This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json)
Hash identifier: c+I7JajZ6XYmjg2UZIuPXmdHMHQjtizKvHlX6oHuCJQ=
Subject key identifier: 42:C8:33:AA:57:1B:03:3F:51:FB:B3:BA:8C:D2:A7:A1:CE:F8:5D:8E
Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
Manifest number: 01B6
Signing time: Sun 25 Jan 2026 02:33:24 +0000
Manifest this update: Sun 25 Jan 2026 02:33:24 +0000
Manifest next update: Sun 01 Feb 2026 02:33:24 +0000
Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: vWpwPsW22+Y6B/c8NeVQGICPpDG3bGdNrufXkFAQF+0=)
2: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: 62i11cOhvCjcZJFhurs2L312gf52w6GvDY0uaDyOJz4=)
3: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: uUpm9NFHi6MmOb1nvSZuJIDcyqZZGqDMO8KCT1mXOjs=)
4: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: t5GGM3LLCjSQgXa7TCvCWtuwsiNhuQ1qWsf0Ql7HMNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Validity
Not Before: Jan 25 02:33:24 2026 GMT
Not After : Feb 1 02:33:24 2026 GMT
Subject: CN=697580f4-c421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:6d:61:cb:4a:6c:83:c4:95:e2:6c:bc:06:
ef:d4:78:ca:4a:58:1d:4e:3e:51:f2:6f:cd:21:7f:
a9:36:b5:5d:15:ee:1a:8e:ad:6c:04:43:9c:bf:ef:
d5:86:54:69:c5:ac:62:38:af:c0:5f:16:db:93:d1:
2f:1a:68:9b:c6:98:f6:a0:ae:6c:01:7b:4a:6e:12:
82:ff:c6:05:a6:f4:d6:c8:9b:af:87:8c:a2:d5:39:
8b:6a:a7:49:7a:9e:4c:7c:8e:ca:56:57:5c:3b:ac:
53:c8:af:56:67:66:ec:66:a2:69:d1:24:40:83:ad:
29:5a:f6:df:7c:24:61:33:20:5e:2b:9a:f1:94:4e:
dc:d6:e5:d3:75:78:39:3d:7b:f5:90:d9:90:cb:05:
01:60:1c:c9:c6:cc:0c:7b:e4:d5:3e:79:54:c9:67:
0d:c1:55:f4:ea:89:7a:50:a9:0c:8b:e8:23:3f:31:
b5:ab:a8:33:21:be:9b:81:95:b5:57:d3:01:14:ce:
8d:b8:ba:84:ae:17:65:31:36:65:28:fb:f5:6e:44:
d5:6b:7b:ff:36:fa:58:d9:aa:ca:2e:99:4f:3e:30:
1f:32:9a:16:5a:c0:66:ac:3d:04:c4:94:c4:49:e8:
94:a0:ec:4d:4e:50:10:03:49:ed:28:10:5f:44:ac:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C8:33:AA:57:1B:03:3F:51:FB:B3:BA:8C:D2:A7:A1:CE:F8:5D:8E
X509v3 Authority Key Identifier:
keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:bc:4c:f2:ab:e2:28:56:68:eb:7b:7c:87:29:23:dd:2a:64:
4e:69:be:8f:6c:85:87:2b:0b:69:a4:06:54:32:69:67:bd:d0:
6b:b4:39:0e:4d:b0:c2:ce:ba:cd:86:89:15:43:fe:4a:cb:96:
b6:d7:b2:28:10:02:62:25:19:b2:4d:0b:4f:8f:5f:62:3f:5f:
21:35:1b:1f:8b:a7:47:31:01:91:3d:11:54:61:72:cc:d5:f9:
d6:11:2d:81:b6:7b:53:f1:2a:e5:91:90:1f:db:44:88:6b:0f:
77:c4:e0:a2:b0:d0:e5:97:50:b0:7b:74:6f:73:fc:54:a5:68:
6d:f3:f8:95:dc:25:af:d8:a0:a1:ce:5e:f0:ae:4e:37:a1:81:
ed:d6:a4:3a:7a:a2:57:ff:6a:87:83:df:72:01:01:be:21:86:
25:96:cb:41:10:e6:9e:30:eb:2b:2c:99:0e:4e:8d:bd:44:c7:
65:3d:7a:91:bd:e5:c6:1c:dc:73:3c:b5:85:16:53:db:8a:67:
80:03:c1:eb:4c:61:d6:86:47:6c:11:fd:d3:ac:63:d7:48:d1:
58:1d:80:8f:ea:74:1b:ce:df:4e:e6:fe:d0:cd:75:71:e7:ef:
f4:ef:8f:de:2f:db:aa:62:ef:c1:83:56:23:49:01:08:d5:a1:
98:4e:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:24:52 2026 by rpki-client