This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
File: tLEObLONU2XQVOjb6Q808sOIsQw.mft (raw, json)
Hash identifier: W9GwqhDnjPX9lcV3RzXJhOAcIi5WTLCoIv/ZQ+Py4NQ=
Subject key identifier: 08:18:F6:C4:8E:01:A6:36:48:75:31:84:92:54:52:37:92:B4:26:97
Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
Certificate issuer: /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Certificate serial: 0D00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
Manifest number: 0CDF
Signing time: Sat 24 Jan 2026 17:53:56 +0000
Manifest this update: Sat 24 Jan 2026 17:53:56 +0000
Manifest next update: Sat 31 Jan 2026 17:53:56 +0000
Files and hashes: 1: tLEObLONU2XQVOjb6Q808sOIsQw.crl (hash: GCart+xZ//qFcr/bGVVv7vr6YcoqoojoUwYBLr1LLxY=)
2: 618AD7B6638A11F08BC2A840C4F9AE02.roa (hash: mSkIgywOU9dhooivn2x5OXxcwDybzq+7lQQROc67tvc=)
3: 30256B5CF7B911EEAB0C6C36C4F9AE02.roa (hash: tEULMfLQG1uBT4oJ7DeARVbztIuEbjp8uzJOUISud6I=)
4: 610856EC638A11F08BC2A840C4F9AE02.roa (hash: f8gwOWP+gzIc1sTbccPzYVASHXUhpL4+AZoO9s0gnOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:53:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3328 (0xd00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Validity
Not Before: Jan 24 17:53:56 2026 GMT
Not After : Jan 31 17:53:56 2026 GMT
Subject: CN=69750734-0ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:4e:97:84:55:36:a5:a5:1d:20:27:b7:cc:
e4:4c:69:f7:65:11:b2:01:d3:8b:db:25:44:9b:8c:
d9:4f:0e:e4:54:ae:f7:85:e6:2e:b7:1f:36:0b:33:
48:49:7a:8b:84:e0:e2:51:2a:ef:78:f6:02:a3:6b:
10:a4:14:c1:93:bf:e2:8a:9f:be:52:0a:b2:6f:fc:
2f:c0:34:bb:72:44:1c:b2:cd:7c:be:c9:00:17:65:
75:8e:90:f8:cd:0f:04:af:ae:5c:62:a0:be:4e:0c:
ad:97:0f:2a:ce:4e:21:cb:ed:4f:03:35:4d:3f:e5:
0b:03:16:77:44:d2:5f:c6:fc:fe:df:f8:cd:9b:57:
86:1a:3e:6f:f2:5a:fd:6f:21:8c:6f:f3:f6:f4:f9:
fb:7d:11:55:e3:fa:43:c0:0d:d0:5d:43:fa:ed:f2:
d2:59:00:24:e8:e7:a2:2c:18:31:70:1d:ea:ab:ef:
00:b6:1e:bf:0b:40:fa:23:30:bd:a4:87:8c:41:d2:
2c:3b:16:ba:7c:94:57:59:54:d6:63:00:68:b8:cf:
00:d3:d1:11:a7:bc:ae:b1:d5:a8:04:6e:6b:24:b6:
ed:95:3d:db:19:1c:73:2b:0d:a5:a7:1f:ae:17:76:
6b:28:83:54:84:9a:ed:c0:e6:4d:e7:2a:23:90:a0:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:18:F6:C4:8E:01:A6:36:48:75:31:84:92:54:52:37:92:B4:26:97
X509v3 Authority Key Identifier:
keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c9:b1:bb:a3:bb:cc:97:ca:a6:ea:02:ac:20:41:33:85:77:
