This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
File: 53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json)
Hash identifier: xZChi+4k0Fu67/kUGyZoUlQZmyJ5ty8Dmv68iMlzfiw=
Subject key identifier: FB:41:1F:EA:2C:68:2D:EA:50:2F:60:8D:D5:92:6A:A1:0D:5A:92:AD
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Certificate issuer: /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
Manifest number: 01FA
Signing time: Sun 25 Jan 2026 01:45:42 +0000
Manifest this update: Sun 25 Jan 2026 01:45:42 +0000
Manifest next update: Sun 01 Feb 2026 01:45:42 +0000
Files and hashes: 1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: wkR7WDLd+101wNsQHCeIcLyfVVFnuYr8ByjXNB5Ee3s=)
2: F3210638F06D11ED9055A212C4F9AE02.roa (hash: MagQfzBe5yekFsZC62iyjicRBCCYPyKf7/pA5fRZ3FI=)
3: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: WtNf5u0VPKCbZuWxho7o4y46h8TygPH5bunfDKzrwyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Validity
Not Before: Jan 25 01:45:42 2026 GMT
Not After : Feb 1 01:45:42 2026 GMT
Subject: CN=697575c6-91a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:bf:28:ca:cc:91:55:30:8c:cc:16:6d:a1:
62:fa:b4:e9:37:da:e1:1d:01:40:9f:1d:72:83:30:
98:2c:c6:02:09:82:a1:7c:88:bf:e8:40:85:0e:05:
43:c2:4b:71:48:e8:db:c3:2a:07:1b:6f:7e:e4:b8:
9f:39:29:d7:13:c3:65:62:29:2e:b8:42:19:7a:01:
21:47:14:c8:88:3b:ad:63:cf:be:4b:8d:c2:7e:2e:
bf:6f:6d:b3:d9:c8:31:1b:27:e5:15:79:22:66:a2:
43:d3:7e:f6:8c:ea:68:89:61:56:d4:a6:62:23:87:
81:bc:4b:bc:ff:22:b2:4d:42:ab:7a:e3:06:89:c2:
2c:c2:29:d8:82:e2:bc:71:25:72:2f:bd:f5:a6:6a:
ef:96:3b:68:22:5f:40:66:59:a0:34:db:7b:80:fe:
25:b0:44:1e:2d:0c:5b:4b:79:92:e6:61:2a:59:a6:
0f:77:7b:ca:e1:c0:0a:ba:a6:40:d8:51:ea:c5:e5:
3e:fd:21:1b:09:d8:13:f7:4d:7d:c7:69:b2:cb:b5:
01:b4:64:35:95:55:b1:bf:10:70:06:27:32:93:ea:
11:63:c0:00:66:4a:96:e6:e7:29:92:b4:ab:d5:f1:
a2:76:18:19:0e:be:00:27:5d:d3:e9:4a:4e:7d:97:
67:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:41:1F:EA:2C:68:2D:EA:50:2F:60:8D:D5:92:6A:A1:0D:5A:92:AD
X509v3 Authority Key Identifier:
keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:28:38:9a:76:b1:c7:87:ec:9d:6c:f7:2f:4f:e1:d7:a0:d0:
4b:a7:be:78:62:f9:79:f3:f0:8e:fe:91:e6:a8:53:a8:e3:6d:
c1:e0:a9:58:b1:1b:42:fb:f3:aa:9a:b9:46:3e:49:65:a5:7e:
55:12:3d:4a:65:3c:6b:53:bf:4d:24:c9:1a:a1:2c:64:f8:45:
dc:68:57:b3:88:13:a4:11:b9:38:a5:07:3e:a2:09:64:74:15:
51:74:33:f4:6d:e7:20:2a:ef:16:90:c5:b6:af:e1:71:a6:b7:
9f:7d:32:99:21:05:70:2c:92:75:5f:ab:8c:26:8b:93:b9:30:
4c:86:83:7e:5a:fe:14:92:f6:4c:7e:fb:63:40:d7:07:07:33:
19:0b:89:40:ef:b4:58:b6:0a:9f:5f:e4:69:90:65:2f:8a:45:
e4:8b:f5:a1:6e:dc:93:d3:cd:8b:82:10:bd:94:7d:5b:96:0f:
08:c5:0e:2e:16:1c:d1:da:03:75:cb:8e:db:56:59:97:55:e6:
ac:2a:e2:b3:57:a4:4b:10:34:66:f5:ec:0b:b9:a7:9b:0b:81:
51:80:75:1d:31:38:66:18:94:6a:50:0e:b3:2b:f1:38:48:7c:
9d:0b:e6:64:cd:19:11:99:6f:a1:9b:36:5c:10:3f:a3:4e:04:
f8:1a:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:16:44 2026 by rpki-client