This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json)
Hash identifier: vIdGRLif22Dq1DoqjN+sRf7zP+O6SrXLwDuiMeMgVqI=
Subject key identifier: 11:6E:C8:7D:49:09:58:0E:8F:39:B9:A2:F1:C3:65:7B:4F:C4:58:76
Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0
Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
Manifest number: 34
Signing time: Sun 25 Jan 2026 06:35:39 +0000
Manifest this update: Sun 25 Jan 2026 06:35:38 +0000
Manifest next update: Sun 01 Feb 2026 06:35:38 +0000
Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: 1H/ZeMEedyQ7f25Du6s1qp0Z8RLG/CxO24/c+k7yPVE=)
2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: Vrxbp4tg7Ch8ynxq67uyQgBvWF4QcT0YiwQ07xaqChg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl
rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0
Validity
Not Before: Jan 25 06:35:38 2026 GMT
Not After : Feb 1 06:35:38 2026 GMT
Subject: CN=6975b9bb-dcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:b6:f0:05:ea:6d:9c:9d:23:fc:45:c4:67:
52:96:7f:ec:b3:78:9b:45:e2:5a:9f:b1:57:f7:32:
0d:cc:f4:b1:50:2c:86:96:ed:4e:00:a0:f4:a4:25:
85:4c:2e:38:46:79:e4:d4:90:06:67:44:39:d2:57:
c8:a0:35:e0:b8:d1:c2:37:5f:e5:7d:68:67:f7:f1:
a7:4e:8e:db:1a:a6:ff:7d:e2:73:04:6c:98:0c:76:
06:91:8c:a9:a1:e0:1d:0b:ae:6a:e8:06:5d:4d:65:
30:d3:44:1f:c2:71:6b:11:f2:87:73:34:f3:6b:3d:
cf:d3:e0:63:4e:db:2b:00:94:70:e7:23:61:9c:26:
8a:08:81:0a:95:10:82:10:61:be:40:e2:ec:23:93:
06:37:5a:d9:c9:90:ac:3f:8d:1e:c2:7b:63:34:dc:
c3:15:e8:91:e9:50:9c:6a:62:57:0a:78:e0:51:56:
19:e2:49:12:29:96:1c:a5:52:18:a5:2a:16:7b:8f:
b5:e3:e0:fd:43:3f:fa:d0:5d:de:a4:24:e4:d7:60:
55:82:42:ea:4c:c9:4d:ae:40:41:8b:16:07:30:72:
ab:58:d5:69:8f:97:1b:13:fe:91:2b:e4:e9:82:5b:
c9:de:e2:0b:43:e7:57:1a:8e:a5:8d:c6:e4:c0:d6:
59:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6E:C8:7D:49:09:58:0E:8F:39:B9:A2:F1:C3:65:7B:4F:C4:58:76
X509v3 Authority Key Identifier:
keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d2:61:e8:16:11:53:3c:17:c7:02:18:bf:ca:14:27:5b:cc:
cc:47:ab:e9:45:9c:81:70:db:74:31:bc:4b:dd:22:36:7f:5c:
fc:8a:d2:38:46:50:92:5d:9a:79:32:3d:8f:d1:cf:98:30:85:
f8:46:2c:f4:50:02:c0:5d:15:c9:ad:23:1d:b4:3d:3a:be:ed:
5f:e6:b7:8e:a8:53:f2:09:34:6f:3d:a0:70:26:25:38:32:8d:
9d:20:6e:00:01:b2:22:90:75:a7:62:85:2c:97:ce:2a:05:e0:
7b:26:be:47:be:59:ae:ef:5a:8d:b0:14:5a:b4:73:51:48:4a:
40:70:4a:32:d2:b5:7f:9a:98:d9:63:68:58:c6:27:ea:b3:2a:
25:af:56:a7:4b:ca:46:1f:9b:eb:74:eb:57:a6:7b:81:06:53:
ec:e1:27:c4:31:82:e7:96:a1:44:3d:7a:d4:cc:b1:b0:28:f5:
42:da:8b:57:f3:48:ae:27:31:39:3e:b1:df:9c:10:9a:11:f9:
6f:c2:06:43:1f:38:5e:42:6a:60:94:b4:65:36:91:c5:7c:ef:
59:53:1c:c1:96:1b:75:26:05:aa:b7:1f:64:2c:06:bc:be:c2:
70:5f:6d:2c:e0:29:3d:8e:fb:c9:8c:f7:0b:2e:a5:57:0d:9c:
69:dd:aa:db
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
QzRBNzExMC8GA1UEBRMoRTQyRjVERUYyNjU5QjVFN0ZBMjcwMzc2OEU5NDg3RUZE
QzU5NUJCMDAeFw0yNjAxMjUwNjM1MzhaFw0yNjAyMDEwNjM1MzhaMBgxFjAUBgNV
BAMMDTY5NzViOWJiLWRjZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC59LbwBeptnJ0j/EXEZ1KWf+yzeJtF4lqfsVf3Mg3M9LFQLIaW7U4AoPSkJYVM
LjhGeeTUkAZnRDnSV8igNeC40cI3X+V9aGf38adOjtsapv994nMEbJgMdgaRjKmh
4B0LrmroBl1NZTDTRB/CcWsR8odzNPNrPc/T4GNO2ysAlHDnI2GcJooIgQqVEIIQ
Yb5A4uwjkwY3WtnJkKw/jR7Ce2M03MMV6JHpUJxqYlcKeOBRVhniSRIplhylUhil
KhZ7j7Xj4P1DP/rQXd6kJOTXYFWCQupMyU2uQEGLFgcwcqtY1WmPlxsT/pEr5OmC
W8ne4gtD51cajqWNxuTA1lnxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEW7IfUkJ
WA6PObmi8cNle0/EWHYwHwYDVR0jBBgwFoAU5C9d7yZZtef6JwN2jpSH79xZW7Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3L0ZBOThGQjNFQUI0
NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVmNkp3TjJqcFNINzl4Wlc3
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNUM5ZDd5Wlp0ZWY2SndOMmpwU0g3OXhaVzdBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
NEE3L0ZBOThGQjNFQUI0NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVm
Nkp3TjJqcFNINzl4Wlc3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAI/SYegWEVM8F8cCGL/KFCdbzMxHq+lFnIFw23QxvEvdIjZ/XPyK0jhG
UJJdmnkyPY/Rz5gwhfhGLPRQAsBdFcmtIx20PTq+7V/mt46oU/IJNG89oHAmJTgy
jZ0gbgABsiKQdadihSyXzioF4Hsmvke+Wa7vWo2wFFq0c1FISkBwSjLStX+amNlj
aFjGJ+qzKiWvVqdLykYfm+t061eme4EGU+zhJ8QxgueWoUQ9etTMsbAo9ULai1fz
SK4nMTk+sd+cEJoR+W/CBkMfOF5CamCUtGU2kcV871lTHMGWG3UmBaq3H2QsBry+
wnBfbSzgKT2O+8mM9wsupVcNnGndqts=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:10:40 2026 by rpki-client