This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json)
Hash identifier: 8BF0fQcV53nBGaLt8NrrndWGHPlpqYkBqNojSXhUV00=
Subject key identifier: 22:FA:E2:43:AF:4E:93:FA:19:A9:85:20:E0:C4:E6:9D:C0:F0:1A:C4
Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24
Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024
Certificate serial: 14C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
Manifest number: 14B7
Signing time: Sat 24 Jan 2026 16:36:30 +0000
Manifest this update: Sat 24 Jan 2026 16:36:30 +0000
Manifest next update: Sat 31 Jan 2026 16:36:30 +0000
Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: S52gEm2LUvfAFq/5Frk2upuvGr+bsvdJ8VDOxlqJqrY=)
2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: +fYcXUUOxqjne/yMdR0BaLunZ8SANdMDHI2Ya9W1pUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl
rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5314 (0x14c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024
Validity
Not Before: Jan 24 16:36:30 2026 GMT
Not After : Jan 31 16:36:30 2026 GMT
Subject: CN=6974f50e-80df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:61:03:ea:61:c4:13:c6:20:c3:1d:44:c3:
73:0a:8b:2d:4c:e5:db:c2:22:7f:76:7a:bb:e3:47:
c4:76:e9:c6:6c:4f:79:52:95:c7:ad:1f:92:7b:6d:
83:ee:38:19:ae:b8:aa:9b:62:5b:49:d4:27:31:ba:
83:cc:34:f3:c5:48:57:36:0e:c5:b3:5c:10:1c:ab:
94:9b:c1:15:f8:1d:43:0b:2e:0a:c3:1e:28:60:7e:
a9:cc:4f:b6:c7:b9:7f:a6:65:23:c3:4c:50:e7:23:
db:cd:e9:f1:ab:21:84:78:7c:bb:f0:01:54:5c:80:
75:da:03:6b:77:0b:ce:f5:e5:d4:eb:04:04:c1:9a:
8d:fc:ab:2e:78:78:e1:2b:f6:a2:bb:f8:a2:be:23:
ae:a2:8f:4a:95:ce:24:fc:b0:35:b7:92:67:0c:28:
b8:56:10:2e:49:96:4c:45:c2:6c:6a:55:dc:4b:ea:
62:de:3c:11:c5:8a:b1:1b:f6:6f:23:3e:5c:eb:ff:
2a:c7:ce:0b:d4:21:b6:98:d4:b7:e6:b9:2e:cf:2e:
e5:6c:87:63:35:48:47:43:fb:43:43:b9:b3:45:6a:
b6:a2:a4:47:3b:8b:da:0e:59:85:14:ed:07:c3:48:
27:43:3f:23:a9:7f:81:c9:30:df:74:07:d0:b9:45:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FA:E2:43:AF:4E:93:FA:19:A9:85:20:E0:C4:E6:9D:C0:F0:1A:C4
X509v3 Authority Key Identifier:
keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:67:a5:9d:1c:7a:6d:d9:e3:1f:d2:6e:52:c8:43:cc:c9:72:
d3:e8:00:9a:2f:b8:84:5b:a7:2d:42:70:fb:52:3f:3f:98:54:
a3:57:41:ac:9a:70:f8:64:9f:af:5f:f3:b4:9b:36:87:c8:43:
7e:bd:6a:8f:b9:63:97:50:1c:43:b6:1c:62:dc:68:67:99:72:
72:7f:1e:8d:b5:68:16:b2:42:5d:4e:e8:d5:5a:79:a8:0a:e7:
c3:96:7f:e6:56:52:6e:1b:91:49:0d:f3:2d:9a:1b:c7:d3:33:
c5:3e:e9:92:9f:e4:b7:89:b8:06:2a:19:1b:01:2b:87:0b:49:
19:30:56:3d:60:c5:29:cc:d5:c6:e3:66:81:8e:6a:8e:3f:5a:
27:7c:0c:37:30:7b:57:f0:5b:3d:4e:25:57:30:65:c3:67:f1:
69:42:07:07:2a:ec:93:51:3d:c5:d1:8b:21:8c:a5:a7:e1:0b:
cf:b8:d4:ae:d1:ca:ef:d5:db:2e:0e:b1:5c:7f:54:fa:f0:2f:
77:8a:3f:28:bb:bb:f7:06:59:45:1e:95:24:c6:42:f7:2d:cd:
fc:0b:7a:98:28:5a:c8:ee:77:19:8f:a2:fc:99:3d:46:f7:1b:
2d:bd:a5:61:65:26:06:e6:41:41:ad:ba:4f:a0:e7:d0:74:00:
65:19:e9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:14 2026 by rpki-client