This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
File: 9-88h0KVuB-hDxQP61W8nFzt-dk.mft (raw, json)
Hash identifier: fAcj4HGKt2THO/nbXIAyxtcw8la/mIqGYY1W+JQheF4=
Subject key identifier: E5:B0:92:89:52:C5:66:30:62:62:71:1F:C4:85:DA:F8:AA:A8:CC:AC
Authority key identifier: F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9
Certificate issuer: /CN=A91D8218/serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
Manifest number: 2F
Signing time: Sun 25 Jan 2026 06:40:00 +0000
Manifest this update: Sun 25 Jan 2026 06:39:59 +0000
Manifest next update: Sun 01 Feb 2026 06:39:59 +0000
Files and hashes: 1: 9-88h0KVuB-hDxQP61W8nFzt-dk.crl (hash: vXy+BJVd8a5VUFuGe0k/WegSLTKVystTtEP7U6BUhus=)
2: E1F27B12B4A611F0927EAF76C4F9AE02.roa (hash: 932+p/N8opzxpPITepf2FdyN7nkZI69DULFumgScCQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl
rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8218, serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
Validity
Not Before: Jan 25 06:39:59 2026 GMT
Not After : Feb 1 06:39:59 2026 GMT
Subject: CN=6975bac0-bb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:96:61:77:62:9e:73:6d:52:50:4e:ed:40:
5f:ef:b4:41:c2:5d:d7:f4:cf:56:ef:9d:26:e3:45:
8e:46:22:25:c3:7f:c0:cb:40:32:1e:ca:46:00:31:
1a:99:ed:de:17:17:8d:8c:65:62:d8:fc:c5:89:6b:
ea:f6:6f:22:c7:3a:de:bf:ec:9c:65:fa:8a:04:68:
0d:81:56:e3:be:31:b6:a3:80:18:58:7f:8a:e8:22:
d3:53:b6:bd:39:56:33:86:ed:49:d2:a5:45:1e:56:
ad:19:45:3b:2b:07:76:32:cb:92:5e:bd:7a:6a:6e:
ff:6a:09:5d:98:4d:00:93:ad:74:f3:0d:a6:5a:c9:
7f:8e:de:56:d8:00:88:8b:d0:e3:a0:08:50:98:a8:
4c:fc:60:24:0b:ca:12:49:79:90:2b:27:9f:09:f2:
66:e6:bd:2a:05:40:96:c2:1a:42:08:96:cc:74:01:
1c:d1:da:43:f7:fb:51:2a:68:73:c0:97:e1:8d:92:
c0:f5:12:88:56:ab:86:4b:f7:01:53:a6:b4:cf:73:
8d:c9:cc:e6:a7:09:98:86:5a:34:86:1c:98:ac:90:
f0:ee:20:3a:b1:12:49:fc:67:3e:b0:a1:bd:d2:ca:
91:37:e4:55:9c:93:b9:e2:fa:7e:7e:50:9f:67:3b:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B0:92:89:52:C5:66:30:62:62:71:1F:C4:85:DA:F8:AA:A8:CC:AC
X509v3 Authority Key Identifier:
keyid:F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d5:95:b4:3b:99:b0:1b:25:2d:7f:fc:d6:b4:fb:c1:1a:b0:
9e:2c:f9:4e:c0:8d:ca:a0:e5:1e:b0:6a:fe:e3:51:05:c9:2c:
bd:3b:7f:b6:88:2a:d4:38:94:f5:67:a5:7a:cf:f5:de:3d:50:
70:1b:63:97:bc:83:c7:57:dc:5e:e4:e5:56:32:42:87:fe:12:
03:74:98:58:dd:a9:2c:a1:3b:4b:a7:ac:8c:0d:a0:54:61:98:
fc:27:b8:b1:48:26:3f:b2:39:56:7c:c8:82:1f:47:83:b8:b7:
9e:04:25:d0:39:9e:d5:e1:59:c9:84:11:75:da:7f:43:e0:35:
9e:1b:aa:54:59:7f:35:e6:8b:f6:64:6c:0e:40:1d:71:35:9d:
b7:29:da:78:30:0e:49:5b:a2:eb:6f:7d:1e:bb:2a:87:61:83:
26:23:53:ac:14:e7:0f:98:bf:f3:71:9b:7f:b1:cc:d9:c1:ea:
0a:00:ff:f4:bd:8a:1d:47:0b:62:24:a3:6a:43:40:6d:fd:c0:
a9:f7:6d:93:03:39:be:22:28:24:79:19:70:bb:71:50:79:ba:
01:17:18:be:62:3b:f4:7f:1a:d5:7f:db:c6:ce:30:97:af:5c:
3b:b9:c1:08:0e:d2:24:19:59:51:01:e2:2c:e2:02:0f:68:b5:
b9:44:47:94
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
ODIxODExMC8GA1UEBRMoRjdFRjNDODc0Mjk1QjgxRkExMEYxNDBGRUI1NUJDOUM1
Q0VERjlEOTAeFw0yNjAxMjUwNjM5NTlaFw0yNjAyMDEwNjM5NTlaMBgxFjAUBgNV
BAMMDTY5NzViYWMwLWJiNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9u5Zhd2Kec21SUE7tQF/vtEHCXdf0z1bvnSbjRY5GIiXDf8DLQDIeykYAMRqZ
7d4XF42MZWLY/MWJa+r2byLHOt6/7Jxl+ooEaA2BVuO+MbajgBhYf4roItNTtr05
VjOG7UnSpUUeVq0ZRTsrB3Yyy5JevXpqbv9qCV2YTQCTrXTzDaZayX+O3lbYAIiL
0OOgCFCYqEz8YCQLyhJJeZArJ58J8mbmvSoFQJbCGkIIlsx0ARzR2kP3+1EqaHPA
l+GNksD1EohWq4ZL9wFTprTPc43JzOanCZiGWjSGHJiskPDuIDqxEkn8Zz6wob3S
ypE35FWck7ni+n5+UJ9nOy4hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5bCSiVLF
ZjBiYnEfxIXa+KqozKwwHwYDVR0jBBgwFoAU9+88h0KVuB+hDxQP61W8nFzt+dkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MjE4LzRFMjQwRjIyQjRB
NjExRjA4QUQzQjA3NUM0RjlBRTAyLzktODhoMEtWdUItaER4UVA2MVc4bkZ6dC1k
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOS04OGgwS1Z1Qi1oRHhRUDYxVzhuRnp0LWRrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4
MjE4LzRFMjQwRjIyQjRBNjExRjA4QUQzQjA3NUM0RjlBRTAyLzktODhoMEtWdUIt
aER4UVA2MVc4bkZ6dC1kay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKzVlbQ7mbAbJS1//Na0+8EasJ4s+U7Ajcqg5R6wav7jUQXJLL07f7aI
KtQ4lPVnpXrP9d49UHAbY5e8g8dX3F7k5VYyQof+EgN0mFjdqSyhO0unrIwNoFRh
mPwnuLFIJj+yOVZ8yIIfR4O4t54EJdA5ntXhWcmEEXXaf0PgNZ4bqlRZfzXmi/Zk
bA5AHXE1nbcp2ngwDklboutvfR67KodhgyYjU6wU5w+Yv/Nxm3+xzNnB6goA//S9
ih1HC2Iko2pDQG39wKn3bZMDOb4iKCR5GXC7cVB5ugEXGL5iO/R/GtV/28bOMJev
XDu5wQgO0iQZWVEB4iziAg9otblER5Q=
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:40:29 2026 by rpki-client