This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json)
Hash identifier: yP1mhJewQU37us329fbG6LCrxEeXa53J5ov263bzcmI=
Subject key identifier: 44:73:DC:96:94:12:07:E6:F7:9D:8C:D5:46:B2:7D:42:85:85:5F:0F
Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Certificate serial: 04F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
Manifest number: 04D9
Signing time: Sat 24 Jan 2026 23:04:23 +0000
Manifest this update: Sat 24 Jan 2026 23:04:22 +0000
Manifest next update: Sat 31 Jan 2026 23:04:22 +0000
Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: fEO+M9ZatJ8zR/G59/yy/Zmr1EUfsv5og2ik6LUyHBo=)
2: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: 03xQSZXfxDyCzRtWljLHUlOT109SCX3SLMxm27msFJQ=)
3: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: OKD6dIXNlufXP/2KtQACOYy/fSTRLoZuLrkJHHyBmPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1270 (0x4f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Validity
Not Before: Jan 24 23:04:22 2026 GMT
Not After : Jan 31 23:04:22 2026 GMT
Subject: CN=69754ff6-f514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:ad:f7:e0:47:cb:66:e6:4c:70:ba:03:f5:
5b:83:ff:2c:33:3e:d2:20:ba:7d:f8:89:cf:16:7b:
1c:0b:11:fd:b7:9b:52:52:34:b1:44:e8:f2:6c:5f:
ab:4a:dd:6a:93:0c:08:5f:a3:f8:7f:2a:e4:7c:69:
1a:eb:2f:d7:a0:ca:34:cd:59:40:4b:3f:6d:3e:48:
c7:c2:9e:15:18:d2:ac:c1:dd:34:fa:55:7f:28:a3:
b0:c9:4d:d8:78:69:0b:26:6f:6c:6c:5d:2d:c7:53:
c0:2d:e3:aa:f4:11:09:53:20:94:23:c8:97:0c:a4:
66:c7:d4:82:43:78:11:99:73:3d:94:b6:fa:04:3b:
19:ea:5f:2b:d9:c6:a2:44:33:8a:4f:6b:c9:5e:58:
e3:3f:42:74:fb:90:36:ee:b9:10:2d:a3:50:7c:81:
d2:c8:33:67:16:a1:4a:79:03:a9:8e:43:2d:41:ee:
ee:2d:0d:df:dd:0e:22:cb:8f:ae:0b:f8:4b:96:8d:
65:e4:73:de:31:20:8e:4a:de:df:b4:a2:1b:fb:16:
95:67:bf:70:b0:12:8a:44:79:18:f8:87:0f:34:c0:
e9:2a:7a:94:90:93:94:33:d3:ff:ee:57:4f:f0:0b:
05:68:b1:7f:6d:21:e7:21:aa:ca:55:7d:90:7e:ef:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:DC:96:94:12:07:E6:F7:9D:8C:D5:46:B2:7D:42:85:85:5F:0F
X509v3 Authority Key Identifier:
keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:53:9d:a5:fc:41:4d:89:7a:cd:72:45:72:48:ca:5c:9b:aa:
80:a6:b8:b7:84:96:fa:96:83:88:1b:11:c6:28:93:37:14:dd:
e9:32:c4:e9:a2:9d:a2:be:a8:24:f6:0b:e5:77:62:c0:e9:6b:
4a:3e:05:bd:54:67:9a:65:7e:30:ae:70:9a:7b:66:ef:4b:dd:
e7:ec:01:80:0e:6b:5c:cc:11:74:36:c0:59:15:e4:44:a1:a1:
92:9b:b0:b3:c2:1b:8f:e2:ce:de:b6:45:11:a5:85:ec:a5:9c:
94:bb:cd:4c:83:6e:39:34:9c:96:ed:de:c5:d8:29:d7:ed:a4:
87:b3:81:30:93:e0:9c:cf:37:9f:24:a5:fc:98:d8:e3:b8:3b:
85:f2:56:1d:c6:98:bc:b7:ff:5e:d9:99:91:c8:fe:e2:2a:15:
18:b9:6b:c2:43:6e:08:7a:0c:10:40:fb:12:06:79:45:90:75:
d0:98:09:f2:63:e3:ce:8c:eb:37:31:14:a7:25:4c:17:05:e2:
04:3e:71:a1:d4:47:3f:9c:0d:d9:0b:b5:e2:f5:06:f9:b2:e4:
21:96:0c:d6:81:41:72:30:fc:c5:65:26:8e:ca:25:9b:70:d5:
71:47:19:e5:e1:8c:aa:2b:b7:23:88:10:a0:95:aa:c2:d5:2d:
bd:0e:3f:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy
RTBGMzUxNjAwHhcNMjYwMTI0MjMwNDIyWhcNMjYwMTMxMjMwNDIyWjAYMRYwFAYD
VQQDDA02OTc1NGZmNi1mNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvgmt9+BHy2bmTHC6A/Vbg/8sMz7SILp9+InPFnscCxH9t5tSUjSxROjybF+r
St1qkwwIX6P4fyrkfGka6y/XoMo0zVlASz9tPkjHwp4VGNKswd00+lV/KKOwyU3Y
eGkLJm9sbF0tx1PALeOq9BEJUyCUI8iXDKRmx9SCQ3gRmXM9lLb6BDsZ6l8r2cai
RDOKT2vJXljjP0J0+5A27rkQLaNQfIHSyDNnFqFKeQOpjkMtQe7uLQ3f3Q4iy4+u
C/hLlo1l5HPeMSCOSt7ftKIb+xaVZ79wsBKKRHkY+IcPNMDpKnqUkJOUM9P/7ldP
8AsFaLF/bSHnIarKVX2Qfu8biQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERz3JaU
Egfm952M1UayfUKFhV8PMB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2
NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5
VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXU52l/EFNiXrNckVySMpcm6qApri3hJb6loOIGxHGKJM3FN3pMsTp
op2ivqgk9gvld2LA6WtKPgW9VGeaZX4wrnCae2bvS93n7AGADmtczBF0NsBZFeRE
oaGSm7CzwhuP4s7etkURpYXspZyUu81Mg245NJyW7d7F2CnX7aSHs4Ewk+Cczzef
JKX8mNjjuDuF8lYdxpi8t/9e2ZmRyP7iKhUYuWvCQ24IegwQQPsSBnlFkHXQmAny
Y+POjOs3MRSnJUwXBeIEPnGh1Ec/nA3ZC7Xi9Qb5suQhlgzWgUFyMPzFZSaOyiWb
cNVxRxnl4YyqK7cjiBCglarC1S29Dj9S
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:17 2026 by rpki-client