This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft File: MSV13k1GQ_rfrkiHbfRWfX18aFY.mft (raw, json) Hash identifier: 8RVpX6B0fSg/huAULplmo4/uEUnaaF2Y+HBGdC0+rz4= Subject key identifier: 51:D6:D9:6E:DD:6F:8A:10:23:64:24:33:F8:76:06:A5:B0:44:7C:02 Authority key identifier: 31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56 Certificate issuer: /CN=A91BD7A3/serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft Manifest number: 23 Signing time: Sun 25 Jan 2026 06:47:18 +0000 Manifest this update: Sun 25 Jan 2026 06:47:18 +0000 Manifest next update: Sun 01 Feb 2026 06:47:18 +0000 Files and hashes: 1: MSV13k1GQ_rfrkiHbfRWfX18aFY.crl (hash: JKu/nk7aWuemNR9Or1DP8khF2DRQDPgD/bJp5oVQV7g=) 2: 127C35B4C52511F09456F21BC4F9AE02.roa (hash: nO3ZI61tCBJta8JPb4PdTpG+lV1HeV50ks8A1FY7r+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD7A3, serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856 Validity Not Before: Jan 25 06:47:18 2026 GMT Not After : Feb 1 06:47:18 2026 GMT Subject: CN=6975bc76-488c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:42:73:e7:1d:d7:c3:41:90:7c:f0:72:5e:2f: 2c:2d:9b:b8:9a:45:d6:5b:98:92:53:7d:b6:cc:6e: c4:46:a4:8e:3b:67:fe:ea:77:59:02:72:fb:4b:f2: 34:93:9f:11:e4:78:7a:23:7e:12:9f:dd:6e:3e:96: 55:b0:23:52:4c:07:b9:8e:41:f1:6c:e5:dd:44:eb: 25:2b:61:6f:d1:1a:50:71:1f:23:85:2e:fa:23:9f: 35:1c:59:38:45:8f:48:12:ac:e7:d2:35:5d:e1:aa: b0:ec:9b:ff:53:3d:70:58:17:f6:3c:a9:c7:03:f0: e1:f4:fc:87:84:aa:3c:0c:54:0d:33:97:6e:76:ab: 0e:04:6e:8b:93:56:42:3b:dc:14:2e:f9:ef:12:e0: 6f:74:cb:5a:ad:83:5e:af:3d:41:44:78:27:ca:48: 30:86:4c:3b:f8:ea:39:ad:51:f8:05:1c:3d:c1:e2: d3:b9:3f:02:4f:f7:dd:b3:b1:18:4c:2f:3a:fb:22: 70:71:7e:3e:60:60:0c:33:86:dc:b6:d6:af:63:b2: 8c:68:bf:d9:39:a9:bb:31:f4:47:08:63:d0:49:c5: 5d:e1:44:5d:87:bc:f9:91:d2:68:a9:75:61:0c:6c: 1d:55:b2:b4:d1:6f:29:d6:d0:d4:90:f6:44:d0:90: bd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D6:D9:6E:DD:6F:8A:10:23:64:24:33:F8:76:06:A5:B0:44:7C:02 X509v3 Authority Key Identifier: keyid:31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:3c:2d:7a:0f:3b:82:bb:7d:73:9c:69:1d:0d:f9:25:1b:b8: b5:5c:79:9a:53:79:d4:de:fe:d4:36:ad:41:6d:c1:38:91:d3: fa:2a:1e:e1:16:54:f2:42:9d:80:38:f0:9a:3f:b6:04:d4:8a: cb:b2:bf:c5:f4:8c:1c:16:cc:45:02:7e:29:83:fa:fe:28:55: d1:40:09:21:fd:14:48:74:8b:94:91:a9:06:b2:62:c0:43:fc: 1b:1a:33:6b:23:56:9d:90:c9:1b:ff:04:3e:a9:d5:7e:e8:99: 0d:5b:82:c9:7f:c9:f6:70:d1:c6:3a:ea:04:9c:bd:26:a2:f0: d8:f2:9c:7e:d0:2d:be:25:1d:db:4d:be:fb:4d:d5:5b:3f:88: 9a:9d:42:cb:d2:86:08:e1:d0:d9:23:f0:00:35:a2:60:53:83: d4:7e:44:b4:e0:92:9d:db:44:80:cd:3f:10:60:2d:a1:df:8d: 40:56:00:76:32:09:5a:07:1f:e0:f2:bc:ca:67:82:09:35:9c: b6:16:eb:89:19:c7:5f:7e:70:d3:da:c1:00:4a:8c:96:9d:68: 26:5c:08:fd:05:97:58:ca:66:b6:50:ca:df:3b:57:c2:40:f7: 89:25:e5:17:42:3a:ed:59:5b:3f:f6:6d:65:c1:4d:74:2f:b1: e7:5a:e5:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDdBMzExMC8GA1UEBRMoMzEyNTc1REU0RDQ2NDNGQURGQUU0ODg3NkRGNDU2N0Q3 RDdDNjg1NjAeFw0yNjAxMjUwNjQ3MThaFw0yNjAyMDEwNjQ3MThaMBgxFjAUBgNV BAMMDTY5NzViYzc2LTQ4OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9QnPnHdfDQZB88HJeLywtm7iaRdZbmJJTfbbMbsRGpI47Z/7qd1kCcvtL8jST nxHkeHojfhKf3W4+llWwI1JMB7mOQfFs5d1E6yUrYW/RGlBxHyOFLvojnzUcWThF j0gSrOfSNV3hqrDsm/9TPXBYF/Y8qccD8OH0/IeEqjwMVA0zl252qw4EbouTVkI7 3BQu+e8S4G90y1qtg16vPUFEeCfKSDCGTDv46jmtUfgFHD3B4tO5PwJP992zsRhM Lzr7InBxfj5gYAwzhty21q9jsoxov9k5qbsx9EcIY9BJxV3hRF2HvPmR0mipdWEM bB1VsrTRbynW0NSQ9kTQkL3rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUdbZbt1v ihAjZCQz+HYGpbBEfAIwHwYDVR0jBBgwFoAUMSV13k1GQ/rfrkiHbfRWfX18aFYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEN0EzLzg2MUIxMTEyQzUy NDExRjA5NTZBREQxQUM0RjlBRTAyL01TVjEzazFHUV9yZnJraUhiZlJXZlgxOGFG WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVNWMTNrMUdRX3JmcmtpSGJmUldmWDE4YUZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE N0EzLzg2MUIxMTEyQzUyNDExRjA5NTZBREQxQUM0RjlBRTAyL01TVjEzazFHUV9y ZnJraUhiZlJXZlgxOGFGWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJY8LXoPO4K7fXOcaR0N+SUbuLVceZpTedTe/tQ2rUFtwTiR0/oqHuEW VPJCnYA48Jo/tgTUisuyv8X0jBwWzEUCfimD+v4oVdFACSH9FEh0i5SRqQayYsBD /BsaM2sjVp2QyRv/BD6p1X7omQ1bgsl/yfZw0cY66gScvSai8NjynH7QLb4lHdtN vvtN1Vs/iJqdQsvShgjh0Nkj8AA1omBTg9R+RLTgkp3bRIDNPxBgLaHfjUBWAHYy CVoHH+DyvMpnggk1nLYW64kZx19+cNPawQBKjJadaCZcCP0Fl1jKZrZQyt87V8JA 94kl5RdCOu1ZWz/2bWXBTXQvseda5dc= -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:21 2026 by rpki-client