This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
File: -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json)
Hash identifier: xGJVNeK1Mmao2gLD2QQSyX/Urzb7hSEdZo6PwOUOiL0=
Subject key identifier: BF:86:15:A7:E9:7A:F5:39:2F:77:4D:9F:7B:5A:63:CD:73:2D:FB:EC
Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
Manifest number: BD
Signing time: Fri 23 Jan 2026 05:04:55 +0000
Manifest this update: Fri 23 Jan 2026 05:04:55 +0000
Manifest next update: Fri 30 Jan 2026 05:04:55 +0000
Files and hashes: 1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: tGfGmYalzTKLhGtYRZnJD/V6869oLekpILxaOAJrY6U=)
2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: SIysPbQ0shw6SImSP7LGItvtceoka+GBhE2dzjDub+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl
rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 05:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A35, serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Validity
Not Before: Jan 23 05:04:55 2026 GMT
Not After : Jan 30 05:04:55 2026 GMT
Subject: CN=69730177-cf02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:73:8c:a5:16:81:83:7d:f2:6d:ee:fa:d3:
a9:ea:c4:a5:25:62:d5:96:8e:30:f4:17:b9:5b:39:
be:3e:83:6f:e4:6e:c4:10:68:9e:02:e1:90:f5:3f:
6b:4f:66:64:bf:57:67:15:32:7b:f7:b2:65:93:f5:
ef:85:2b:d8:fb:00:3e:72:1d:2e:0a:aa:3f:e8:81:
43:81:74:cd:27:a8:32:14:64:74:a6:11:27:50:7c:
7f:be:8e:d2:41:af:1b:fe:0a:58:9b:66:b2:64:0a:
a6:91:81:c5:00:49:d0:81:ea:d9:82:74:8c:64:ea:
6d:0c:8b:98:5e:bb:58:b6:ee:88:9d:0b:1d:5f:62:
ba:0e:77:9b:da:5d:73:1a:8e:14:f4:62:3d:27:72:
ef:09:36:8b:c9:b2:c7:16:84:68:56:6b:fe:05:2d:
6e:e1:2b:b9:42:68:22:d3:ea:15:29:69:7a:02:27:
0e:e9:46:a5:7c:e6:fd:f5:ac:f4:cf:0e:11:f4:66:
3b:3f:27:ad:5a:2c:57:0b:31:18:1b:64:8d:74:37:
ca:89:d1:59:7c:2e:43:dd:8a:e5:e5:ea:5a:dc:86:
66:b1:d9:74:c9:ca:ce:60:80:f0:c2:ff:a2:54:94:
9c:6f:a8:ae:6a:3a:4a:d6:a2:46:e0:c8:a9:17:a1:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:15:A7:E9:7A:F5:39:2F:77:4D:9F:7B:5A:63:CD:73:2D:FB:EC
X509v3 Authority Key Identifier:
keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:fe:f2:f1:e3:21:81:52:fd:93:7a:cf:db:c0:0f:15:a8:eb:
51:21:d6:c3:7a:2f:6c:bd:f6:01:c0:18:0e:4d:f5:94:6f:6a:
77:48:28:f8:7f:57:23:af:2f:3d:1d:66:93:cb:f1:63:76:6a:
89:d0:ef:74:11:0c:26:fc:cb:5b:de:b6:51:12:c1:7b:74:91:
a4:66:5f:fa:1e:8b:ac:11:8b:d4:e4:64:69:a7:65:e9:17:0e:
ae:c6:44:5a:ef:04:e9:4e:81:56:51:fd:f4:51:55:55:2d:24:
c6:c0:72:ae:d0:97:df:f0:ae:d3:7e:62:94:7b:72:ba:83:6d:
31:35:0e:5e:a4:99:53:c1:ce:68:6b:5c:56:e6:3a:42:34:23:
74:6b:44:f6:67:fe:92:80:f0:a2:4f:12:85:a8:79:c3:cc:ad:
1c:d2:38:fb:6a:ac:52:bc:65:02:74:2e:60:7e:a2:3b:e7:b8:
db:e3:9c:a8:3d:df:c1:15:a5:8c:18:16:d0:a5:15:ed:cb:13:
95:78:b4:b9:6d:cc:d1:4a:39:ed:7a:72:d9:06:98:4f:43:79:
e0:2b:0f:6e:f9:68:91:55:fc:8c:d7:58:37:d6:7f:ff:d6:e6:
c9:06:12:c0:13:e7:1e:89:60:38:50:7d:bb:c9:49:a1:54:a8:
64:b7:2a:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZBMzUxMTAvBgNVBAUTKEZCNkI5NDYzNjFGMEM1QzgyRTJCMDY3NDBENEJBOEIw
Qjk5MzUzRjgwHhcNMjYwMTIzMDUwNDU1WhcNMjYwMTMwMDUwNDU1WjAYMRYwFAYD
VQQDDA02OTczMDE3Ny1jZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoWFzjKUWgYN98m3u+tOp6sSlJWLVlo4w9Be5Wzm+PoNv5G7EEGieAuGQ9T9r
T2Zkv1dnFTJ797Jlk/XvhSvY+wA+ch0uCqo/6IFDgXTNJ6gyFGR0phEnUHx/vo7S
Qa8b/gpYm2ayZAqmkYHFAEnQgerZgnSMZOptDIuYXrtYtu6InQsdX2K6Dneb2l1z
Go4U9GI9J3LvCTaLybLHFoRoVmv+BS1u4Su5Qmgi0+oVKWl6AicO6UalfOb99az0
zw4R9GY7PyetWixXCzEYG2SNdDfKidFZfC5D3Yrl5epa3IZmsdl0ycrOYIDwwv+i
VJScb6iuajpK1qJG4MipF6F9RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+GFafp
evU5L3dNn3taY81zLfvsMB8GA1UdIwQYMBaAFPtrlGNh8MXILisGdA1LqLC5k1P4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzNS9BMTU5Rjc4MkQ0
OTIxMUVGQjU2NERFNjJDNEY5QUUwMi8tMnVVWTJId3hjZ3VLd1owRFV1b3NMbVRV
X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy0ydVVZMkh3eGNndUt3WjBEVXVvc0xtVFVfZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkEzNS9BMTU5Rjc4MkQ0OTIxMUVGQjU2NERFNjJDNEY5QUUwMi8tMnVVWTJId3hj
Z3VLd1owRFV1b3NMbVRVX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBA/vLx4yGBUv2Tes/bwA8VqOtRIdbDei9svfYBwBgOTfWUb2p3SCj4
f1cjry89HWaTy/FjdmqJ0O90EQwm/Mtb3rZREsF7dJGkZl/6HousEYvU5GRpp2Xp
Fw6uxkRa7wTpToFWUf30UVVVLSTGwHKu0Jff8K7TfmKUe3K6g20xNQ5epJlTwc5o
a1xW5jpCNCN0a0T2Z/6SgPCiTxKFqHnDzK0c0jj7aqxSvGUCdC5gfqI757jb45yo
Pd/BFaWMGBbQpRXtyxOVeLS5bczRSjntenLZBphPQ3ngKw9u+WiRVfyM11g31n//
1ubJBhLAE+ceiWA4UH27yUmhVKhktyr1
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:58 2026 by rpki-client