This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
File: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft (raw, json)
Hash identifier: 4zdCaQ3GrnVZE4HqrZCK2eZMkPILPRjXTdsbdwCaE5M=
Subject key identifier: 54:65:5C:FA:0C:3B:91:79:D1:4A:B4:CA:1A:7C:51:C2:CC:A9:B3:7D
Authority key identifier: 31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5
Certificate issuer: /CN=A91E585B/serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
Manifest number: 07
Signing time: Sun 25 Jan 2026 07:10:31 +0000
Manifest this update: Sun 25 Jan 2026 07:10:30 +0000
Manifest next update: Sun 01 Feb 2026 07:10:30 +0000
Files and hashes: 1: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl (hash: lg4nbMsM0R7yKCVACJksV9Jo3memTUhebKqnfHHv3xI=)
2: F526FD64F20611F0B4D6054A4A6F56BC.roa (hash: L7dq1QXHlQZLztfAsQov0/DpPT8NpmsbMt9FawZgc0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl
rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 07:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E585B, serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5
Validity
Not Before: Jan 25 07:10:30 2026 GMT
Not After : Feb 1 07:10:30 2026 GMT
Subject: CN=6975c1e7-fc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:be:af:2d:c1:52:14:76:7f:f3:99:2b:f1:97:
70:af:fb:4e:91:24:15:3f:3d:8e:28:e1:8a:ee:fc:
3c:2c:07:44:fc:18:0b:80:8b:e6:49:d9:c1:44:97:
83:e7:8f:ce:02:1a:ba:fd:78:1f:ce:4b:19:1f:37:
dc:12:4f:44:c7:03:f3:2e:19:62:fd:be:d1:cf:a2:
73:fb:6b:97:28:13:21:7d:a3:ca:a9:43:bc:f9:fa:
23:f2:3a:0f:e5:92:51:b5:49:48:95:d2:ec:ff:ce:
37:24:ab:aa:25:4c:77:4f:81:9f:79:3a:31:20:1a:
45:fb:cb:87:a7:a2:94:4a:aa:dd:59:39:90:cf:84:
5f:d7:80:c3:66:34:7b:ac:29:ad:be:c9:95:cc:44:
64:c0:ca:d6:e7:1b:47:56:bc:c9:80:a4:96:85:05:
1b:c3:b0:23:aa:f6:a6:32:02:a6:cc:73:78:b1:7a:
24:51:3e:82:35:75:e0:d7:13:0b:06:ef:1a:93:2a:
bd:c3:52:20:fe:ef:0a:2f:53:a7:a3:4f:ae:a4:7f:
da:4f:c4:72:b4:fe:ff:97:28:ad:8e:9f:f0:54:70:
23:00:06:37:2a:b9:13:d4:cb:03:a6:d1:21:d3:e8:
ec:39:93:38:64:76:d1:2d:21:0f:7a:39:71:69:70:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:5C:FA:0C:3B:91:79:D1:4A:B4:CA:1A:7C:51:C2:CC:A9:B3:7D
X509v3 Authority Key Identifier:
keyid:31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:0b:6e:72:21:95:2b:89:23:86:5c:7b:53:8c:47:ec:c5:52:
4f:a2:4c:93:2b:1d:eb:41:de:e8:a0:ab:bc:d4:2f:d0:0c:ce:
83:b0:72:58:db:89:9f:56:ce:0e:2b:96:96:c4:95:8c:85:da:
62:37:16:74:33:47:e2:d9:bb:c3:cd:23:74:32:db:5c:bd:a3:
fc:60:5b:86:bc:68:06:c9:d3:2e:16:01:8a:e2:54:a4:15:27:
47:61:cd:e4:c6:0f:8d:86:68:8d:9c:0d:d0:d5:0d:7e:84:9b:
bd:51:d0:fc:82:0c:8a:2f:93:f4:07:41:ca:da:4a:40:89:d0:
71:ce:a6:bc:f4:57:b5:47:b7:e7:8a:79:da:22:7d:60:d2:64:
c7:cd:fe:a5:c8:34:52:1c:1e:e1:3d:33:52:4f:5b:6b:98:7a:
4c:cc:27:61:6f:75:0b:57:af:26:89:89:bc:be:a0:92:39:40:
42:d0:d7:44:5b:24:c7:10:3f:74:d1:1a:42:c6:71:ab:c0:91:
d1:d7:2a:6f:aa:7e:f6:5c:31:4e:31:d6:a7:5e:d2:f7:24:93:
3d:6c:3f:e5:c6:cf:68:3e:ec:04:8a:ae:f6:49:e3:59:b0:40:
ac:d0:0e:4e:72:6b:1c:40:10:0a:c1:cb:9f:42:b3:47:90:c0:
61:f0:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:49:20 2026 by rpki-client