This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
File: -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json)
Hash identifier: Wu6VfNBwoAEkPJKvVLqBlS2x6Rq285fEEg+P4h++fAM=
Subject key identifier: D4:2C:89:DB:CD:20:76:BE:11:0F:53:44:1B:18:96:8C:64:F2:B7:D9
Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00
Certificate issuer: /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
Manifest number: 0253
Signing time: Sun 25 Jan 2026 00:58:49 +0000
Manifest this update: Sun 25 Jan 2026 00:58:48 +0000
Manifest next update: Sun 01 Feb 2026 00:58:48 +0000
Files and hashes: 1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: n6B8BdolBVNMV53AgNOvvAMNvqjpdmYdu/7dLT19OBM=)
2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: uMgAAlcYJQ+sdnOnE1dyzqDnSreVvRuteObbE8brNz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl
rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
Validity
Not Before: Jan 25 00:58:48 2026 GMT
Not After : Feb 1 00:58:48 2026 GMT
Subject: CN=69756ac9-6f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:a3:15:db:cf:93:cf:37:85:3c:07:d7:95:
05:07:96:68:83:88:db:db:55:64:62:ed:1b:28:8f:
2f:01:82:fd:cf:93:66:9f:d6:63:18:ba:a9:fb:cf:
d5:e3:31:cf:bc:29:3e:c1:59:99:fb:01:5a:ab:c3:
bd:34:8e:81:64:a9:0e:45:63:95:11:68:1a:05:49:
3c:5f:ff:93:93:13:f8:28:17:db:25:a4:97:ad:11:
91:87:02:e5:42:6f:69:ff:c9:3b:2a:e6:b9:ff:8a:
96:52:2f:4a:77:cf:2a:43:a0:2f:22:c3:21:35:e2:
53:45:b8:ba:41:b9:a7:b4:64:4b:3a:90:85:28:83:
37:56:31:d8:ce:82:aa:35:3b:26:f1:1a:db:fa:59:
f6:8d:59:d8:1b:eb:6c:95:63:36:55:f5:89:b4:a0:
e0:c9:df:51:2a:29:55:db:f3:96:18:e3:1c:da:4e:
56:28:c2:57:21:03:f6:86:53:d0:55:f9:b3:6a:28:
24:83:5f:20:64:9c:98:63:91:06:d4:4c:76:24:4c:
37:a8:31:64:0f:01:58:ea:c3:9d:4f:eb:1b:65:72:
9c:29:4d:7e:66:ed:6c:80:b5:d4:82:48:c7:8e:ea:
2b:fb:b5:c0:a6:3d:53:92:bc:64:d5:0e:ce:11:55:
ac:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2C:89:DB:CD:20:76:BE:11:0F:53:44:1B:18:96:8C:64:F2:B7:D9
X509v3 Authority Key Identifier:
keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:fb:bd:43:c6:2a:e0:ba:7a:cc:a6:76:fd:f0:45:d9:6e:bc:
51:2d:ab:1e:8b:85:23:05:4a:cf:ce:69:93:f8:ea:9a:6a:d1:
39:17:23:21:77:2c:cd:1b:84:08:b6:5b:78:d0:fb:15:b6:0d:
2b:a5:f4:86:12:09:ed:94:09:63:8d:bc:97:42:5c:3f:f2:ce:
63:1c:1f:85:24:77:1f:fe:c8:8c:3c:ed:ac:61:c8:d9:b1:79:
9f:30:06:5b:fc:f1:66:97:5f:9a:05:f7:08:85:89:b6:f2:72:
67:05:0d:3e:f3:53:f5:81:e9:77:55:8d:ee:98:44:45:2a:65:
d6:63:bf:86:e3:97:1b:37:b0:2c:81:49:67:b8:3a:a2:92:e7:
d1:37:87:74:41:50:59:3f:dd:9f:b9:c3:1d:b1:f0:9f:d3:2f:
a9:8a:ae:79:a2:ac:0c:44:8b:3c:ae:f1:46:b3:8d:d5:ba:0e:
8f:57:ef:e0:2b:87:f6:1b:97:b6:a6:07:50:dc:23:26:5c:ea:
ab:d4:d3:c6:a9:82:b0:6c:19:b6:e1:6c:c9:7b:a5:f4:cd:46:
9d:b4:11:5a:3d:80:78:1b:61:8e:81:32:54:dc:79:54:df:62:
50:9c:e2:47:28:06:7d:45:78:74:7a:58:0a:63:57:2a:7c:1f:
4e:8a:2d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:15:15 2026 by rpki-client