This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft
File: 57DhU8QU0ThUitp16M0FzWk2cgY.mft (raw, json)
Hash identifier: Ic0IKGLYm4jZL2p4X7HNMkPbQ3LDlyZAvUeTu9dfYZU=
Subject key identifier: DD:02:07:EE:0F:85:58:A3:5E:BA:93:49:C1:94:DD:6F:DA:E1:81:90
Authority key identifier: E7:B0:E1:53:C4:14:D1:38:54:8A:DA:75:E8:CD:05:CD:69:36:72:06
Certificate issuer: /CN=A91B42CA/serialNumber=E7B0E153C414D138548ADA75E8CD05CD69367206
Certificate serial: 3504
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57DhU8QU0ThUitp16M0FzWk2cgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft
Manifest number: 53FB
Signing time: Sat 24 Jan 2026 14:58:16 +0000
Manifest this update: Sat 24 Jan 2026 14:58:16 +0000
Manifest next update: Sat 31 Jan 2026 14:58:16 +0000
Files and hashes: 1: 57DhU8QU0ThUitp16M0FzWk2cgY.crl (hash: 1HnwEfk17/wjVFxFp24R6PjGeee/GWtFTzAh4ro9CUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.crl
rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57DhU8QU0ThUitp16M0FzWk2cgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13572 (0x3504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B42CA, serialNumber=E7B0E153C414D138548ADA75E8CD05CD69367206
Validity
Not Before: Jan 24 14:58:16 2026 GMT
Not After : Jan 31 14:58:16 2026 GMT
Subject: CN=6974de08-7116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:c9:84:ae:d1:02:fd:c9:a2:e0:44:24:ec:
61:eb:74:ea:59:02:28:ec:66:8b:09:23:7f:32:e6:
9d:b3:c6:3e:77:f3:fe:db:e9:b4:98:ed:50:30:5d:
d3:61:2d:6a:5e:4e:99:94:e3:f7:73:8e:01:1c:39:
e3:5a:25:61:77:34:79:d4:84:8c:7c:8f:7a:6b:07:
37:70:7e:29:ff:d5:87:f0:10:54:07:55:a7:af:19:
3b:2f:b9:49:e3:84:3f:6a:df:32:60:4d:f0:ab:b1:
14:ba:0c:7f:ff:9d:27:a0:f9:96:32:cd:fb:b6:c6:
6c:f7:f1:e5:00:90:18:75:06:91:a4:b0:97:a0:25:
cb:2b:a5:3a:aa:ad:2d:c1:b8:03:fb:54:e0:4f:91:
c8:e1:53:95:e2:57:0c:46:d8:ef:67:7e:21:2b:32:
42:2d:ed:3b:53:7e:ac:02:6d:39:6d:c1:16:fd:da:
ff:6b:16:33:07:2a:4d:ba:da:3c:64:42:a6:47:ae:
f5:8f:1f:9b:34:91:fb:4a:da:5d:6e:8e:8d:78:f0:
57:b0:23:59:98:fb:72:0c:36:34:f4:63:ca:32:65:
c3:7f:b4:8c:c0:21:c9:32:97:c7:dc:27:3a:f4:d2:
36:fb:87:c5:c1:14:55:6e:7c:91:9c:be:e5:f3:86:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:02:07:EE:0F:85:58:A3:5E:BA:93:49:C1:94:DD:6F:DA:E1:81:90
X509v3 Authority Key Identifier:
