This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
File: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json)
Hash identifier: Kjk8r4lETHOhalonC4/hzyU+URWLpNOB2HwsSBNU0aw=
Subject key identifier: E3:44:A8:D5:01:B7:7A:50:70:5D:D2:CE:89:C4:97:D4:77:03:CC:C6
Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Certificate serial: 0A85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
Manifest number: 0A6D
Signing time: Sat 24 Jan 2026 19:06:32 +0000
Manifest this update: Sat 24 Jan 2026 19:06:32 +0000
Manifest next update: Sat 31 Jan 2026 19:06:32 +0000
Files and hashes: 1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: a6oz96h6W2bFn9IS13mdLyCL6GvK2F+zQzSCvYZopRU=)
2: 02BA60CCDADF11F08398647877D3641D.roa (hash: hf/xfhsCkjRD1riGUd+zheh13EXWwTkwTc7MH2aa3Mo=)
3: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: dz0lDVUdbKurIPgLKnTIK+TUvk2MtsrFSHr5aV4oHoA=)
4: 0166B48CDADF11F08398647877D3641D.roa (hash: XqtMKJ9wpqh8beswcRrtHh97SHniSpHNu3xBgpCCoIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2693 (0xa85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Validity
Not Before: Jan 24 19:06:32 2026 GMT
Not After : Jan 31 19:06:32 2026 GMT
Subject: CN=69751838-549e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:43:06:33:c1:1d:5a:ef:96:c0:25:68:60:
13:b1:5f:c2:9c:dd:92:cc:71:59:f8:89:8b:95:96:
92:1d:19:13:a7:e7:fa:bc:13:59:18:18:6e:d6:3f:
89:b9:48:d0:6c:cc:8d:f5:f0:ce:fc:b2:c8:29:b0:
e9:8f:77:5c:46:74:79:8e:87:bb:e1:ce:87:dd:86:
2b:07:26:77:55:38:f3:f0:9d:0b:04:ae:f2:d9:b9:
09:95:ed:82:94:9d:fb:76:ab:29:e6:e9:22:15:2d:
4e:ee:db:93:c1:1f:7d:b7:b3:17:58:80:e1:b7:45:
8c:27:7f:ee:57:f1:fb:ca:7b:9f:70:12:15:16:26:
f5:fc:be:0c:f3:02:1b:2b:6e:52:a5:c4:d6:d2:da:
59:36:f0:3e:b3:67:7e:87:55:30:71:d0:22:b1:82:
39:7e:3d:9f:ca:4e:1f:01:19:97:35:3f:66:0c:8c:
a0:a7:c3:f2:8d:df:29:e8:34:0d:98:76:e0:50:0e:
1b:d1:4e:0e:03:e5:69:a2:0c:79:5a:47:03:4a:53:
e4:58:61:6c:6d:cc:54:3d:f8:3d:18:3d:5f:8d:ae:
38:36:32:77:83:2a:05:47:a1:5f:d3:50:f1:aa:3d:
23:71:af:f7:72:89:4d:ad:3b:1b:4c:aa:0b:f2:0b:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:44:A8:D5:01:B7:7A:50:70:5D:D2:CE:89:C4:97:D4:77:03:CC:C6
X509v3 Authority Key Identifier:
keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:11:32:76:09:7b:7d:e7:67:a6:0c:4f:40:e0:3d:bd:aa:06:
d4:5d:bb:c5:57:71:f2:49:c7:24:44:c7:80:10:91:be:13:ac:
ba:78:9f:d6:fb:c5:c8:89:62:9d:5b:89:7c:2d:17:4c:b3:e6:
56:97:c7:62:e3:bf:e9:21:4a:36:3f:80:78:15:4f:46:85:6c:
01:e1:34:5f:f5:de:2d:53:5b:a3:4e:95:ba:ec:c0:f4:1b:15:
b5:bb:d0:79:1b:4d:7a:27:ca:9d:2e:51:3c:81:ff:fe:ea:89:
2f:d5:20:54:db:a3:85:1a:84:cc:65:51:dd:99:02:ec:ab:af:
c6:79:a3:8b:14:48:5c:89:a2:f9:69:7c:65:90:06:37:78:bd:
97:69:e6:76:77:ff:c5:f1:a1:e5:3e:d6:6c:c8:49:71:e8:eb:
69:94:02:a7:37:6c:a0:17:66:5c:54:9b:9a:39:88:bf:ac:89:
23:87:5b:8b:3f:39:c6:4e:f2:38:e7:40:3a:02:89:b2:88:fa:
44:9e:ba:b4:4a:cb:bd:56:6a:90:cf:02:84:97:d2:11:8a:7f:
c3:e7:b6:f0:d7:27:77:1b:aa:f6:2d:c5:97:39:70:72:0e:08:
c4:c7:4e:28:1d:97:99:48:32:06:91:ef:4f:92:54:2b:6e:fb:
60:ce:7f:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U5RDYxMTAvBgNVBAUTKDEzNjc0MUJEOUU4NzBGMDZFQ0U1Q0IzNTVCOEM3NTcx
Q0M5NkJBNzQwHhcNMjYwMTI0MTkwNjMyWhcNMjYwMTMxMTkwNjMyWjAYMRYwFAYD
VQQDDA02OTc1MTgzOC01NDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0jdDBjPBHVrvlsAlaGATsV/CnN2SzHFZ+ImLlZaSHRkTp+f6vBNZGBhu1j+J
uUjQbMyN9fDO/LLIKbDpj3dcRnR5joe74c6H3YYrByZ3VTjz8J0LBK7y2bkJle2C
lJ37dqsp5ukiFS1O7tuTwR99t7MXWIDht0WMJ3/uV/H7ynufcBIVFib1/L4M8wIb
K25SpcTW0tpZNvA+s2d+h1UwcdAisYI5fj2fyk4fARmXNT9mDIygp8Pyjd8p6DQN
mHbgUA4b0U4OA+Vpogx5WkcDSlPkWGFsbcxUPfg9GD1fja44NjJ3gyoFR6Ff01Dx
qj0jca/3colNrTsbTKoL8gvvXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONEqNUB
t3pQcF3SzonEl9R3A8zGMB8GA1UdIwQYMBaAFBNnQb2ehw8G7OXLNVuMdXHMlrp0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTlENi85RTY2RjUxMjdB
NTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3YnM1Y3MxVzR4MWNjeVd1
blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0UyZEJ2WjZIRHdiczVjczFXNHgxY2N5V3VuUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTlENi85RTY2RjUxMjdBNTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3
YnM1Y3MxVzR4MWNjeVd1blEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQETJ2CXt952emDE9A4D29qgbUXbvFV3HyScckRMeAEJG+E6y6eJ/W
+8XIiWKdW4l8LRdMs+ZWl8di47/pIUo2P4B4FU9GhWwB4TRf9d4tU1ujTpW67MD0
GxW1u9B5G016J8qdLlE8gf/+6okv1SBU26OFGoTMZVHdmQLsq6/GeaOLFEhciaL5
aXxlkAY3eL2XaeZ2d//F8aHlPtZsyElx6OtplAKnN2ygF2ZcVJuaOYi/rIkjh1uL
PznGTvI450A6AomyiPpEnrq0Ssu9VmqQzwKEl9IRin/D57bw1yd3G6r2LcWXOXBy
DgjEx04oHZeZSDIGke9PklQrbvtgzn+e
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:49 2026 by rpki-client