This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
File: rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json)
Hash identifier: lURoqoewuA/IQzmp3gLslwAc0cToRHfUfWPx6Afvdsc=
Subject key identifier: E1:87:75:DB:D6:52:2E:E4:18:C8:5B:73:65:4B:02:48:08:F0:CD:76
Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD
Certificate issuer: /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
Manifest number: 0125
Signing time: Sun 25 Jan 2026 03:53:58 +0000
Manifest this update: Sun 25 Jan 2026 03:53:57 +0000
Manifest next update: Sun 01 Feb 2026 03:53:57 +0000
Files and hashes: 1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: N12XfQyQSxJp/TMpyL3zidcaHc0c9DVhCL+f3UfIzL0=)
2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: qhoMwiHCkLg+1nceUxGKr0G4jwDK8ySCQp1HaHpIIeY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl
rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
Validity
Not Before: Jan 25 03:53:57 2026 GMT
Not After : Feb 1 03:53:57 2026 GMT
Subject: CN=697593d6-fefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3c:00:9e:f8:b7:1c:9c:f7:67:67:0a:e5:56:
19:46:b9:02:b4:6b:32:c6:31:b0:31:06:be:6c:cc:
18:4f:c3:af:85:ce:af:24:20:b1:61:45:a9:50:b3:
02:33:f9:31:a2:d4:9e:42:11:b0:82:52:ec:b7:b8:
1c:db:fb:02:35:24:1f:0a:cc:b4:5f:29:d3:68:f1:
42:f2:fb:b7:69:ff:0e:b0:1e:c9:0d:6d:ba:e4:b7:
1b:ca:a7:f4:44:f9:3f:c8:5e:3c:f3:d8:7f:9a:9d:
b4:03:d0:f3:25:f8:46:8c:4f:8a:72:5f:12:74:1c:
b0:05:19:ce:c5:e2:3e:90:b4:b2:de:df:72:36:e4:
f0:46:e9:11:56:fc:ac:72:6a:4a:f3:22:cc:84:e7:
99:cc:e6:c1:cf:c1:99:05:b9:af:0f:94:c8:d8:d9:
09:50:6f:82:2f:9e:26:8f:6f:95:d4:47:bb:93:6a:
7d:e2:c1:4b:ae:5b:8b:22:6b:e0:da:9f:46:95:64:
d2:07:a0:bb:d8:cc:62:9e:c1:82:66:4c:3b:fe:08:
48:c5:db:fc:95:76:18:5f:59:1e:02:56:c0:c3:97:
0e:74:d6:cd:be:46:0a:f6:56:c7:f9:55:cf:6e:a0:
1f:ab:11:b4:9e:0f:d3:54:61:8a:20:e7:80:5e:c4:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:87:75:DB:D6:52:2E:E4:18:C8:5B:73:65:4B:02:48:08:F0:CD:76
X509v3 Authority Key Identifier:
keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9e:cd:3d:0a:06:5a:e7:da:d8:cb:ee:73:b6:50:3b:26:56:
15:1d:9b:33:58:fb:84:80:c1:44:d5:64:9d:83:44:97:a6:3c:
59:03:bd:b9:7c:a8:e5:48:fb:94:4e:a9:e2:db:46:b1:5f:bc:
20:92:00:c3:47:21:93:48:5b:0e:83:99:b4:74:79:4a:82:f6:
25:e5:24:d9:db:da:23:44:82:fa:d3:e8:18:2e:9c:a1:5f:c2:
b4:12:9f:be:a6:c1:73:24:5e:c8:06:3b:1c:f4:6e:02:da:09:
1d:d4:01:ab:65:b2:ef:77:3e:dc:78:70:68:0a:ba:e9:f7:24:
e1:d3:a8:1d:42:25:7c:a2:f6:a3:aa:10:13:73:26:dc:6b:73:
24:8c:d1:65:12:10:b9:dc:db:76:d0:57:e8:2e:00:93:60:f0:
e0:3a:be:55:aa:cc:25:35:bd:9f:a6:49:fb:b9:f7:14:f4:b1:
0c:0c:93:5f:a9:f3:b9:51:9e:ff:d9:b7:1c:6a:b4:31:dc:2a:
8f:c5:d7:ab:d4:5a:57:17:96:1f:c2:35:a3:86:9a:f7:cf:06:
cd:1a:d8:f9:92:19:ca:ae:9a:90:09:0f:40:af:37:2b:9c:45:
9a:47:c5:95:af:12:2c:8a:4c:d9:40:56:b2:56:3b:61:fe:54:
55:7d:5d:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc5NDgxMTAvBgNVBAUTKEFDOTMwQjYyNUQ4MzlDNTY4REE4MTk5RTM4RkY5REI3
RTM3ODMzQkQwHhcNMjYwMTI1MDM1MzU3WhcNMjYwMjAxMDM1MzU3WjAYMRYwFAYD
VQQDDA02OTc1OTNkNi1mZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7TwAnvi3HJz3Z2cK5VYZRrkCtGsyxjGwMQa+bMwYT8Ovhc6vJCCxYUWpULMC
M/kxotSeQhGwglLst7gc2/sCNSQfCsy0XynTaPFC8vu3af8OsB7JDW265Lcbyqf0
RPk/yF4889h/mp20A9DzJfhGjE+Kcl8SdBywBRnOxeI+kLSy3t9yNuTwRukRVvys
cmpK8yLMhOeZzObBz8GZBbmvD5TI2NkJUG+CL54mj2+V1Ee7k2p94sFLrluLImvg
2p9GlWTSB6C72MxinsGCZkw7/ghIxdv8lXYYX1keAlbAw5cOdNbNvkYK9lbH+VXP
bqAfqxG0ng/TVGGKIOeAXsTyAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGHddvW
Ui7kGMhbc2VLAkgI8M12MB8GA1UdIwQYMBaAFKyTC2Jdg5xWjagZnjj/nbfjeDO9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzk0OC80Rjk3NkRGODM3
RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5GYU5xQm1lT1AtZHQtTjRN
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JKTUxZbDJEbkZhTnFCbWVPUC1kdC1ONE03MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Nzk0OC80Rjk3NkRGODM3RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5G
YU5xQm1lT1AtZHQtTjRNNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrns09CgZa59rYy+5ztlA7JlYVHZszWPuEgMFE1WSdg0SXpjxZA725
fKjlSPuUTqni20axX7wgkgDDRyGTSFsOg5m0dHlKgvYl5STZ29ojRIL60+gYLpyh
X8K0Ep++psFzJF7IBjsc9G4C2gkd1AGrZbLvdz7ceHBoCrrp9yTh06gdQiV8ovaj
qhATcybca3MkjNFlEhC53Nt20FfoLgCTYPDgOr5VqswlNb2fpkn7ufcU9LEMDJNf
qfO5UZ7/2bccarQx3CqPxder1FpXF5YfwjWjhpr3zwbNGtj5khnKrpqQCQ9Arzcr
nEWaR8WVrxIsikzZQFayVjth/lRVfV3H
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:25 2026 by rpki-client