This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json)
Hash identifier: MdzlkmoYNMpaAZcJhhyzePgKtyVaaHAu15dv5QQd7Kc=
Subject key identifier: 01:D0:F6:77:3A:A5:F9:65:E3:8F:25:F3:A6:5A:53:38:BE:16:A0:59
Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Certificate serial: 1E39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
Manifest number: 1E14
Signing time: Sat 24 Jan 2026 15:54:15 +0000
Manifest this update: Sat 24 Jan 2026 15:54:15 +0000
Manifest next update: Sat 31 Jan 2026 15:54:15 +0000
Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: b90K9Iqw0GBGSxOxRU/kGyQSApFqL7uzG7QthYyeOjQ=)
2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: akkWYjfaWEhqYJZrRKjxCpGXnYxAkiIziyHvD0Tsd7w=)
3: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 7TEbSw3PqWXAumkD/6WCBubmNiQ54mZObTiNmT20Qfk=)
4: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: b0wxpwf8/vaYEOZtGJIbQgPEprx6ejeXyxzSbeJ8WVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7737 (0x1e39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Validity
Not Before: Jan 24 15:54:15 2026 GMT
Not After : Jan 31 15:54:15 2026 GMT
Subject: CN=6974eb27-9f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:f5:54:b5:8b:52:ae:90:7a:ff:dd:63:d9:
10:27:de:d5:34:1d:64:39:69:30:a3:09:e7:d7:7b:
46:20:ba:18:68:85:73:19:9f:26:d7:3c:d1:b3:6e:
5d:3a:17:e5:2e:7a:4c:4a:51:09:73:b2:e1:11:15:
81:65:b9:ef:ce:31:e1:24:0a:89:50:fd:37:38:37:
8f:ae:89:77:ea:c7:41:a1:70:5c:d9:23:84:4d:93:
ab:bb:d2:08:3a:2a:41:ec:f3:7f:6a:07:73:17:a2:
97:63:fd:3e:39:ca:50:da:ca:b1:34:d5:ba:50:30:
2a:c0:92:b3:b7:64:ea:85:c4:ff:5f:32:79:b3:f1:
98:61:22:72:0b:97:ad:c0:d4:a8:8d:be:f1:c4:cd:
cc:34:62:4f:9b:51:7b:b0:2a:00:8a:0b:cd:9c:5b:
a2:9b:f0:f9:61:41:17:21:9f:89:6e:e3:0d:11:39:
c2:fe:a8:82:c0:66:73:32:13:d9:b7:4a:33:3e:3b:
7f:c0:b8:dd:0a:98:26:54:fd:67:68:25:1d:55:1d:
cb:86:5e:fa:7b:f3:ce:9b:3c:3e:65:0f:9b:8f:28:
60:39:da:1d:67:15:6d:09:be:89:60:84:0a:bb:d1:
e7:72:31:5a:db:2b:73:76:c5:b6:36:06:16:74:b2:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D0:F6:77:3A:A5:F9:65:E3:8F:25:F3:A6:5A:53:38:BE:16:A0:59
X509v3 Authority Key Identifier:
keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:ce:a2:a3:be:a5:f3:94:c0:b9:fb:42:ab:0e:61:03:59:8d:
5f:a1:46:2b:a1:16:7d:4a:fe:e9:25:f5:35:f9:9d:f1:82:f7:
41:b0:b3:f2:7a:67:53:2d:71:03:fe:c5:e3:64:dc:b5:b7:a6:
4a:06:3a:16:3e:ac:b4:58:24:35:9f:a1:34:e9:41:47:ac:95:
22:5e:19:45:a5:60:a4:4c:86:51:28:91:97:d7:49:df:a1:0b:
bb:f7:d0:e9:04:f3:4b:9c:37:a8:79:0f:73:bf:db:19:d9:43:
93:2c:d2:55:03:5f:a2:e0:2c:6e:a3:f4:43:4a:b7:1c:a0:e2:
02:ea:af:2a:ee:b3:4a:d7:cd:6d:fc:d1:45:ce:06:69:d2:e0:
af:0f:d5:ec:55:75:61:ed:cc:cd:08:13:2a:5a:3f:75:69:35:
0a:20:1f:37:1c:d4:13:0a:85:d6:ea:cc:8d:f3:01:0d:c3:48:
90:f6:c2:52:15:88:40:82:d9:46:a6:a6:b2:f3:4c:2a:9e:90:
2d:43:a9:72:d2:81:02:0c:5f:ed:c3:3b:15:85:59:f2:e3:56:
d8:5a:18:f4:e2:77:8a:93:03:e7:a4:d4:e3:fe:38:ed:01:f0:
50:ba:5d:68:82:2b:20:f3:93:0e:e9:d1:96:94:d9:46:09:f7:
dc:51:ed:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy
RDM4OTY4NDgwHhcNMjYwMTI0MTU1NDE1WhcNMjYwMTMxMTU1NDE1WjAYMRYwFAYD
VQQDDA02OTc0ZWIyNy05ZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuef1VLWLUq6Qev/dY9kQJ97VNB1kOWkwownn13tGILoYaIVzGZ8m1zzRs25d
OhflLnpMSlEJc7LhERWBZbnvzjHhJAqJUP03ODeProl36sdBoXBc2SOETZOru9II
OipB7PN/agdzF6KXY/0+OcpQ2sqxNNW6UDAqwJKzt2TqhcT/XzJ5s/GYYSJyC5et
wNSojb7xxM3MNGJPm1F7sCoAigvNnFuim/D5YUEXIZ+JbuMNETnC/qiCwGZzMhPZ
t0ozPjt/wLjdCpgmVP1naCUdVR3Lhl76e/POmzw+ZQ+bjyhgOdodZxVtCb6JYIQK
u9HncjFa2ytzdsW2NgYWdLI06QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHQ9nc6
pfll448l86ZaUzi+FqBZMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy
NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN
MnhEM2hOX3hYUUl0T0phRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCDzqKjvqXzlMC5+0KrDmEDWY1foUYroRZ9Sv7pJfU1+Z3xgvdBsLPy
emdTLXED/sXjZNy1t6ZKBjoWPqy0WCQ1n6E06UFHrJUiXhlFpWCkTIZRKJGX10nf
oQu799DpBPNLnDeoeQ9zv9sZ2UOTLNJVA1+i4Cxuo/RDSrccoOIC6q8q7rNK181t
/NFFzgZp0uCvD9XsVXVh7czNCBMqWj91aTUKIB83HNQTCoXW6syN8wENw0iQ9sJS
FYhAgtlGpqay80wqnpAtQ6ly0oECDF/twzsVhVny41bYWhj04neKkwPnpNTj/jjt
AfBQul1ogisg85MO6dGWlNlGCffcUe39
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:10 2026 by rpki-client