This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
File: 7TFghH3ErtktjFnRmEZbHL7y3yI.mft (raw, json)
Hash identifier: jUYdaV0pWCjVESKFUgGtK3lPDlnzR3ZKyQcIyyT3yyk=
Subject key identifier: 5C:D0:A9:7B:1A:AA:71:A2:4C:1E:95:52:4F:58:69:AC:CF:86:7C:BB
Authority key identifier: ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22
Certificate issuer: /CN=A91B6C85/serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
Manifest number: 012E
Signing time: Fri 23 Jan 2026 03:43:46 +0000
Manifest this update: Fri 23 Jan 2026 03:43:45 +0000
Manifest next update: Fri 30 Jan 2026 03:43:45 +0000
Files and hashes: 1: 7TFghH3ErtktjFnRmEZbHL7y3yI.crl (hash: k5ZZ4ObAAPuU43zmintrGPF+wisE0DFlbXJSYaDfJrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl
rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 03:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6C85, serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22
Validity
Not Before: Jan 23 03:43:45 2026 GMT
Not After : Jan 30 03:43:45 2026 GMT
Subject: CN=6972ee72-7054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:52:e7:83:86:1d:b9:9a:16:3d:97:67:72:5a:
65:7e:b8:59:71:1c:db:4b:6c:96:74:01:bd:7c:03:
a3:06:64:01:0f:62:b2:6f:a0:dc:a4:9b:4a:40:bf:
5c:14:ab:05:c7:5e:f7:16:31:4d:d9:0b:41:c7:c2:
f3:5c:46:12:78:d9:9b:ee:6b:ac:9e:50:f1:4a:70:
c0:a0:10:c2:a7:ff:a5:01:fc:7a:cf:2e:20:a8:7e:
e1:2a:05:b0:22:a9:b2:11:fe:95:ee:a2:1e:05:2f:
c2:4e:f2:96:ac:4d:ec:17:88:ef:b4:d8:cd:09:ca:
6a:e0:67:94:ea:69:f4:11:fa:79:7d:41:f5:16:2c:
f9:da:57:3f:01:c1:d4:6c:ac:08:7d:dc:ae:b3:b6:
73:7a:1e:2f:b3:46:9c:3e:8d:7e:be:33:47:38:76:
b8:df:fe:06:04:38:dd:81:59:47:00:23:02:e8:4f:
73:02:5c:d8:73:73:8e:cd:34:a5:45:d4:0c:42:23:
1a:01:81:b2:0a:2f:88:d6:2d:50:c5:11:8f:87:93:
0b:03:72:3c:59:8a:04:5d:a8:a6:5d:17:2b:2b:83:
1a:25:86:09:ba:8e:a6:4d:b9:2d:1a:37:9c:1d:1f:
74:bc:73:11:e3:73:08:97:4d:33:0f:7b:c4:28:bd:
7c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D0:A9:7B:1A:AA:71:A2:4C:1E:95:52:4F:58:69:AC:CF:86:7C:BB
X509v3 Authority Key Identifier:
keyid:ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:37:33:69:19:24:01:c1:18:55:dc:7d:19:88:e1:26:1a:1b:
64:13:2b:c7:4a:d9:a0:0c:3e:c8:6f:eb:34:35:cb:85:46:1a:
20:64:c4:86:b3:cc:45:eb:e7:06:8b:da:39:4f:5c:d3:e3:ce:
77:23:1d:a4:1a:d3:3c:7b:53:73:1b:dd:c5:9f:ad:93:41:21:
2f:c2:9a:cf:4f:2d:09:ee:58:cc:2a:09:1b:97:47:dd:89:4c:
64:47:e3:e3:e4:42:3c:83:32:3c:49:42:0f:76:c9:b6:cb:10:
7d:32:87:52:2e:40:f7:51:8d:81:85:1e:99:db:1b:cc:60:a3:
07:11:a2:a0:d5:ae:13:cf:8f:ae:fb:45:46:b6:a3:0d:fa:74:
1e:5a:5f:e7:52:2a:b1:0c:67:3e:25:ae:6e:3e:6b:e0:09:93:
23:4a:03:72:6c:3c:a3:da:4e:eb:1a:71:50:ca:18:9c:22:aa:
38:d9:a7:ed:3c:a7:05:58:f9:51:78:85:85:36:5d:75:47:7c:
2f:76:ab:d5:30:ff:8d:cc:e0:eb:68:bf:c3:cb:0a:e4:1a:76:
b9:d9:61:e8:2c:48:c3:c2:c2:ce:8d:9f:2b:b6:7f:8a:ff:6a:
0e:7c:b1:88:89:c1:91:a5:68:cf:62:69:83:2d:7e:36:33:96:
2e:25:76:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZDODUxMTAvBgNVBAUTKEVEMzE2MDg0N0RDNEFFRDkyRDhDNTlEMTk4NDY1QjFD
QkVGMkRGMjIwHhcNMjYwMTIzMDM0MzQ1WhcNMjYwMTMwMDM0MzQ1WjAYMRYwFAYD
VQQDDA02OTcyZWU3Mi03MDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9VLng4YduZoWPZdnclplfrhZcRzbS2yWdAG9fAOjBmQBD2Kyb6DcpJtKQL9c
FKsFx173FjFN2QtBx8LzXEYSeNmb7musnlDxSnDAoBDCp/+lAfx6zy4gqH7hKgWw
IqmyEf6V7qIeBS/CTvKWrE3sF4jvtNjNCcpq4GeU6mn0Efp5fUH1Fiz52lc/AcHU
bKwIfdyus7Zzeh4vs0acPo1+vjNHOHa43/4GBDjdgVlHACMC6E9zAlzYc3OOzTSl
RdQMQiMaAYGyCi+I1i1QxRGPh5MLA3I8WYoEXaimXRcrK4MaJYYJuo6mTbktGjec
HR90vHMR43MIl00zD3vEKL18LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzQqXsa
qnGiTB6VUk9YaazPhny7MB8GA1UdIwQYMBaAFO0xYIR9xK7ZLYxZ0ZhGWxy+8t8i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkM4NS8yODcwN0NCRTI4
ODYxMUVGOEYxRkIxODVDNEY5QUUwMi83VEZnaEgzRXJ0a3RqRm5SbUVaYkhMN3kz
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdURmdoSDNFcnRrdGpGblJtRVpiSEw3eTN5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkM4NS8yODcwN0NCRTI4ODYxMUVGOEYxRkIxODVDNEY5QUUwMi83VEZnaEgzRXJ0
a3RqRm5SbUVaYkhMN3kzeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBWNzNpGSQBwRhV3H0ZiOEmGhtkEyvHStmgDD7Ib+s0NcuFRhogZMSG
s8xF6+cGi9o5T1zT4853Ix2kGtM8e1NzG93Fn62TQSEvwprPTy0J7ljMKgkbl0fd
iUxkR+Pj5EI8gzI8SUIPdsm2yxB9ModSLkD3UY2BhR6Z2xvMYKMHEaKg1a4Tz4+u
+0VGtqMN+nQeWl/nUiqxDGc+Ja5uPmvgCZMjSgNybDyj2k7rGnFQyhicIqo42aft
PKcFWPlReIWFNl11R3wvdqvVMP+NzODraL/DywrkGna52WHoLEjDwsLOjZ8rtn+K
/2oOfLGIicGRpWjPYmmDLX42M5YuJXby
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:58 2026 by rpki-client