This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft
File: e9ZuQtUwkEC0dRqcKySR1818FLg.mft (raw, json)
Hash identifier: wMHaYbGzSz//IX5UubrRTwW2CClRizpxT81CQC/WG5I=
Subject key identifier: DC:7A:0B:82:74:1B:57:DA:7E:0B:95:41:46:60:C6:31:28:DE:F8:D9
Authority key identifier: 7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8
Certificate issuer: /CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8
Certificate serial: 3508
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft
Manifest number: 3507
Signing time: Sat 24 Jan 2026 14:19:13 +0000
Manifest this update: Sat 24 Jan 2026 14:19:13 +0000
Manifest next update: Sat 31 Jan 2026 14:19:13 +0000
Files and hashes: 1: e9ZuQtUwkEC0dRqcKySR1818FLg.crl (hash: fwsvGwz7KTwM0sYqHnw+KaLMite6mZgieuk8LYfQZSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl
rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13576 (0x3508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA5AD, serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8
Validity
Not Before: Jan 24 14:19:13 2026 GMT
Not After : Jan 31 14:19:13 2026 GMT
Subject: CN=6974d4e1-7685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:98:85:11:89:e5:ad:d2:98:26:d6:d8:cb:
d1:b4:96:80:0b:6b:a4:72:32:30:b4:fb:0a:67:de:
a7:60:19:c7:98:3a:b0:ce:03:ed:58:52:10:e5:ea:
b1:5e:da:9d:2b:52:36:c1:0c:a8:73:71:60:53:5a:
95:1e:05:34:4c:f6:ac:c3:8f:be:55:1f:b9:ea:cb:
00:3e:7a:fa:ff:37:0e:75:e5:01:70:f8:7f:b7:fd:
74:90:e9:30:2c:65:f6:ee:3c:9a:62:03:f6:fc:af:
06:89:e9:9b:44:e2:88:c7:fd:2d:49:15:21:01:b0:
12:10:21:56:9f:45:9e:75:ea:c7:f6:bb:71:76:d6:
89:06:93:87:17:f9:7b:06:43:44:e1:13:3e:36:10:
3e:13:49:1e:dc:f6:c4:72:1a:8b:5b:ab:74:5b:28:
43:a9:49:99:e7:90:7e:6a:2d:e6:d6:94:44:b2:9d:
eb:1d:e4:1b:52:8a:69:80:ed:6d:92:e8:c8:76:71:
b6:c3:19:91:8f:f3:20:e8:03:94:eb:dd:8c:3f:2b:
c0:98:6f:33:6d:f8:11:df:99:3d:4b:5c:2b:7b:4f:
02:c1:f3:e3:74:5c:0a:f4:b0:84:ea:60:75:7b:a5:
74:22:a3:e4:34:39:e2:28:2b:e9:f5:98:5b:76:14:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7A:0B:82:74:1B:57:DA:7E:0B:95:41:46:60:C6:31:28:DE:F8:D9
X509v3 Authority Key Identifier:
keyid:7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ec:a6:f2:7e:7e:05:2f:c9:37:e7:d2:ce:d6:6a:82:ec:7d:
1f:86:7e:c1:5c:64:81:e5:c0:35:a8:5e:ad:a9:22:9c:0b:61:
56:64:b0:ff:e2:e4:fa:0d:7e:48:60:04:3c:af:76:91:a5:7c:
95:b9:1b:1e:ed:54:4c:74:68:4b:1f:9a:03:0c:46:d4:9c:ef:
b7:d1:14:28:8a:51:3f:05:d1:c8:8d:42:87:fb:02:eb:99:81:
92:3f:42:44:1f:84:e1:91:b1:11:e5:a3:04:db:2b:9f:b6:4b:
f9:15:48:70:11:64:7f:de:b2:ba:1f:89:48:b5:d0:9d:5b:0d:
5f:5c:f8:c0:f1:ae:30:1c:d2:46:55:4c:06:7f:36:8e:21:f4:
56:ab:62:a2:ae:b0:c7:d5:cc:56:09:bc:a0:cb:2f:69:55:5f:
4c:df:3b:0f:b8:71:e3:bd:7a:3f:2f:f5:24:fc:4a:77:c8:c6:
c5:da:0b:f5:b1:d1:c9:fc:64:f4:ad:a5:91:46:d0:3b:83:6d:
43:c2:a6:de:0a:4a:54:89:09:bf:74:9a:60:70:d6:9b:c9:e3:
52:be:be:2b:78:27:48:81:8f:42:65:a2:8e:84:20:8d:ce:52:
e6:02:4f:8a:f1:a3:d7:3b:ca:de:dc:11:01:d1:e9:52:cf:ba:
c7:5a:0f:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0E1QUQxMTAvBgNVBAUTKDdCRDY2RTQyRDUzMDkwNDBCNDc1MUE5QzJCMjQ5MUQ3
Q0Q3QzE0QjgwHhcNMjYwMTI0MTQxOTEzWhcNMjYwMTMxMTQxOTEzWjAYMRYwFAYD
VQQDDA02OTc0ZDRlMS03Njg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoGeYhRGJ5a3SmCbW2MvRtJaAC2ukcjIwtPsKZ96nYBnHmDqwzgPtWFIQ5eqx
XtqdK1I2wQyoc3FgU1qVHgU0TPasw4++VR+56ssAPnr6/zcOdeUBcPh/t/10kOkw
LGX27jyaYgP2/K8GiembROKIx/0tSRUhAbASECFWn0WederH9rtxdtaJBpOHF/l7
BkNE4RM+NhA+E0ke3PbEchqLW6t0WyhDqUmZ55B+ai3m1pREsp3rHeQbUoppgO1t
kujIdnG2wxmRj/Mg6AOU692MPyvAmG8zbfgR35k9S1wre08CwfPjdFwK9LCE6mB1
e6V0IqPkNDniKCvp9ZhbdhR6ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNx6C4J0
G1fafguVQUZgxjEo3vjZMB8GA1UdIwQYMBaAFHvWbkLVMJBAtHUanCskkdfNfBS4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVBRC8zNjZDNDQyRTFE
NzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tFQzBkUnFjS3lTUjE4MThG
TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2U5WnVRdFV3a0VDMGRScWNLeVNSMTgxOEZMZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTVBRC8zNjZDNDQyRTFENzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tF
QzBkUnFjS3lTUjE4MThGTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAp7Kbyfn4FL8k359LO1mqC7H0fhn7BXGSB5cA1qF6tqSKcC2FWZLD/
4uT6DX5IYAQ8r3aRpXyVuRse7VRMdGhLH5oDDEbUnO+30RQoilE/BdHIjUKH+wLr
mYGSP0JEH4ThkbER5aME2yuftkv5FUhwEWR/3rK6H4lItdCdWw1fXPjA8a4wHNJG
VUwGfzaOIfRWq2KirrDH1cxWCbygyy9pVV9M3zsPuHHjvXo/L/Uk/Ep3yMbF2gv1
sdHJ/GT0raWRRtA7g21DwqbeCkpUiQm/dJpgcNabyeNSvr4reCdIgY9CZaKOhCCN
zlLmAk+K8aPXO8re3BEB0elSz7rHWg9P
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:14 2026 by rpki-client