keyid:E7:B0:E1:53:C4:14:D1:38:54:8A:DA:75:E8:CD:05:CD:69:36:72:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57DhU8QU0ThUitp16M0FzWk2cgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:13:ee:c5:d4:b7:06:10:79:ad:fd:bf:44:d4:f5:de:96:2e:
d8:d9:11:3f:04:31:62:24:35:21:09:49:40:5e:70:58:07:07:
cf:6d:bf:8b:d7:a5:ea:9d:3f:e6:65:9e:03:69:45:6e:eb:ac:
c1:af:a9:e0:1c:98:8f:d4:b2:d1:23:c0:fd:82:eb:98:f8:95:
11:6e:f4:70:2e:a9:fc:ff:8f:7c:04:c3:98:63:46:2e:e9:8b:
ab:79:c7:c3:54:ec:99:ea:03:d6:41:1e:75:32:b6:2b:cc:2f:
62:8b:33:b6:c4:d1:ce:5e:e9:bb:81:42:1c:f7:5b:5e:5b:c1:
30:f2:80:34:0d:5c:aa:3a:f1:64:c2:d4:a0:86:23:2c:ed:36:
a0:59:2a:7e:b9:70:ff:1a:45:4d:88:45:9e:e0:de:79:ed:01:
8a:2e:e8:77:fb:84:08:7a:41:d3:61:88:f7:0e:e2:ea:d2:c7:
e1:43:33:91:b6:d2:1d:74:f3:10:c2:45:ed:04:3b:0e:6c:ab:
06:10:b4:a7:fe:45:90:57:85:79:ec:72:7d:03:dc:72:41:bd:
c3:83:b9:46:fd:2f:5a:4b:55:2f:32:2c:9c:c5:7e:de:87:76:
65:9e:cf:1e:db:83:36:bc:83:85:04:07:15:33:24:3f:e7:a2:
cf:13:1a:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQyQ0ExMTAvBgNVBAUTKEU3QjBFMTUzQzQxNEQxMzg1NDhBREE3NUU4Q0QwNUNE
NjkzNjcyMDYwHhcNMjYwMTI0MTQ1ODE2WhcNMjYwMTMxMTQ1ODE2WjAYMRYwFAYD
VQQDDA02OTc0ZGUwOC03MTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvNbJhK7RAv3JouBEJOxh63TqWQIo7GaLCSN/Muads8Y+d/P+2+m0mO1QMF3T
YS1qXk6ZlOP3c44BHDnjWiVhdzR51ISMfI96awc3cH4p/9WH8BBUB1Wnrxk7L7lJ
44Q/at8yYE3wq7EUugx//50noPmWMs37tsZs9/HlAJAYdQaRpLCXoCXLK6U6qq0t
wbgD+1TgT5HI4VOV4lcMRtjvZ34hKzJCLe07U36sAm05bcEW/dr/axYzBypNuto8
ZEKmR671jx+bNJH7Stpdbo6NePBXsCNZmPtyDDY09GPKMmXDf7SMwCHJMpfH3Cc6
9NI2+4fFwRRVbnyRnL7l84acuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0CB+4P
hVijXrqTScGU3W/a4YGQMB8GA1UdIwQYMBaAFOew4VPEFNE4VIradejNBc1pNnIG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE
QTAxMUUyODNBMTYxOTIwOEIwMkNEMi81N0RoVThRVTBUaFVpdHAxNk0wRnpXazJj
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzU3RGhVOFFVMFRoVWl0cDE2TTBGeldrMmNnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi81N0RoVThRVTBU
aFVpdHAxNk0wRnpXazJjZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNE+7F1LcGEHmt/b9E1PXeli7Y2RE/BDFiJDUhCUlAXnBYBwfPbb+L
16XqnT/mZZ4DaUVu66zBr6ngHJiP1LLRI8D9guuY+JURbvRwLqn8/498BMOYY0Yu
6YurecfDVOyZ6gPWQR51MrYrzC9iizO2xNHOXum7gUIc91teW8Ew8oA0DVyqOvFk
wtSghiMs7TagWSp+uXD/GkVNiEWe4N557QGKLuh3+4QIekHTYYj3DuLq0sfhQzOR
ttIddPMQwkXtBDsObKsGELSn/kWQV4V57HJ9A9xyQb3Dg7lG/S9aS1UvMiycxX7e
h3Zlns8e24M2vIOFBAcVMyQ/56LPExpb
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:37 2026 by rpki-client