This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json)
Hash identifier: 4+MZdU+8o/9DdSkl+pYNmoutRaX7QY452mgUUuTYJuI=
Subject key identifier: 38:7C:1C:05:44:4E:80:DA:0C:14:64:9E:94:77:46:26:51:B3:AC:4A
Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF
Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
Certificate serial: 059F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
Manifest number: 058D
Signing time: Sat 24 Jan 2026 22:30:33 +0000
Manifest this update: Sat 24 Jan 2026 22:30:33 +0000
Manifest next update: Sat 31 Jan 2026 22:30:33 +0000
Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: YiIIktaUiyrStgAroMntLrozRrs17/RqyKdYXa1+z+E=)
2: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: oVtoN+E5ZyRj5IanIEy9OruScApwiNCgt2Cj41NAG60=)
3: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: 0vZEihrEiMOTrqZx3qCnY1CqP36ZOjzC0GFn4Q1L7IY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl
rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1439 (0x59f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
Validity
Not Before: Jan 24 22:30:33 2026 GMT
Not After : Jan 31 22:30:33 2026 GMT
Subject: CN=69754809-1365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:56:82:e5:02:5a:3c:6a:67:72:4f:44:e4:
7e:09:e7:5a:36:48:a8:0d:a1:fe:57:e0:21:0c:50:
00:cb:83:92:26:99:34:a3:22:45:4a:05:39:6c:42:
46:3f:86:6a:f6:b5:13:04:a3:6e:af:cd:a2:51:34:
27:e4:96:e7:76:8d:a3:84:63:93:8c:67:20:3d:69:
c1:64:8d:2c:94:07:a4:60:75:61:0b:d7:46:f4:27:
79:65:9f:19:8b:0d:2f:15:b3:39:4e:2b:5f:49:57:
e9:70:7c:f9:c0:5c:55:f0:11:5b:93:96:3f:5b:4c:
48:6a:c3:9b:f5:c2:3e:2a:85:70:7d:f2:cb:8a:bf:
38:a5:95:3b:42:b9:9d:b6:58:b1:d5:77:90:09:f6:
b6:53:f5:68:59:db:1a:dd:6d:77:eb:ae:36:0b:c8:
54:81:1d:85:a0:83:26:a8:52:3d:9a:7c:80:96:27:
29:7c:65:a6:a6:8e:ee:5d:55:7e:81:6b:54:e8:5a:
ac:22:21:1a:85:d7:d8:89:5f:64:c7:89:c6:a4:0c:
81:d2:78:fa:1a:bf:fb:eb:1d:e5:ab:5c:50:bd:cc:
3f:5c:cb:c3:0e:a4:46:2b:1b:64:25:8c:3e:63:98:
ee:c3:cb:a9:76:16:2e:42:82:89:e3:e8:c8:d8:0b:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7C:1C:05:44:4E:80:DA:0C:14:64:9E:94:77:46:26:51:B3:AC:4A
X509v3 Authority Key Identifier:
keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:22:cf:25:f5:c0:ad:c2:4b:af:7c:73:0f:09:eb:cd:92:37:
b1:49:54:88:89:16:3b:07:d1:2f:26:9e:8b:64:67:27:c3:d6:
5d:2a:39:ba:fc:c9:59:85:46:15:f1:d4:c8:45:ce:b4:27:18:
02:66:1f:4a:45:8f:94:39:d3:ae:50:33:fd:9d:36:77:bf:7d:
be:7c:e7:bf:9c:a1:b9:f4:32:4e:cf:e3:f4:19:47:a0:49:3c:
72:95:9f:af:8c:bf:54:ec:4f:5d:28:0a:7a:ef:84:71:2f:c5:
1f:50:97:3e:50:97:bc:a7:1b:e9:be:24:3e:7c:52:70:99:75:
88:eb:6b:01:8d:46:54:6c:d5:fb:21:6f:f4:04:d0:70:ba:2a:
96:07:56:c6:cc:cb:e2:66:8d:b1:03:3b:30:6c:a2:d3:32:3f:
59:33:f1:25:6f:81:1d:96:f9:2d:81:65:28:3b:f4:4e:50:f7:
c3:12:c6:73:c8:4b:77:c1:85:05:f0:48:b7:6d:43:0e:47:55:
cf:25:2e:1c:52:e5:f3:3c:5b:14:77:92:ca:9d:07:1a:5b:9b:
a1:9b:a4:80:92:a8:2e:de:ab:20:2d:16:5e:be:c9:f8:7e:bb:
f2:0f:9b:13:04:b6:b3:c6:fa:1e:f1:c2:05:c7:81:1b:a7:af:
f0:e4:a7:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1
ODE1MjMxRkYwHhcNMjYwMTI0MjIzMDMzWhcNMjYwMTMxMjIzMDMzWjAYMRYwFAYD
VQQDDA02OTc1NDgwOS0xMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAisFWguUCWjxqZ3JPROR+CedaNkioDaH+V+AhDFAAy4OSJpk0oyJFSgU5bEJG
P4Zq9rUTBKNur82iUTQn5Jbndo2jhGOTjGcgPWnBZI0slAekYHVhC9dG9Cd5ZZ8Z
iw0vFbM5TitfSVfpcHz5wFxV8BFbk5Y/W0xIasOb9cI+KoVwffLLir84pZU7Qrmd
tlix1XeQCfa2U/VoWdsa3W136642C8hUgR2FoIMmqFI9mnyAlicpfGWmpo7uXVV+
gWtU6FqsIiEahdfYiV9kx4nGpAyB0nj6Gr/76x3lq1xQvcw/XMvDDqRGKxtkJYw+
Y5juw8updhYuQoKJ4+jI2AviFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDh8HAVE
ToDaDBRknpR3RiZRs6xKMB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB
NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN
ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Mjc4Qi8wNkIwQjYyQTBBNDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0
X1ZqbVBCRlNoRWhZRlNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCKIs8l9cCtwkuvfHMPCevNkjexSVSIiRY7B9EvJp6LZGcnw9ZdKjm6
/MlZhUYV8dTIRc60JxgCZh9KRY+UOdOuUDP9nTZ3v32+fOe/nKG59DJOz+P0GUeg
STxylZ+vjL9U7E9dKAp674RxL8UfUJc+UJe8pxvpviQ+fFJwmXWI62sBjUZUbNX7
IW/0BNBwuiqWB1bGzMviZo2xAzswbKLTMj9ZM/Elb4EdlvktgWUoO/ROUPfDEsZz
yEt3wYUF8Ei3bUMOR1XPJS4cUuXzPFsUd5LKnQcaW5uhm6SAkqgu3qsgLRZevsn4
frvyD5sTBLazxvoe8cIFx4Ebp6/w5KcJ
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:34:33 2026 by rpki-client