This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
File: MoI4D1fWFw9Fz1IOeywaPNovyq0.mft (raw, json)
Hash identifier: JkUNsISEBLkLDQ2Un97/Yo2mN2jKlH2oc/E0Jl8i0VU=
Subject key identifier: FB:B1:10:53:98:4A:70:FC:9C:FE:DD:74:0B:53:C8:A4:DF:B2:CC:6F
Authority key identifier: 32:82:38:0F:57:D6:17:0F:45:CF:52:0E:7B:2C:1A:3C:DA:2F:CA:AD
Certificate issuer: /CN=A91EE1DD/serialNumber=3282380F57D6170F45CF520E7B2C1A3CDA2FCAAD
Certificate serial: 0340
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
Manifest number: 033A
Signing time: Sun 25 Jan 2026 00:11:41 +0000
Manifest this update: Sun 25 Jan 2026 00:11:41 +0000
Manifest next update: Sun 01 Feb 2026 00:11:41 +0000
Files and hashes: 1: MoI4D1fWFw9Fz1IOeywaPNovyq0.crl (hash: O73bST7Ce1ijNzVU81+dqfZQp9Kr2aH0KvC75FfZbaU=)
2: 7D857A30F11811EC86D3AD4BC4F9AE02.roa (hash: W3wkEeHhj7Ezvu6rXVuXewssQtL4IOnsFBykI5+RvLQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.crl
rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832 (0x340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE1DD, serialNumber=3282380F57D6170F45CF520E7B2C1A3CDA2FCAAD
Validity
Not Before: Jan 25 00:11:41 2026 GMT
Not After : Feb 1 00:11:41 2026 GMT
Subject: CN=69755fbd-e8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:45:e0:5d:b6:b5:57:b2:3d:38:ef:ce:db:
e9:5e:28:eb:d2:8d:c9:2c:fe:6e:e1:3e:47:f8:c1:
fd:0a:ee:11:ba:7d:c0:50:81:f3:3c:60:c0:d2:ee:
f7:10:2d:69:27:fe:b1:1e:c2:f9:c6:65:22:1d:a4:
f6:9c:a4:96:f5:60:c9:f6:f1:82:d3:b2:40:ff:bf:
99:42:bc:87:6e:67:d0:9c:99:e0:e6:48:e8:0b:16:
11:ec:53:6c:37:a6:57:3c:cf:ea:5c:d4:3e:1d:b2:
16:76:fa:9f:1f:0b:7e:4f:1b:96:fb:76:09:db:ac:
43:4f:3e:87:b7:44:6f:10:cd:e4:a5:d1:e7:f6:81:
57:80:1d:79:a3:26:c4:a3:21:08:b8:b3:a4:14:27:
fe:29:c6:8f:55:a6:b7:56:c7:07:cf:f9:2d:61:a4:
cf:1a:62:1f:1c:26:cf:62:6a:f6:8b:15:3b:31:66:
c9:35:0f:0a:a9:76:ae:4b:d3:f1:8e:94:a2:ef:97:
c4:dc:37:b0:cc:07:01:ca:91:8b:84:17:8e:e9:23:
57:61:42:ce:2a:28:3e:0a:89:be:5a:15:75:1e:ef:
db:28:6d:b3:3b:d1:04:5d:58:5d:ab:76:7a:0d:a7:
d4:52:5d:c8:48:96:89:4f:71:ef:a5:ce:cf:83:45:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B1:10:53:98:4A:70:FC:9C:FE:DD:74:0B:53:C8:A4:DF:B2:CC:6F
X509v3 Authority Key Identifier:
keyid:32:82:38:0F:57:D6:17:0F:45:CF:52:0E:7B:2C:1A:3C:DA:2F:CA:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:54:28:ff:41:51:e3:65:2c:e4:87:50:52:bd:07:8b:de:a4:
c1:2f:a5:32:92:18:2a:1a:76:1d:de:53:ab:00:06:89:23:0b:
d8:a8:38:66:21:01:a1:41:bc:13:11:cb:b2:83:87:6e:9c:66:
9f:89:1b:fa:6d:87:1f:ac:cf:b4:6d:cd:55:7f:77:6a:0a:85:
6b:d2:08:bf:29:a0:02:dd:5f:46:0d:cb:04:c4:81:13:51:8d:
f0:db:51:7a:e1:2d:6a:2a:c5:10:73:8b:44:7c:b6:70:d7:f1:
22:94:84:40:fb:c5:7d:09:2b:14:36:29:36:da:61:97:94:8f:
ea:68:cf:86:7e:a1:50:53:f3:12:c3:76:79:55:e6:6a:fd:0c:
40:f1:1e:b3:95:c1:bd:03:5d:8c:ec:e7:fa:88:ec:48:7e:30:
5c:9e:8b:2e:bc:5f:83:3b:fd:f4:6e:22:80:02:33:f9:33:eb:
f3:f2:c7:d8:29:07:7d:fa:a2:2b:ba:65:43:be:7b:dd:7d:a1:
09:d3:1d:12:6e:2a:5b:f8:53:fc:c7:38:c1:bd:ea:67:3d:8c:
04:ab:6f:8e:f1:8b:be:d3:cc:f8:6c:8e:f5:c0:65:9d:72:7f:
9a:75:26:93:6f:3a:0d:c9:c3:39:4b:be:71:29:80:64:3f:3c:
ba:1e:2f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:18 2026 by rpki-client