This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
File: RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json)
Hash identifier: IUfdj7YzH5QnSEPSjOoqjJ1ESJxwbSXDySdGWGafyLE=
Subject key identifier: 1E:53:72:73:6F:7F:FF:B6:9F:02:26:FF:3D:4A:C5:E3:F5:BA:1D:10
Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E
Certificate issuer: /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
Manifest number: 0101
Signing time: Sun 25 Jan 2026 04:22:24 +0000
Manifest this update: Sun 25 Jan 2026 04:22:24 +0000
Manifest next update: Sun 01 Feb 2026 04:22:24 +0000
Files and hashes: 1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: SJdvFZXPCQZbU+RJzIjKpsAi917ijBx5tMq3QaW0ZX0=)
2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: Lo2vDLqUWYKZZBt2t4d2KqlKu9tqzBqX5FsiB+knExY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl
rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE92F, serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E
Validity
Not Before: Jan 25 04:22:24 2026 GMT
Not After : Feb 1 04:22:24 2026 GMT
Subject: CN=69759a80-12b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:c3:46:b7:a6:b5:b0:09:09:43:10:0d:11:
27:09:75:50:81:51:7b:88:03:9f:97:5b:d9:b3:6d:
c8:fc:cb:3c:97:cf:48:11:2d:d9:b0:6c:ea:93:1e:
f2:bf:0f:97:07:89:f1:8d:98:cc:81:5c:a7:11:1d:
61:fe:96:4b:4e:10:82:79:d4:d7:fa:fd:8d:7c:10:
56:ea:22:f1:84:91:21:9c:0c:5f:4a:81:98:c1:dc:
fa:2d:f0:ea:a4:1c:1a:30:25:ad:f8:39:60:46:06:
b9:94:38:1e:12:79:ab:58:69:d9:85:bc:9c:b9:65:
24:99:1f:7b:1c:3d:36:43:43:46:c6:15:df:b5:71:
b7:31:e4:4d:2d:ba:c2:8c:54:f7:33:b8:59:78:11:
35:78:e4:7d:d0:e3:c3:2e:ca:3b:72:28:0f:f3:79:
b0:50:a1:44:fc:15:df:6e:28:c6:57:f8:31:ed:7c:
47:6d:ed:79:90:d0:20:2d:69:c5:8d:c5:cd:c1:1f:
c5:e7:fd:8b:ea:4b:1c:2d:f0:a4:33:6d:22:90:c7:
a9:74:50:12:40:85:a8:2f:96:0d:29:e5:60:5d:fe:
41:9d:ff:42:6e:14:f6:09:24:76:7c:04:a4:a3:bc:
82:c2:7d:d4:c4:00:33:51:47:72:0e:15:33:69:cd:
e1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:53:72:73:6F:7F:FF:B6:9F:02:26:FF:3D:4A:C5:E3:F5:BA:1D:10
X509v3 Authority Key Identifier:
keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ef:6e:fa:54:e6:e1:ec:f2:82:ad:35:38:85:ab:73:9d:02:
51:68:a7:74:cd:5d:75:79:1d:99:82:bf:b7:15:e4:52:c9:07:
dc:89:e5:0c:d3:11:f7:49:05:40:d1:df:d5:94:c6:77:c8:2f:
28:8c:f7:57:7a:3b:5b:c8:90:7f:a8:cf:4d:16:1e:18:46:b0:
19:5a:b8:22:0b:16:44:f5:4e:94:1a:65:98:ad:c6:b6:e1:54:
62:25:53:2e:96:16:17:c8:0b:86:8d:b7:f1:56:bd:72:f5:1d:
f8:95:d4:4c:b0:2d:37:04:ab:d0:8c:7e:11:9c:88:1d:24:ba:
3a:21:ec:f5:c5:01:96:af:e2:94:ed:c4:dc:a3:e2:92:44:0c:
5d:1f:2e:79:a1:c2:bf:f0:6d:5e:de:e5:d2:0d:80:4f:83:4c:
80:4c:f3:2e:b5:47:14:c3:0a:2a:e9:12:ec:18:86:91:f9:a7:
03:99:65:36:81:12:d0:8d:0f:a9:6c:97:0c:67:c2:95:4e:08:
a1:a7:8e:d2:d9:75:eb:54:a1:eb:33:75:62:fa:60:a8:a4:5b:
a3:dd:46:4f:e9:96:99:20:29:24:fc:00:e4:84:78:94:78:e0:
37:15:60:c2:bc:3f:2b:b5:bf:ca:18:cc:d2:4f:54:c2:ee:2f:
e9:ea:70:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUU5MkYxMTAvBgNVBAUTKDQ1N0RCNzY2RTFCMEQ2QTREQ0M3RjlBRUNEMjg3RDRE
QzNFNzBDOUUwHhcNMjYwMTI1MDQyMjI0WhcNMjYwMjAxMDQyMjI0WjAYMRYwFAYD
VQQDDA02OTc1OWE4MC0xMmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqlTDRremtbAJCUMQDREnCXVQgVF7iAOfl1vZs23I/Ms8l89IES3ZsGzqkx7y
vw+XB4nxjZjMgVynER1h/pZLThCCedTX+v2NfBBW6iLxhJEhnAxfSoGYwdz6LfDq
pBwaMCWt+DlgRga5lDgeEnmrWGnZhbycuWUkmR97HD02Q0NGxhXftXG3MeRNLbrC
jFT3M7hZeBE1eOR90OPDLso7cigP83mwUKFE/BXfbijGV/gx7XxHbe15kNAgLWnF
jcXNwR/F5/2L6kscLfCkM20ikMepdFASQIWoL5YNKeVgXf5Bnf9CbhT2CSR2fASk
o7yCwn3UxAAzUUdyDhUzac3hYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5TcnNv
f/+2nwIm/z1KxeP1uh0QMB8GA1UdIwQYMBaAFEV9t2bhsNak3Mf5rs0ofU3D5wye
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xMjA4NUQxODc0
MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFxVGN4X211elNoOVRjUG5E
SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1JYMjNadUd3MXFUY3hfbXV6U2g5VGNQbkRKNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTkyRi8xMjA4NUQxODc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFx
VGN4X211elNoOVRjUG5ESjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBu7276VObh7PKCrTU4hatznQJRaKd0zV11eR2Zgr+3FeRSyQfcieUM
0xH3SQVA0d/VlMZ3yC8ojPdXejtbyJB/qM9NFh4YRrAZWrgiCxZE9U6UGmWYrca2
4VRiJVMulhYXyAuGjbfxVr1y9R34ldRMsC03BKvQjH4RnIgdJLo6Iez1xQGWr+KU
7cTco+KSRAxdHy55ocK/8G1e3uXSDYBPg0yATPMutUcUwwoq6RLsGIaR+acDmWU2
gRLQjQ+pbJcMZ8KVTgihp47S2XXrVKHrM3Vi+mCopFuj3UZP6ZaZICkk/ADkhHiU
eOA3FWDCvD8rtb/KGMzST1TC7i/p6nA1
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:00:52 2026 by rpki-client