This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
File: utY-wFoDGPl_MVby4gWcYZPOOAo.mft (raw, json)
Hash identifier: dFSKnbAeHeQ3Nob+B5bEoL9pKMBnQP2wJDBknQ3CWEw=
Subject key identifier: E1:8F:9F:0D:26:BF:4F:F8:0A:D0:FC:2D:4E:F2:93:85:36:B1:CF:0A
Authority key identifier: BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
Certificate issuer: /CN=A91D5A49/serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Certificate serial: 025A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
Manifest number: 025A
Signing time: Sun 25 Jan 2026 00:53:37 +0000
Manifest this update: Sun 25 Jan 2026 00:53:36 +0000
Manifest next update: Sun 01 Feb 2026 00:53:36 +0000
Files and hashes: 1: utY-wFoDGPl_MVby4gWcYZPOOAo.crl (hash: ScttuyvW2tMIoYyslvMYf6+WfraHhrONw/HdFmZjEh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5A49, serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Validity
Not Before: Jan 25 00:53:36 2026 GMT
Not After : Feb 1 00:53:36 2026 GMT
Subject: CN=69756991-8fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:07:64:04:51:67:91:1d:e2:54:6c:23:9e:
30:c2:ba:67:8e:b4:08:94:17:a3:d3:f9:d0:5a:08:
52:37:ff:a8:82:c2:18:95:b8:f3:82:f3:e7:90:bf:
47:b9:8e:04:b5:7d:be:29:3a:14:00:7e:e0:e7:a9:
48:46:8c:84:19:94:d0:d6:d2:fd:c0:dc:c0:71:9f:
e8:49:c7:27:9a:a5:c9:f8:49:78:b7:14:39:88:23:
21:9c:ae:75:07:6b:a5:6d:e9:ff:7c:02:c4:3a:21:
1b:97:7f:aa:fa:a2:be:8a:87:9a:f4:ac:72:8e:ca:
43:d4:e5:31:d3:00:b2:8c:ad:31:a9:7f:e2:09:49:
6b:2a:08:52:5b:09:0a:c1:77:28:f8:96:f1:fb:14:
5b:e5:87:d7:b5:55:60:c6:1a:d7:e5:76:70:90:8b:
af:89:3e:c0:71:e2:20:d1:6d:ea:fc:f6:ce:03:94:
9f:95:25:11:06:28:f0:8a:cb:16:85:9b:62:52:93:
43:88:32:06:c3:34:a8:3d:97:74:4d:b5:51:8c:6c:
9c:37:87:3f:4c:64:2a:fa:9d:4c:c7:6e:9a:d2:37:
e1:81:e2:4b:3f:54:78:80:c4:29:e9:3e:af:02:1e:
ed:af:13:8f:22:1e:16:c0:14:3c:5a:e1:38:e3:85:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8F:9F:0D:26:BF:4F:F8:0A:D0:FC:2D:4E:F2:93:85:36:B1:CF:0A
X509v3 Authority Key Identifier:
keyid:BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:1d:40:12:bf:8a:bd:26:37:3c:73:6d:20:58:80:f7:95:fa:
d7:b5:4b:be:64:c2:a9:48:b6:4a:bf:55:92:0c:71:2d:05:88:
c4:12:47:4b:15:ec:24:2b:c0:e5:b5:33:b0:5b:40:81:e1:ef:
f9:e5:87:b7:5d:59:eb:87:1e:50:da:83:97:30:40:23:2e:0d:
5a:5b:e4:2c:4d:f6:2e:49:c1:a8:34:a0:82:c4:d5:24:a3:b5:
3a:cf:fd:66:8d:de:92:41:e2:1d:db:c4:16:f0:f1:2b:0c:3e:
cf:f7:70:ad:4f:0c:28:bc:a0:13:c9:f5:3b:c2:69:73:dc:c2:
52:e3:05:6f:94:fc:70:09:b7:89:b3:da:f5:63:bb:e7:ee:e5:
52:fc:54:1e:e6:de:64:df:c2:76:68:4b:09:a1:59:15:31:a1:
de:c4:32:f2:b3:43:cd:aa:e7:55:8e:27:8e:d5:76:22:d4:c3:
10:7f:9c:b4:b1:c8:a3:c7:87:02:e1:4f:02:ce:96:1d:a2:75:
06:39:8a:d3:4e:f7:e4:c4:38:a6:e5:a3:c6:a8:5c:42:84:8c:
30:49:87:99:cf:4b:fa:ad:cc:1b:92:87:0b:5e:7d:c6:8f:2e:
d7:60:8b:e7:bc:db:ed:54:ee:ec:89:6d:d6:de:e7:d9:55:62:
a0:cb:d1:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDVBNDkxMTAvBgNVBAUTKEJBRDYzRUMwNUEwMzE4Rjk3RjMxNTZGMkUyMDU5QzYx
OTNDRTM4MEEwHhcNMjYwMTI1MDA1MzM2WhcNMjYwMjAxMDA1MzM2WjAYMRYwFAYD
VQQDDA02OTc1Njk5MS04ZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwlgHZARRZ5Ed4lRsI54wwrpnjrQIlBej0/nQWghSN/+ogsIYlbjzgvPnkL9H
uY4EtX2+KToUAH7g56lIRoyEGZTQ1tL9wNzAcZ/oSccnmqXJ+El4txQ5iCMhnK51
B2ulben/fALEOiEbl3+q+qK+ioea9KxyjspD1OUx0wCyjK0xqX/iCUlrKghSWwkK
wXco+Jbx+xRb5YfXtVVgxhrX5XZwkIuviT7AceIg0W3q/PbOA5SflSURBijwissW
hZtiUpNDiDIGwzSoPZd0TbVRjGycN4c/TGQq+p1Mx26a0jfhgeJLP1R4gMQp6T6v
Ah7trxOPIh4WwBQ8WuE444UwBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGPnw0m
v0/4CtD8LU7yk4U2sc8KMB8GA1UdIwQYMBaAFLrWPsBaAxj5fzFW8uIFnGGTzjgK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUE0OS9GOTEzMURBNjU4
QTYxMUVEQTJCQjIwNjBDNEY5QUUwMi91dFktd0ZvREdQbF9NVmJ5NGdXY1laUE9P
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V0WS13Rm9ER1BsX01WYnk0Z1djWVpQT09Bby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NUE0OS9GOTEzMURBNjU4QTYxMUVEQTJCQjIwNjBDNEY5QUUwMi91dFktd0ZvREdQ
bF9NVmJ5NGdXY1laUE9PQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgHUASv4q9Jjc8c20gWID3lfrXtUu+ZMKpSLZKv1WSDHEtBYjEEkdL
FewkK8DltTOwW0CB4e/55Ye3XVnrhx5Q2oOXMEAjLg1aW+QsTfYuScGoNKCCxNUk
o7U6z/1mjd6SQeId28QW8PErDD7P93CtTwwovKATyfU7wmlz3MJS4wVvlPxwCbeJ
s9r1Y7vn7uVS/FQe5t5k38J2aEsJoVkVMaHexDLys0PNqudVjieO1XYi1MMQf5y0
scijx4cC4U8CzpYdonUGOYrTTvfkxDim5aPGqFxChIwwSYeZz0v6rcwbkocLXn3G
jy7XYIvnvNvtVO7siW3W3ufZVWKgy9HH
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:09 2026 by rpki-client