This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json)
Hash identifier: vAjTCMXOSdGZFHRU/qureZFd9+wTq2fRlyniplINsZk=
Subject key identifier: A0:4C:6F:3C:EA:2F:9B:12:60:CD:8E:50:8D:3E:0F:3E:F9:2E:C3:09
Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35
Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35
Certificate serial: 11CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
Manifest number: 11C3
Signing time: Sat 24 Jan 2026 16:54:20 +0000
Manifest this update: Sat 24 Jan 2026 16:54:19 +0000
Manifest next update: Sat 31 Jan 2026 16:54:19 +0000
Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: WVkbx8gqdrhBbgzVzi3QJoa9AtM6nlyEL5Wj77Cgsyk=)
2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: w5Wibqq/9uZKFdplDNzWfbo2U0mV8bZOoGj0UNzkyfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl
rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4559 (0x11cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35
Validity
Not Before: Jan 24 16:54:19 2026 GMT
Not After : Jan 31 16:54:19 2026 GMT
Subject: CN=6974f93c-3bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:d7:c1:dd:17:e6:15:a7:64:1e:64:d1:89:
81:c7:f3:18:7f:1f:85:ff:94:71:05:b1:76:bf:c5:
d8:d6:5c:06:f6:ec:e7:bb:ab:19:27:10:41:79:51:
a9:93:b8:94:f8:b9:39:f2:4e:1e:84:16:61:bb:49:
7a:b9:13:d5:66:24:26:ab:e9:ff:13:4d:d6:a7:26:
f8:ab:b0:5e:c2:70:b9:ef:ee:7f:77:f5:04:ec:a5:
86:b5:4e:02:84:4b:b4:3c:92:17:0a:dc:7c:91:5b:
43:28:2b:49:88:ce:12:ea:5f:a9:96:c8:35:9c:ee:
dd:a9:e1:4c:49:a6:ed:a6:ff:a9:5c:c3:9d:f3:18:
c6:ed:1f:e6:c6:71:d8:df:49:ae:3c:43:f9:70:e2:
87:2b:08:fc:97:0e:c6:f8:d0:13:36:41:4c:79:c0:
34:15:ff:a3:c4:fd:a2:f6:4b:57:40:6d:30:77:d3:
13:0d:d6:71:e7:39:4c:58:c3:41:d8:08:29:f0:c2:
d2:21:b4:72:6b:29:71:21:b0:cf:6e:0c:d0:7f:5a:
b4:a9:01:25:bf:46:cc:db:9b:cb:1b:8c:3e:39:e5:
a6:cd:6d:d9:61:ed:1f:5c:88:39:e2:3f:8c:24:1f:
aa:c3:a8:f8:f6:2a:97:de:f5:07:96:83:76:47:0e:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4C:6F:3C:EA:2F:9B:12:60:CD:8E:50:8D:3E:0F:3E:F9:2E:C3:09
X509v3 Authority Key Identifier:
keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:97:42:b2:f6:2d:e7:99:1d:cc:e8:f1:41:11:ce:5d:a4:74:
71:69:48:3b:65:78:45:1f:0e:67:87:03:0a:8d:ef:cc:54:de:
29:54:c7:35:b9:00:e3:a5:51:fe:9f:33:9e:eb:87:ac:35:98:
a8:3d:5b:b3:70:63:29:0a:c6:31:d5:a3:36:1b:22:62:f6:53:
dc:31:7a:54:bc:cb:e1:1e:d9:85:b9:06:ff:d2:cc:ab:86:05:
72:3b:c0:a3:61:ce:26:ff:76:5f:e2:c7:c5:18:c0:d6:44:d7:
7e:96:12:41:77:39:34:d2:20:ff:0d:a0:2c:01:c3:25:4e:e0:
db:d1:39:17:5a:a8:cb:d9:a4:57:54:24:be:84:b5:53:2f:84:
4e:05:0e:27:11:53:20:a9:f4:4e:db:6c:6a:0b:15:a9:c5:b1:
a7:cf:78:76:7b:1e:c1:e5:8b:84:ba:de:d5:f3:f2:87:fb:de:
f3:1f:5d:0a:19:5e:40:7e:37:07:a5:a6:c3:1c:b5:2e:dd:78:
fb:30:7c:9b:e5:5e:47:79:bc:d5:c0:63:08:56:c8:14:59:7b:
13:4d:6b:10:e4:39:1f:43:5a:47:a2:07:d2:48:fd:3b:c2:dc:
0e:1c:74:ea:8e:3b:89:93:07:76:26:7b:ef:42:a0:d3:35:23:
e3:e0:4d:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG
N0YyOTVGMzUwHhcNMjYwMTI0MTY1NDE5WhcNMjYwMTMxMTY1NDE5WjAYMRYwFAYD
VQQDDA02OTc0ZjkzYy0zYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApEjXwd0X5hWnZB5k0YmBx/MYfx+F/5RxBbF2v8XY1lwG9uznu6sZJxBBeVGp
k7iU+Lk58k4ehBZhu0l6uRPVZiQmq+n/E03Wpyb4q7BewnC57+5/d/UE7KWGtU4C
hEu0PJIXCtx8kVtDKCtJiM4S6l+plsg1nO7dqeFMSabtpv+pXMOd8xjG7R/mxnHY
30muPEP5cOKHKwj8lw7G+NATNkFMecA0Ff+jxP2i9ktXQG0wd9MTDdZx5zlMWMNB
2Agp8MLSIbRyaylxIbDPbgzQf1q0qQElv0bM25vLG4w+OeWmzW3ZYe0fXIg54j+M
JB+qw6j49iqX3vUHloN2Rw5n1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBMbzzq
L5sSYM2OUI0+Dz75LsMJMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4
RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt
cWNBRmE3NUtoYkgzOHBYelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZl0Ky9i3nmR3M6PFBEc5dpHRxaUg7ZXhFHw5nhwMKje/MVN4pVMc1
uQDjpVH+nzOe64esNZioPVuzcGMpCsYx1aM2GyJi9lPcMXpUvMvhHtmFuQb/0syr
hgVyO8CjYc4m/3Zf4sfFGMDWRNd+lhJBdzk00iD/DaAsAcMlTuDb0TkXWqjL2aRX
VCS+hLVTL4ROBQ4nEVMgqfRO22xqCxWpxbGnz3h2ex7B5YuEut7V8/KH+97zH10K
GV5AfjcHpabDHLUu3Xj7MHyb5V5HebzVwGMIVsgUWXsTTWsQ5DkfQ1pHogfSSP07
wtwOHHTqjjuJkwd2JnvvQqDTNSPj4E1+
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:54 2026 by rpki-client