7f:54:4a:c7:53:9c:01:24:c3:e1:77:1e:4f:a2:d3:57:cc:d7:
31:28:a7:52:7c:0e:20:01:70:d4:4e:4f:04:e2:24:d3:87:28:
e2:6d:4e:16:e5:eb:60:b0:a0:66:18:2f:32:b6:d3:39:16:67:
30:fa:50:07:68:40:0e:ad:de:1f:a7:a6:de:04:ac:c9:34:ac:
e1:64:dd:79:6d:d0:f7:f9:bd:b9:fd:10:29:c5:99:bf:4d:d6:
c7:a9:24:c0:1a:3f:55:3a:14:74:af:e4:c7:68:da:1a:19:ac:
11:66:9d:a5:cb:ba:8b:75:06:94:a9:0a:0a:28:37:8e:4f:29:
7a:9c:76:6a:3c:6d:a9:62:d4:aa:54:89:84:32:9b:2e:42:ee:
49:f5:0c:a5:fa:d7:3f:a4:6c:11:7c:8c:25:3b:f5:fb:d6:35:
99:de:22:e9:cd:de:8e:22:0f:9e:70:d0:7e:b4:e7:33:b0:0c:
60:0d:da:05:13:c0:ab:8e:d1:10:59:b6:38:c4:61:a6:d8:8a:
9f:30:96:8e:25:d2:d1:8d:40:2c:30:0e:a7:6f:ee:5c:2e:9e:
de:7c:da:51:f2:c4:b8:5b:ac:08:8f:ee:0d:6d:22:61:8f:66:
94:2a:4b:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzQTMxMTAvBgNVBAUTKEI0QjEwRTZDQjM4RDUzNjVEMDU0RThEQkU5MEYzNEYy
QzM4OEIxMEMwHhcNMjYwMTI0MTc1MzU2WhcNMjYwMTMxMTc1MzU2WjAYMRYwFAYD
VQQDDA02OTc1MDczNC0wZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2IFOl4RVNqWlHSAnt8zkTGn3ZRGyAdOL2yVEm4zZTw7kVK73heYutx82CzNI
SXqLhODiUSrvePYCo2sQpBTBk7/iip++Ugqyb/wvwDS7ckQcss18vskAF2V1jpD4
zQ8Er65cYqC+Tgytlw8qzk4hy+1PAzVNP+ULAxZ3RNJfxvz+3/jNm1eGGj5v8lr9
byGMb/P29Pn7fRFV4/pDwA3QXUP67fLSWQAk6OeiLBgxcB3qq+8Ath6/C0D6IzC9
pIeMQdIsOxa6fJRXWVTWYwBouM8A09ERp7yusdWoBG5rJLbtlT3bGRxzKw2lpx+u
F3ZrKINUhJrtwOZN5yojkKApjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgY9sSO
AaY2SHUxhJJUUjeStCaXMB8GA1UdIwQYMBaAFLSxDmyzjVNl0FTo2+kPNPLDiLEM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8yMDkxREM4RTA1
MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUyWFFWT2piNlE4MDhzT0lz
UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RMRU9iTE9OVTJYUVZPamI2UTgwOHNPSXNRdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTNBMy8yMDkxREM4RTA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUy
WFFWT2piNlE4MDhzT0lzUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBqybG7o7vMl8qm6gKsIEEzhXd/VErHU5wBJMPhdx5PotNXzNcxKKdS
fA4gAXDUTk8E4iTThyjibU4W5etgsKBmGC8yttM5Fmcw+lAHaEAOrd4fp6beBKzJ
NKzhZN15bdD3+b25/RApxZm/TdbHqSTAGj9VOhR0r+THaNoaGawRZp2ly7qLdQaU
qQoKKDeOTyl6nHZqPG2pYtSqVImEMpsuQu5J9Qyl+tc/pGwRfIwlO/X71jWZ3iLp
zd6OIg+ecNB+tOczsAxgDdoFE8CrjtEQWbY4xGGm2IqfMJaOJdLRjUAsMA6nb+5c
Lp7efNpR8sS4W6wIj+4NbSJhj2aUKksL
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:19:34 2026 by rpki-client