This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft
File: 7F7zNU5M1TSrhiW5m3MS1vTkixU.mft (raw, json)
Hash identifier: SitWlGxOcI/LRSAnc8LKXXehpa5KGR0G3TalOBalBv8=
Subject key identifier: 45:8C:62:66:B4:1C:6B:1A:4C:7E:0F:F6:E6:7A:98:FC:65:26:19:34
Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15
Certificate issuer: /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft
Manifest number: 0192
Signing time: Sun 25 Jan 2026 03:30:40 +0000
Manifest this update: Sun 25 Jan 2026 03:30:39 +0000
Manifest next update: Sun 01 Feb 2026 03:30:39 +0000
Files and hashes: 1: 7F7zNU5M1TSrhiW5m3MS1vTkixU.crl (hash: SmWgyGTW8ltGANOHuHDF8o00IBN4g5K5o3c4gR4O87E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl
rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF175, serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15
Validity
Not Before: Jan 25 03:30:39 2026 GMT
Not After : Feb 1 03:30:39 2026 GMT
Subject: CN=69758e60-f56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:64:72:29:73:9d:b3:c4:07:9f:5f:1f:9d:
74:f1:39:54:79:d3:8a:f5:7e:e9:26:e0:91:af:9a:
4f:22:da:82:c5:a2:e1:bd:1d:9d:d1:98:6e:d5:a0:
98:e0:ff:01:61:98:7b:f0:08:f7:30:3d:52:f4:5e:
15:39:b0:bb:61:0c:98:4f:c6:d0:2a:df:10:10:e6:
76:f7:fc:fb:62:0d:4e:e8:f2:79:fc:8f:86:14:71:
0f:96:a2:26:d8:40:5a:50:95:b5:c6:1e:4c:e8:3b:
d5:9a:c3:a2:e5:5f:05:6d:1f:ce:d4:8b:51:c1:66:
a7:2a:a4:c1:3b:76:97:e2:85:1e:9c:31:e6:a9:ae:
a2:24:dd:de:13:a5:96:b0:c8:38:2a:7f:58:24:49:
5c:05:64:45:8e:cb:65:4f:4e:82:34:0f:b2:34:79:
f5:6e:ae:43:6b:1a:df:62:f0:c5:fb:07:e3:83:bd:
da:34:57:a3:e6:42:b1:e5:47:74:73:2d:75:27:13:
62:60:2b:3f:58:2f:b3:27:17:fa:9b:51:ce:b1:74:
08:6f:b6:91:02:78:b9:7e:bf:58:fc:f5:39:a6:d1:
36:24:9f:29:ca:57:9d:3e:10:86:46:4a:de:cf:c8:
1c:78:79:a1:56:6b:0f:b3:39:31:a3:7d:00:b5:ec:
0a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8C:62:66:B4:1C:6B:1A:4C:7E:0F:F6:E6:7A:98:FC:65:26:19:34
X509v3 Authority Key Identifier:
keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:cb:d2:c5:e1:22:b2:cd:30:66:41:f9:3f:ab:d8:61:17:03:
29:61:89:29:80:c8:ad:40:f8:cf:1a:06:72:63:a3:5a:67:e8:
3b:6d:b4:85:c7:35:a3:4a:a0:29:99:fd:80:bd:02:19:76:97:
3c:82:f5:5b:ae:63:82:31:4a:37:63:6f:fe:94:9b:70:f7:db:
69:dc:35:ef:68:f6:6d:81:19:cd:f0:49:b9:0c:f2:1a:1a:39:
73:85:a7:ea:81:ef:ba:c5:38:41:72:ab:62:b2:dd:a4:25:3a:
84:25:d4:99:78:06:60:6c:e5:40:99:a9:66:26:65:28:81:6b:
18:49:ec:30:51:25:a2:7f:02:09:6e:85:48:99:09:0b:ab:3a:
5d:ef:0f:74:0d:74:ed:72:65:7b:8e:f2:2e:da:92:54:6c:4f:
bc:8f:15:82:0f:0e:2b:e3:8d:94:23:39:69:d9:65:a8:ec:bc:
1d:10:d7:7b:38:6f:72:c0:87:96:38:7f:e1:48:a1:d6:9a:90:
22:b2:e9:79:7d:a8:3e:ad:06:39:ea:e4:b5:56:ee:39:07:30:
ad:5e:cb:74:08:bb:75:f9:c4:5c:09:d7:eb:37:52:bf:3f:ae:
41:0d:df:ac:df:bd:3b:2c:92:ad:cc:c5:9b:1f:dd:01:1b:4a:
53:1f:0e:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYxNzUxMTAvBgNVBAUTKEVDNUVGMzM1NEU0Q0Q1MzRBQjg2MjVCOTlCNzMxMkQ2
RjRFNDhCMTUwHhcNMjYwMTI1MDMzMDM5WhcNMjYwMjAxMDMzMDM5WjAYMRYwFAYD
VQQDDA02OTc1OGU2MC1mNTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvNxkcilznbPEB59fH5108TlUedOK9X7pJuCRr5pPItqCxaLhvR2d0Zhu1aCY
4P8BYZh78Aj3MD1S9F4VObC7YQyYT8bQKt8QEOZ29/z7Yg1O6PJ5/I+GFHEPlqIm
2EBaUJW1xh5M6DvVmsOi5V8FbR/O1ItRwWanKqTBO3aX4oUenDHmqa6iJN3eE6WW
sMg4Kn9YJElcBWRFjstlT06CNA+yNHn1bq5DaxrfYvDF+wfjg73aNFej5kKx5Ud0
cy11JxNiYCs/WC+zJxf6m1HOsXQIb7aRAni5fr9Y/PU5ptE2JJ8pyledPhCGRkre
z8gceHmhVmsPszkxo30AtewKYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWMYma0
HGsaTH4P9uZ6mPxlJhk0MB8GA1UdIwQYMBaAFOxe8zVOTNU0q4YluZtzEtb05IsV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3NS8wNDYwQUExOEZC
RkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFUU3JoaVc1bTNNUzF2VGtp
eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjE3NS8wNDYwQUExOEZCRkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFU
U3JoaVc1bTNNUzF2VGtpeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJy9LF4SKyzTBmQfk/q9hhFwMpYYkpgMitQPjPGgZyY6NaZ+g7bbSF
xzWjSqApmf2AvQIZdpc8gvVbrmOCMUo3Y2/+lJtw99tp3DXvaPZtgRnN8Em5DPIa
Gjlzhafqge+6xThBcqtist2kJTqEJdSZeAZgbOVAmalmJmUogWsYSewwUSWifwIJ
boVImQkLqzpd7w90DXTtcmV7jvIu2pJUbE+8jxWCDw4r442UIzlp2WWo7LwdENd7
OG9ywIeWOH/hSKHWmpAisul5fag+rQY56uS1Vu45BzCtXst0CLt1+cRcCdfrN1K/
P65BDd+s3707LJKtzMWbH90BG0pTHw40
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:44 2026 by rpki-client