This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
File: JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft (raw, json)
Hash identifier: t+qhzqPv1xa5ynDDVLsiew8Jz23cG+dmqRsWnApXUaw=
Subject key identifier: 84:AA:01:6C:3D:4C:46:9C:42:69:96:52:AC:FF:4C:18:65:EB:3E:6A
Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32
Certificate issuer: /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
Manifest number: 0161
Signing time: Sun 25 Jan 2026 03:21:19 +0000
Manifest this update: Sun 25 Jan 2026 03:21:19 +0000
Manifest next update: Sun 01 Feb 2026 03:21:19 +0000
Files and hashes: 1: JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl (hash: Z7AsZaKOhlg+gAxJkizEJETXt2qCJxZFvzD+Zom62Hg=)
2: DC23F5180E1611EF91DF311EC4F9AE02.roa (hash: PDtdUX6JrHo4d5GjgXXthgA5sLxtJKv9u0i8nv/vqsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl
rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB86D, serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
Validity
Not Before: Jan 25 03:21:19 2026 GMT
Not After : Feb 1 03:21:19 2026 GMT
Subject: CN=69758c2f-5114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:42:8b:6f:cf:59:78:1a:17:27:8e:41:09:
53:17:d5:9c:90:30:a2:f1:a6:18:fe:5c:dc:98:05:
36:ed:c5:88:0e:67:fd:64:ec:2f:02:3f:c1:4d:c7:
bd:af:39:15:12:34:c8:8c:2d:88:62:c7:f6:f1:e1:
33:d5:f8:1e:68:8c:fb:dc:7d:da:8b:5d:10:59:54:
b3:3a:a8:a0:ad:72:69:71:9f:53:35:f4:53:e4:72:
ac:59:92:08:46:7c:06:f0:25:be:e3:7b:87:dd:2d:
02:c6:69:cf:17:97:3d:b8:61:dd:d8:5b:c2:47:4c:
b2:82:35:8d:9c:85:73:c4:4c:8b:66:b7:79:a0:ec:
9a:f5:39:cb:d8:2d:37:6c:1d:31:41:62:ec:0d:b5:
15:93:bb:cd:33:3c:50:30:df:ba:f9:18:7d:b1:78:
d9:a3:3c:9d:01:29:21:99:73:26:73:dc:64:1b:d2:
5a:a0:94:d7:62:09:14:30:a6:c1:0a:f2:4a:56:ed:
fc:33:11:6e:8f:82:48:52:b1:cd:b0:c5:c7:f2:47:
e4:f4:6a:7a:e7:3b:40:c4:9c:24:ea:1e:cf:23:90:
ff:d3:65:fc:ac:00:5d:dc:37:43:57:35:19:79:8a:
b4:4c:35:e4:1c:a8:22:b7:12:6e:4a:d1:38:d4:af:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AA:01:6C:3D:4C:46:9C:42:69:96:52:AC:FF:4C:18:65:EB:3E:6A
X509v3 Authority Key Identifier:
keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:81:3c:de:d3:65:d2:02:f7:c1:60:8f:d3:76:ef:2d:5a:7a:
5e:8d:50:bb:76:78:63:56:5a:52:ca:0b:5e:c4:48:71:b8:23:
27:2a:db:73:e2:d6:17:f2:64:69:be:1d:10:60:a1:7b:f9:56:
ac:e3:7f:9f:11:b8:e7:c7:16:85:4c:ac:ec:fd:ba:2e:b5:b3:
3b:dc:98:81:ce:a1:67:ad:54:ea:ca:54:fa:95:2f:87:34:e9:
10:eb:dd:e0:58:9d:18:48:28:69:4c:21:6d:e9:2a:b1:ec:58:
3a:f5:52:37:82:3d:c6:de:b4:5c:c1:eb:4e:63:a0:68:65:5a:
12:71:c9:ce:8e:31:cc:9f:53:50:30:b5:4b:2b:60:e5:cf:cc:
8e:4a:3e:41:41:ff:ec:da:e7:6c:12:75:7e:d9:db:97:4e:54:
7f:52:d1:ef:34:b3:f7:42:96:8c:66:a9:54:c1:83:8a:f2:de:
f8:c1:ee:8b:6d:d0:af:80:92:67:57:33:46:9e:e0:c4:9b:4e:
4b:05:b1:a6:d1:07:10:35:15:2b:00:c7:1b:d7:63:59:f0:01:
3a:37:c2:fe:b7:95:c2:f8:0f:34:48:0b:af:60:b7:bd:6d:c8:
3b:3a:d6:3f:35:be:ac:12:30:87:a2:37:3a:7b:83:9f:8d:9f:
35:17:ec:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I4NkQxMTAvBgNVBAUTKDI1NkI1RDE3OTBEMjRDNEQ2Qzk3MjA2NEU5MUM2QUYw
MEJENjhFMzIwHhcNMjYwMTI1MDMyMTE5WhcNMjYwMjAxMDMyMTE5WjAYMRYwFAYD
VQQDDA02OTc1OGMyZi01MTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsQ1Ci2/PWXgaFyeOQQlTF9WckDCi8aYY/lzcmAU27cWIDmf9ZOwvAj/BTce9
rzkVEjTIjC2IYsf28eEz1fgeaIz73H3ai10QWVSzOqigrXJpcZ9TNfRT5HKsWZII
RnwG8CW+43uH3S0CxmnPF5c9uGHd2FvCR0yygjWNnIVzxEyLZrd5oOya9TnL2C03
bB0xQWLsDbUVk7vNMzxQMN+6+Rh9sXjZozydASkhmXMmc9xkG9JaoJTXYgkUMKbB
CvJKVu38MxFuj4JIUrHNsMXH8kfk9Gp65ztAxJwk6h7PI5D/02X8rABd3DdDVzUZ
eYq0TDXkHKgitxJuStE41K+AeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISqAWw9
TEacQmmWUqz/TBhl6z5qMB8GA1UdIwQYMBaAFCVrXReQ0kxNbJcgZOkcavAL1o4y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjg2RC82RjA1ODIwRUU1
M0UxMUVFQTM4RjA4NzdDNEY5QUUwMi9KV3RkRjVEU1RFMXNseUJrNlJ4cThBdldq
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pXdGRGNURTVEUxc2x5Qms2UnhxOEF2V2pqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Qjg2RC82RjA1ODIwRUU1M0UxMUVFQTM4RjA4NzdDNEY5QUUwMi9KV3RkRjVEU1RF
MXNseUJrNlJ4cThBdldqakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFgTze02XSAvfBYI/Tdu8tWnpejVC7dnhjVlpSygtexEhxuCMnKttz
4tYX8mRpvh0QYKF7+Vas43+fEbjnxxaFTKzs/boutbM73JiBzqFnrVTqylT6lS+H
NOkQ693gWJ0YSChpTCFt6Sqx7Fg69VI3gj3G3rRcwetOY6BoZVoSccnOjjHMn1NQ
MLVLK2Dlz8yOSj5BQf/s2udsEnV+2duXTlR/UtHvNLP3QpaMZqlUwYOK8t74we6L
bdCvgJJnVzNGnuDEm05LBbGm0QcQNRUrAMcb12NZ8AE6N8L+t5XC+A80SAuvYLe9
bcg7OtY/Nb6sEjCHojc6e4OfjZ81F+yb
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:24:44 2026 by rpki-client