This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json)
Hash identifier: VUaXpJyhuLk9P+K7OfXuKrrzQvYqiWC93ucc0DrUtyM=
Subject key identifier: F1:8E:CA:1A:9A:AC:A7:81:44:71:58:77:BB:E4:6D:D6:36:9D:2A:7B
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial: 032C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
Manifest number: 0324
Signing time: Sun 25 Jan 2026 00:15:21 +0000
Manifest this update: Sun 25 Jan 2026 00:15:20 +0000
Manifest next update: Sun 01 Feb 2026 00:15:20 +0000
Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: a1lA8YFcnDlzDppxoHgssQtCNte6WdN/crg/lnfhwM0=)
2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: mXf2uQ5mcSdD+NErxrFlghuWQs3NGoZkupDcd+zBXVE=)
3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: M9uQ6pPxIBbjIwPVgVR3Gml4RjG64rh15R2Po2BA/0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Validity
Not Before: Jan 25 00:15:20 2026 GMT
Not After : Feb 1 00:15:20 2026 GMT
Subject: CN=69756099-e054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6e:af:9b:ef:0c:9c:a2:b7:97:fb:ed:85:c8:
07:18:0e:ce:97:a2:2e:7c:eb:52:00:de:bf:11:92:
95:e6:80:4c:d1:17:b2:b7:2a:c2:88:ec:05:7b:57:
53:3f:6a:86:ee:c2:b6:db:73:a7:7d:13:61:ed:77:
1b:30:96:30:a6:a2:49:bc:21:ca:fb:e9:0c:f0:92:
30:9c:91:3a:c9:f9:4c:92:3c:56:c0:fe:ac:42:ab:
72:7e:38:47:22:93:44:1d:7b:8a:8c:84:7f:b7:72:
e5:78:5d:e2:98:40:17:10:dc:ae:22:c6:35:8f:f6:
35:64:8f:5b:60:e0:6e:ff:aa:5d:76:44:6e:e5:35:
76:ec:59:d6:b9:a9:7d:12:60:79:99:46:b6:42:bc:
96:af:87:80:45:fd:f1:82:ab:fc:ad:92:b3:26:48:
5c:bd:aa:37:aa:ae:1b:79:9d:67:7f:83:78:33:97:
be:4a:20:eb:31:b3:8a:ee:2d:98:e8:f7:6e:1d:fd:
fa:67:dc:1a:d3:d6:e0:ae:bf:50:76:be:07:43:18:
fd:9a:ca:be:19:27:bb:8c:c5:70:44:3a:29:ca:82:
79:d9:1f:6a:69:56:e4:8d:99:3a:7c:8c:fb:72:66:
70:b2:7a:1f:4c:e7:74:a7:9a:77:53:09:97:94:bf:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8E:CA:1A:9A:AC:A7:81:44:71:58:77:BB:E4:6D:D6:36:9D:2A:7B
X509v3 Authority Key Identifier:
keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:66:db:46:db:5a:46:f3:ce:09:ec:0b:34:42:7f:97:fe:38:
c2:74:4b:af:4a:10:03:a5:5f:9f:e9:89:7f:75:a7:02:fa:be:
b8:88:a2:90:6a:a6:dd:3d:75:30:37:ad:47:5c:ea:7c:8f:4d:
15:f2:99:e8:34:ea:c1:c8:48:c4:e4:61:1e:34:f6:5c:87:64:
fc:35:12:65:3c:cd:e1:81:15:16:3c:ef:fc:90:4a:7e:d9:9c:
90:50:59:f4:66:1d:2f:1d:e6:40:01:77:87:e4:6e:dc:ba:54:
f4:cc:d3:12:04:dd:d5:1f:f7:f6:6d:bb:12:9d:e5:0d:fc:d8:
45:7f:2a:23:8b:83:dc:e2:4a:78:9f:10:2c:cb:2c:85:ed:d5:
7e:f6:6b:fd:3a:ac:08:9c:21:a0:7c:e3:53:1b:29:1a:2e:95:
c6:b5:69:ff:60:24:bd:0c:49:af:4d:2c:bf:be:6e:37:d3:f3:
a3:46:af:7a:46:1c:c1:ed:12:d9:13:91:77:86:ae:56:a7:dd:
31:e6:de:8c:e2:75:89:13:93:ea:7e:b3:d9:5c:58:ee:22:c9:
eb:d9:42:61:26:57:47:45:43:ce:43:44:48:f6:0e:2e:6a:b1:
25:c1:65:de:e6:ef:48:d0:86:e2:05:9e:de:b7:47:af:4a:03:
55:ed:17:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw
NjAyRkY2QkMwHhcNMjYwMTI1MDAxNTIwWhcNMjYwMjAxMDAxNTIwWjAYMRYwFAYD
VQQDDA02OTc1NjA5OS1lMDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2m6vm+8MnKK3l/vthcgHGA7Ol6IufOtSAN6/EZKV5oBM0ReytyrCiOwFe1dT
P2qG7sK223OnfRNh7XcbMJYwpqJJvCHK++kM8JIwnJE6yflMkjxWwP6sQqtyfjhH
IpNEHXuKjIR/t3LleF3imEAXENyuIsY1j/Y1ZI9bYOBu/6pddkRu5TV27FnWual9
EmB5mUa2QryWr4eARf3xgqv8rZKzJkhcvao3qq4beZ1nf4N4M5e+SiDrMbOK7i2Y
6PduHf36Z9wa09bgrr9Qdr4HQxj9msq+GSe7jMVwRDopyoJ52R9qaVbkjZk6fIz7
cmZwsnofTOd0p5p3UwmXlL9wywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGOyhqa
rKeBRHFYd7vkbdY2nSp7MB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5
RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTdDOS85QzZFRjc0RUY5RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5Q
Z0lhekN6SG1VcTRHQXY5cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpZttG21pG884J7As0Qn+X/jjCdEuvShADpV+f6Yl/dacC+r64iKKQ
aqbdPXUwN61HXOp8j00V8pnoNOrByEjE5GEeNPZch2T8NRJlPM3hgRUWPO/8kEp+
2ZyQUFn0Zh0vHeZAAXeH5G7culT0zNMSBN3VH/f2bbsSneUN/NhFfyoji4Pc4kp4
nxAsyyyF7dV+9mv9OqwInCGgfONTGykaLpXGtWn/YCS9DEmvTSy/vm430/OjRq96
RhzB7RLZE5F3hq5Wp90x5t6M4nWJE5PqfrPZXFjuIsnr2UJhJldHRUPOQ0RI9g4u
arElwWXe5u9I0IbiBZ7et0evSgNV7RfG
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:35:08 2026 by rpki-client