This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
File: MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json)
Hash identifier: p3tYhXNfY54kxm+qdY2CK5MRVRmfeKVY5+I/DvHiAnw=
Subject key identifier: F6:0B:AB:10:B3:16:E2:63:33:9A:CE:1A:13:98:3D:DE:17:7C:18:10
Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
Certificate issuer: /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Certificate serial: 150D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
Manifest number: 14F9
Signing time: Sat 24 Jan 2026 16:34:43 +0000
Manifest this update: Sat 24 Jan 2026 16:34:42 +0000
Manifest next update: Sat 31 Jan 2026 16:34:42 +0000
Files and hashes: 1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: kGrtdiyQxKy6c+/Icc2g1ChNoIQPdSLsmAvrlJKQ2dw=)
2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: fzmHVxiTK7D8PG5yindwGef8+csbEOVTRn9jS+V30ac=)
3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: iYa29kjN+8nhwT/98WnKo7Pi7A7FL3PggbbxiD2rxqU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5389 (0x150d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Validity
Not Before: Jan 24 16:34:42 2026 GMT
Not After : Jan 31 16:34:42 2026 GMT
Subject: CN=6974f4a3-b8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:f5:49:58:bc:48:c3:f9:53:15:15:ba:41:
94:53:38:de:e6:30:69:b6:6d:7b:d8:ef:e7:9a:f0:
70:e8:b6:3a:eb:c9:23:53:9e:54:a8:f0:8e:cc:30:
dd:f0:df:58:fb:0e:22:2d:8f:e3:a9:be:bb:6d:20:
48:3d:59:45:e3:a1:aa:8c:ac:15:87:68:1b:cb:b4:
7e:86:19:b7:db:10:b0:6f:a9:00:76:e5:bf:c0:1a:
40:90:b6:08:29:f8:77:06:72:3e:25:d3:9e:41:ee:
14:1a:0d:cf:99:be:fb:94:70:cb:6e:10:ac:7b:cf:
e9:0a:04:cf:05:f5:9a:bd:c0:2b:ec:00:95:d5:6a:
4c:40:0a:51:56:e7:63:29:23:5d:0b:5d:76:34:bf:
8d:76:b8:00:a7:48:13:a1:ab:29:09:21:d4:0b:c8:
ed:9f:23:93:53:e9:3a:9d:30:5a:54:ef:f1:9e:bd:
a1:64:c7:2c:45:7a:fe:f1:66:2b:62:42:ed:c3:f8:
73:1f:d4:0e:26:1d:63:2d:d1:be:b2:6b:3f:0c:9f:
28:5f:cd:9a:1b:bf:ea:ca:11:2f:a8:2b:2f:6b:36:
9b:af:a8:bc:ef:0e:2e:99:db:d1:4b:c5:b4:3a:5f:
85:ac:01:7c:28:86:07:38:f4:e2:ef:57:88:f5:7d:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0B:AB:10:B3:16:E2:63:33:9A:CE:1A:13:98:3D:DE:17:7C:18:10
X509v3 Authority Key Identifier:
keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d2:6a:49:ae:20:8c:80:44:36:14:9e:a1:c2:af:bd:61:14:
25:c5:52:18:64:0e:0b:0f:47:19:49:e0:08:47:9c:03:d5:99:
bf:6f:a4:2d:ab:b1:5c:9b:6f:90:8f:dd:22:4b:8e:2a:eb:07:
18:98:89:48:bf:d8:03:ff:15:d3:c7:06:bf:a0:f7:19:18:02:
aa:58:92:a1:55:59:bc:b6:a1:04:dc:cc:f7:16:5a:7d:f3:3c:
89:71:60:6c:82:b1:76:d5:10:e3:70:57:f2:e4:f8:27:d7:14:
f2:14:50:91:3e:98:2b:c3:77:da:e0:a3:fe:9b:17:5e:aa:2c:
e6:5e:fd:2e:12:59:c9:ca:e6:a6:a4:ba:91:26:19:23:57:be:
65:25:6e:27:2f:2a:ed:a1:be:66:78:6c:6b:81:10:d9:45:e7:
40:49:87:39:c9:32:23:b2:52:81:67:d0:87:51:76:72:cb:43:
c9:24:20:0a:bc:ed:69:ce:a7:33:70:f6:23:c8:53:c4:2d:9e:
61:61:0b:66:dc:98:14:2d:97:f5:74:2f:46:32:3b:9f:69:a6:
6c:0c:b0:f7:b0:3d:ed:9e:cc:d6:7d:aa:0d:3c:69:ea:41:ad:
38:3c:9c:00:fe:8a:19:b4:4a:d9:e9:e6:e3:b8:4e:7c:60:81:
49:b0:37:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ2QjExMTAvBgNVBAUTKDMwMDc4NDRBQUExOTlCQTlDODhENjQwNEMzREZFODc2
RTFFMzlGQzYwHhcNMjYwMTI0MTYzNDQyWhcNMjYwMTMxMTYzNDQyWjAYMRYwFAYD
VQQDDA02OTc0ZjRhMy1iOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYf1SVi8SMP5UxUVukGUUzje5jBptm172O/nmvBw6LY668kjU55UqPCOzDDd
8N9Y+w4iLY/jqb67bSBIPVlF46GqjKwVh2gby7R+hhm32xCwb6kAduW/wBpAkLYI
Kfh3BnI+JdOeQe4UGg3Pmb77lHDLbhCse8/pCgTPBfWavcAr7ACV1WpMQApRVudj
KSNdC112NL+NdrgAp0gToaspCSHUC8jtnyOTU+k6nTBaVO/xnr2hZMcsRXr+8WYr
YkLtw/hzH9QOJh1jLdG+sms/DJ8oX82aG7/qyhEvqCsvazabr6i87w4umdvRS8W0
Ol+FrAF8KIYHOPTi71eI9X3llQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYLqxCz
FuJjM5rOGhOYPd4XfBgQMB8GA1UdIwQYMBaAFDAHhEqqGZupyI1kBMPf6Hbh45/G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GMDBERjM2NjY3
OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02bklqV1FFdzlfb2R1SGpu
OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01BZUVTcW9abTZuSWpXUUV3OV9vZHVIam44WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDZCMS9GMDBERjM2NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02
bklqV1FFdzlfb2R1SGpuOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCw0mpJriCMgEQ2FJ6hwq+9YRQlxVIYZA4LD0cZSeAIR5wD1Zm/b6Qt
q7Fcm2+Qj90iS44q6wcYmIlIv9gD/xXTxwa/oPcZGAKqWJKhVVm8tqEE3Mz3Flp9
8zyJcWBsgrF21RDjcFfy5Pgn1xTyFFCRPpgrw3fa4KP+mxdeqizmXv0uElnJyuam
pLqRJhkjV75lJW4nLyrtob5meGxrgRDZRedASYc5yTIjslKBZ9CHUXZyy0PJJCAK
vO1pzqczcPYjyFPELZ5hYQtm3JgULZf1dC9GMjufaaZsDLD3sD3tnszWfaoNPGnq
Qa04PJwA/ooZtErZ6ebjuE58YIFJsDeI
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:04:50 2026 by rpki-client