This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json)
Hash identifier: YW1wlydfKBE9MG39LSbV3pfjVILru+Az87Uhyy0tMeo=
Subject key identifier: F5:B0:0F:79:75:06:C3:79:15:FF:D0:B3:39:A2:91:69:45:DE:A1:AA
Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Certificate serial: D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
Manifest number: C5
Signing time: Sun 25 Jan 2026 05:14:54 +0000
Manifest this update: Sun 25 Jan 2026 05:14:53 +0000
Manifest next update: Sun 01 Feb 2026 05:14:53 +0000
Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: yCVf2a+D/ooWBCUqyuHIFRj+CQ4/HV0ugf3a3g3kPHQ=)
2: C4A33CA4275711F0BA7C7752C4F9AE02.roa (hash: UodVJEZpG8jo//8K6ghcq6/5J2v+GWRbykcw2y9KJwI=)
3: 04241E3222F011F0B021396DC4F9AE02.roa (hash: 9kO0kni7kPsnzaPtvxx9OF7DZQab6VvydwUdZC1SpXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Validity
Not Before: Jan 25 05:14:53 2026 GMT
Not After : Feb 1 05:14:53 2026 GMT
Subject: CN=6975a6ce-3243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:9d:be:03:60:5c:db:eb:1f:35:9a:6e:18:
10:b9:f4:55:52:d7:0b:08:e3:93:14:37:db:31:eb:
e5:2a:3a:94:91:16:91:2d:4d:40:79:b4:f3:18:28:
21:8b:7f:df:15:56:25:8d:20:da:85:90:be:2d:55:
35:e3:e1:3f:3d:6f:bf:ce:39:95:2e:5c:5b:1d:5c:
de:19:8e:2e:78:ef:82:fd:d0:19:eb:f3:2d:48:b7:
1d:10:db:3c:f8:80:b5:c8:c9:fc:58:44:df:ca:f9:
21:7c:95:7c:4e:cd:4b:ad:9f:67:79:a3:e1:f5:6b:
f7:84:d6:09:ff:b7:76:73:ec:38:70:0d:4d:ba:6e:
96:28:36:42:d6:a4:80:ea:f8:8a:4e:cb:e2:16:e5:
fa:20:6b:c6:1f:df:ee:e0:e0:2c:aa:55:c3:00:a9:
af:f0:d4:34:ce:db:3b:bd:08:0b:18:ea:9b:42:8c:
70:67:18:b0:57:53:be:89:2b:d9:30:e8:9d:69:58:
6b:dd:51:8c:e3:23:d3:a3:95:39:55:63:b9:e1:51:
97:84:1f:be:58:3c:3c:b1:5a:09:b8:f3:a1:96:5c:
ba:40:56:16:2b:d4:2a:40:e9:26:f6:96:98:ef:de:
bc:a8:b7:72:48:ed:a7:a5:f3:58:5a:ed:ad:54:db:
1e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B0:0F:79:75:06:C3:79:15:FF:D0:B3:39:A2:91:69:45:DE:A1:AA
X509v3 Authority Key Identifier:
keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:de:67:0f:7b:db:ac:5a:fc:1b:8b:c0:05:8f:cd:15:37:bd:
74:05:50:fc:6c:77:d0:bc:ac:8b:a1:08:74:31:4a:33:61:77:
c2:c7:27:5c:09:3d:0e:9f:30:78:ad:62:19:40:73:9c:05:6a:
5b:e5:0d:8c:7f:fa:77:32:9b:05:c0:21:7f:b8:cb:d4:f2:20:
79:46:97:12:41:56:8a:58:e6:2e:cc:6b:33:c6:fc:e4:a2:90:
77:63:ac:70:30:70:01:c1:53:8e:12:52:78:04:ce:67:a0:0a:
76:13:73:22:a5:e6:b2:45:ad:8b:26:19:fa:38:dc:67:ea:4a:
0e:81:a3:82:7d:8e:09:b0:0e:a4:1c:5c:17:46:ec:48:93:22:
e9:75:c0:6a:39:d5:73:2c:a7:d9:e5:e1:65:5c:59:06:f4:aa:
43:2a:70:d2:16:1a:75:79:b8:f5:aa:db:3d:35:12:f1:3f:a4:
e5:7c:79:6f:c9:60:1a:0e:9a:a7:91:85:f5:a7:7e:d7:c6:67:
5c:32:e1:c7:49:0b:30:d3:0e:91:33:4d:45:57:91:00:0d:1d:
70:8e:d8:90:06:ce:d4:f8:7d:a0:f0:e6:c7:bd:29:b3:b0:18:
af:04:ee:55:a0:c0:36:82:0e:33:87:44:c3:93:44:73:07:25:
3f:fd:29:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkRFRUIxMTAvBgNVBAUTKDZCNjNBNjBFN0Q3RjUxRDAzODcyOEM2NDI1OTA2MDQ3
MDE2Qzk5MDQwHhcNMjYwMTI1MDUxNDUzWhcNMjYwMjAxMDUxNDUzWjAYMRYwFAYD
VQQDDA02OTc1YTZjZS0zMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0XydvgNgXNvrHzWabhgQufRVUtcLCOOTFDfbMevlKjqUkRaRLU1AebTzGCgh
i3/fFVYljSDahZC+LVU14+E/PW+/zjmVLlxbHVzeGY4ueO+C/dAZ6/MtSLcdENs8
+IC1yMn8WETfyvkhfJV8Ts1LrZ9neaPh9Wv3hNYJ/7d2c+w4cA1Num6WKDZC1qSA
6viKTsviFuX6IGvGH9/u4OAsqlXDAKmv8NQ0zts7vQgLGOqbQoxwZxiwV1O+iSvZ
MOidaVhr3VGM4yPTo5U5VWO54VGXhB++WDw8sVoJuPOhlly6QFYWK9QqQOkm9paY
7968qLdySO2npfNYWu2tVNseXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWwD3l1
BsN5Ff/QszmikWlF3qGqMB8GA1UdIwQYMBaAFGtjpg59f1HQOHKMZCWQYEcBbJkE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREVFQi8xRUU3RkE2MEU1
RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1VkQTRjb3hrSlpCZ1J3RnNt
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21RUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
REVFQi8xRUU3RkE2MEU1RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1Vk
QTRjb3hrSlpCZ1J3RnNtUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCX3mcPe9usWvwbi8AFj80VN710BVD8bHfQvKyLoQh0MUozYXfCxydc
CT0OnzB4rWIZQHOcBWpb5Q2Mf/p3MpsFwCF/uMvU8iB5RpcSQVaKWOYuzGszxvzk
opB3Y6xwMHABwVOOElJ4BM5noAp2E3MipeayRa2LJhn6ONxn6koOgaOCfY4JsA6k
HFwXRuxIkyLpdcBqOdVzLKfZ5eFlXFkG9KpDKnDSFhp1ebj1qts9NRLxP6TlfHlv
yWAaDpqnkYX1p37XxmdcMuHHSQsw0w6RM01FV5EADR1wjtiQBs7U+H2g8ObHvSmz
sBivBO5VoMA2gg4zh0TDk0RzByU//Sl8
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:36 2026 by rpki-client