF3IBlCZtLMYHu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 03:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Validity
Not Before: Jan 23 03:28:37 2026 GMT
Not After : Jan 30 03:28:37 2026 GMT
Subject: CN=6972eae5-c9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:55:b6:4a:cd:93:74:6f:8e:7c:fb:19:04:
ba:73:c7:72:57:39:47:20:f7:6d:18:c1:53:5b:66:
04:04:00:65:be:87:f1:d5:af:86:dc:68:49:54:5b:
06:e2:ab:ae:d1:e4:62:dd:44:b2:2e:c5:49:2e:c8:
4c:f2:c2:c0:4e:e8:d4:81:7b:e4:42:bd:15:0d:d5:
d9:42:8d:ad:18:a4:1d:c7:04:59:a4:79:e0:0f:fe:
0a:2a:27:99:76:9c:be:c3:4c:f6:43:41:7d:48:8d:
a7:74:5d:b6:c7:1c:69:30:76:55:41:fe:ed:69:84:
6a:1e:ea:55:48:9e:65:9a:9c:79:41:07:1f:22:51:
d4:d2:5e:53:dd:5f:18:10:24:95:bb:83:4b:fc:07:
80:32:44:39:1f:89:21:b6:05:09:57:e7:88:33:17:
df:19:74:51:9c:85:6e:ee:0d:b8:e6:98:c2:c7:2e:
fe:19:d7:aa:43:14:b6:a5:0a:17:ca:78:87:56:4c:
d4:d3:10:dc:d4:33:85:0b:c9:01:b5:6a:43:48:ae:
ee:6a:29:d8:63:a3:8c:dd:7a:90:40:fa:a9:c5:f6:
38:cd:2b:3b:c7:07:a3:77:52:84:0f:72:9e:53:8d:
68:46:12:45:36:0a:52:51:71:3a:8b:36:9f:b8:08:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9D:85:41:E1:79:BF:3D:5A:BA:C9:C5:FF:FF:BD:6C:3C:63:A3:F4
X509v3 Authority Key Identifier:
keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:d7:0c:bb:ad:c9:d9:d1:08:6a:8a:db:d4:a1:da:2c:a8:9e:
83:9d:3b:bd:68:4c:39:fa:12:80:d0:ae:9f:1b:15:71:6a:05:
d4:8e:81:2a:96:2e:77:f4:c2:79:46:3d:4c:fc:60:8c:7a:73:
72:ac:6f:96:57:0f:00:4a:91:f7:03:30:dd:62:78:49:fc:31:
f7:cc:ad:a5:ba:d7:d4:95:6a:43:ad:5d:3b:3e:14:44:1e:40:
89:d3:6a:67:f1:8c:f9:e5:01:9c:51:b7:82:44:4a:6f:6f:de:
01:08:d1:b7:10:36:bf:57:fa:17:e3:40:e1:94:34:c2:aa:5b:
d9:d3:53:83:d8:fa:77:c7:87:12:8f:0f:e9:72:03:20:69:80:
7e:ed:be:fc:30:b8:55:c1:99:7a:b2:fd:90:03:54:a9:a5:bb:
80:c2:b4:a3:22:76:ea:c3:68:b7:36:a9:3a:43:f7:aa:dd:88:
9c:db:07:e0:42:e6:29:3b:a5:81:0f:25:f9:8b:d9:54:12:24:
a5:52:f5:cd:d3:89:5c:29:42:1e:09:2f:40:73:08:ba:08:6f:
41:d8:6c:9b:63:c5:e9:11:f1:97:ce:52:7f:fb:31:93:f1:1c:
2a:f1:1d:cc:fa:18:59:d3:9d:ff:f0:71:f0:f7:31:31:17:47:
b3:3b:96:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUUxQjUxMTAvBgNVBAUTKEVFQzBFOTk5ODdEQzFFQTlENDAyRjg4NEZDREE5N0Uw
MzE0NUE0QTAwHhcNMjYwMTIzMDMyODM3WhcNMjYwMTMwMDMyODM3WjAYMRYwFAYD
VQQDDA02OTcyZWFlNS1jOWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzlJVtkrNk3Rvjnz7GQS6c8dyVzlHIPdtGMFTW2YEBABlvofx1a+G3GhJVFsG
4quu0eRi3USyLsVJLshM8sLATujUgXvkQr0VDdXZQo2tGKQdxwRZpHngD/4KKieZ
dpy+w0z2Q0F9SI2ndF22xxxpMHZVQf7taYRqHupVSJ5lmpx5QQcfIlHU0l5T3V8Y
ECSVu4NL/AeAMkQ5H4khtgUJV+eIMxffGXRRnIVu7g245pjCxy7+GdeqQxS2pQoX
yniHVkzU0xDc1DOFC8kBtWpDSK7uainYY6OM3XqQQPqpxfY4zSs7xwejd1KED3Ke
U41oRhJFNgpSUXE6izafuAjRXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCdhUHh
eb89WrrJxf//vWw8Y6P0MB8GA1UdIwQYMBaAFO7A6ZmH3B6p1AL4hPzal+AxRaSg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTFCNS84QjQwNUU1RTAw
M0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hxblVBdmlFX05xWDRERkZw
S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdzRHBtWWZjSHFuVUF2aUVfTnFYNERGRnBLQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTFCNS84QjQwNUU1RTAwM0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hx
blVBdmlFX05xWDRERkZwS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAI1wy7rcnZ0QhqitvUodosqJ6DnTu9aEw5+hKA0K6fGxVxagXUjoEq
li539MJ5Rj1M/GCMenNyrG+WVw8ASpH3AzDdYnhJ/DH3zK2lutfUlWpDrV07PhRE
HkCJ02pn8Yz55QGcUbeCREpvb94BCNG3EDa/V/oX40DhlDTCqlvZ01OD2Pp3x4cS
jw/pcgMgaYB+7b78MLhVwZl6sv2QA1SppbuAwrSjInbqw2i3Nqk6Q/eq3Yic2wfg
QuYpO6WBDyX5i9lUEiSlUvXN04lcKUIeCS9Acwi6CG9B2GybY8XpEfGXzlJ/+zGT
8Rwq8R3M+hhZ053/8HHw9zExF0ezO5bt
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:23 2026 by rpki-client