This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json)
Hash identifier: GCieNtkrSSy2v3nHqsqriqDySQ4Ih/8jIpjjiMxmoXE=
Subject key identifier: 9E:70:EB:D8:DB:01:F7:13:1B:5E:36:71:1B:A6:DC:ED:37:9A:09:7A
Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
Manifest number: 03A5
Signing time: Sun 25 Jan 2026 01:08:16 +0000
Manifest this update: Sun 25 Jan 2026 01:08:15 +0000
Manifest next update: Sun 01 Feb 2026 01:08:15 +0000
Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: sI/VKS4SV0zwYd7lFY3AEvCvp+7o0d+eZ3B9idp9oGM=)
2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: Ds7R3+sBBZEG01JWJaEnAvs9QgVWz9hGRIlkayRqHKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Validity
Not Before: Jan 25 01:08:15 2026 GMT
Not After : Feb 1 01:08:15 2026 GMT
Subject: CN=69756d00-4c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:ef:56:54:e9:91:12:48:58:9c:80:e2:5a:
b8:83:4b:64:da:f7:63:2a:0d:70:d2:c1:c5:7f:ac:
19:5b:84:5d:3f:37:0b:51:51:5b:9d:50:ec:0f:b9:
99:bd:e4:36:80:a4:e9:02:ef:a1:1c:3b:ef:c5:f2:
7a:2d:76:d2:f5:c1:40:31:2e:19:34:2d:81:9a:6d:
45:a7:bb:72:e4:70:30:a8:e2:00:48:c9:22:8f:bd:
cc:f2:16:47:ae:1b:12:11:d5:4e:8d:58:56:bd:a6:
6a:83:e7:9c:e3:cb:ce:1a:b9:bf:38:d0:ea:a7:86:
e6:8a:10:f0:79:1f:d3:1c:e7:eb:5e:e2:e2:5c:de:
7d:85:a2:38:02:dd:d8:8e:82:35:90:12:77:d8:54:
f2:5b:6d:4a:2a:2c:e5:97:6a:b7:6a:bc:20:f4:e7:
e7:24:ee:05:85:f4:8f:59:cc:e3:99:f6:01:ea:64:
e2:34:f7:af:ae:71:8e:2e:96:08:b2:54:67:94:ae:
3f:52:a3:32:a5:bb:e7:3b:00:a7:d4:ce:95:43:21:
25:7b:e3:79:c5:96:37:c8:8d:be:97:d0:68:cf:96:
ac:ed:51:3b:39:ee:f4:e2:77:12:0c:78:00:fe:c1:
fd:ff:57:ee:92:ea:38:86:ad:8a:59:f5:d0:c7:3b:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:70:EB:D8:DB:01:F7:13:1B:5E:36:71:1B:A6:DC:ED:37:9A:09:7A
X509v3 Authority Key Identifier:
keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:63:cf:15:5c:d8:c1:7d:09:38:12:8e:62:92:30:04:93:94:
28:2a:d2:29:5d:cb:29:5c:d5:bc:6a:4d:29:78:94:3b:34:b2:
49:d3:4d:84:ae:69:25:d2:87:c1:f6:f1:12:d1:bf:a8:6b:40:
05:54:68:89:4c:d0:75:63:ca:c0:31:b1:de:10:27:66:70:98:
c5:84:e0:ff:13:0c:ad:e6:32:cf:4c:f6:79:6f:f6:e7:5b:55:
7d:ab:6c:35:4d:dd:df:71:8b:7b:dc:2c:68:db:79:7d:17:ad:
b6:09:8b:da:99:ec:9c:83:15:f9:85:fe:75:ec:ef:bd:c4:bf:
fc:71:6d:25:b7:eb:93:12:40:53:20:44:e7:58:64:0c:1a:e4:
a3:72:2e:6a:43:4b:fd:b4:52:5c:4c:c8:07:5d:79:98:02:c8:
e6:a3:bb:8b:5f:23:57:db:4a:e5:7f:14:ce:f9:2b:31:64:71:
37:24:b2:8f:50:6f:ba:df:b1:54:1a:41:fa:77:11:fe:64:92:
aa:92:04:27:c2:aa:cb:9e:a6:1d:43:5d:a4:9f:9a:7e:5d:7f:
54:3f:5e:37:6d:1a:c8:69:aa:55:26:a8:e5:06:63:21:78:cb:
ff:1b:1b:bb:25:7a:38:3e:7d:f5:5e:5b:01:c3:cf:c5:45:cf:
94:f3:00:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUU4QUMxMTAvBgNVBAUTKEJFRjMyMUIwM0Q4MjQ1REU3N0VDODBERDAzMzFCRkJB
OEQwODU5RDgwHhcNMjYwMTI1MDEwODE1WhcNMjYwMjAxMDEwODE1WjAYMRYwFAYD
VQQDDA02OTc1NmQwMC00YzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq6zvVlTpkRJIWJyA4lq4g0tk2vdjKg1w0sHFf6wZW4RdPzcLUVFbnVDsD7mZ
veQ2gKTpAu+hHDvvxfJ6LXbS9cFAMS4ZNC2Bmm1Fp7ty5HAwqOIASMkij73M8hZH
rhsSEdVOjVhWvaZqg+ec48vOGrm/ONDqp4bmihDweR/THOfrXuLiXN59haI4At3Y
joI1kBJ32FTyW21KKizll2q3arwg9OfnJO4FhfSPWczjmfYB6mTiNPevrnGOLpYI
slRnlK4/UqMypbvnOwCn1M6VQyEle+N5xZY3yI2+l9Boz5as7VE7Oe704ncSDHgA
/sH9/1fukuo4hq2KWfXQxztTiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5w69jb
AfcTG142cRum3O03mgl6MB8GA1UdIwQYMBaAFL7zIbA9gkXed+yA3QMxv7qNCFnY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRThBQy81MDM4RUM4QzdE
RUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1JkNTM3SURkQXpHX3VvMElX
ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Z2TWhzRDJDUmQ1MzdJRGRBekdfdW8wSVdkZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RThBQy81MDM4RUM4QzdERUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1Jk
NTM3SURkQXpHX3VvMElXZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFY88VXNjBfQk4Eo5ikjAEk5QoKtIpXcspXNW8ak0peJQ7NLJJ002E
rmkl0ofB9vES0b+oa0AFVGiJTNB1Y8rAMbHeECdmcJjFhOD/Ewyt5jLPTPZ5b/bn
W1V9q2w1Td3fcYt73Cxo23l9F622CYvameycgxX5hf517O+9xL/8cW0lt+uTEkBT
IETnWGQMGuSjci5qQ0v9tFJcTMgHXXmYAsjmo7uLXyNX20rlfxTO+SsxZHE3JLKP
UG+637FUGkH6dxH+ZJKqkgQnwqrLnqYdQ12kn5p+XX9UP143bRrIaapVJqjlBmMh
eMv/Gxu7JXo4Pn31XlsBw8/FRc+U8wB4
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:02:02 2026 by rpki-client