This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
File: VmpvNEQKySle2KAC1QSfV0zxbIg.mft (raw, json)
Hash identifier: TRGC4oEK8nL1plIrrP/j6N0fe+u/GobyUaxEAbuY+9Y=
Subject key identifier: 38:45:F0:09:A3:03:F6:55:3F:EF:68:29:3E:B6:1D:E4:E6:85:13:0F
Authority key identifier: 56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88
Certificate issuer: /CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88
Certificate serial: 0205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
Manifest number: 01FF
Signing time: Sun 25 Jan 2026 01:47:54 +0000
Manifest this update: Sun 25 Jan 2026 01:47:54 +0000
Manifest next update: Sun 01 Feb 2026 01:47:54 +0000
Files and hashes: 1: VmpvNEQKySle2KAC1QSfV0zxbIg.crl (hash: piI9rxs/UQyWbGdXlRR8R8Kfgd3DT+cBYqbLWWeJJZ4=)
2: FFCE072E2B8111EE9BDEC079C4F9AE02.roa (hash: NxTIAEmzVEkhnPtaZCQQUJAnARHilUKNCFgj1AKD+gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl
rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA64C, serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88
Validity
Not Before: Jan 25 01:47:54 2026 GMT
Not After : Feb 1 01:47:54 2026 GMT
Subject: CN=6975764a-89e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:a7:b8:9d:9f:12:da:c8:31:37:16:fe:cb:
9c:62:41:1f:15:a0:ad:ae:dd:63:73:97:2d:a5:c9:
27:f5:66:cb:75:b4:5a:f2:1a:ad:58:85:04:f5:95:
52:5c:5e:74:b3:76:85:e8:fa:1f:17:6d:a3:e7:27:
93:de:c3:9d:92:ed:ae:9f:a1:99:13:d0:4d:c4:85:
4a:18:de:e6:80:c5:ed:df:f7:ac:ad:ec:aa:d4:9f:
73:48:56:a9:fe:c5:27:9d:8a:2f:6e:78:4d:45:02:
2c:f8:75:ee:fc:c0:a1:b0:74:eb:39:cb:0b:d9:49:
a1:76:31:4c:1b:88:71:f9:50:6e:64:58:9a:a1:0e:
d5:69:a8:8f:de:a7:41:12:2e:f1:c8:e4:4a:b1:23:
55:b2:aa:7d:28:22:42:99:a5:e2:d6:86:43:60:f8:
f0:b0:ba:76:cf:fe:3c:75:14:4e:39:e7:9a:e3:b8:
fb:46:a8:0d:b3:7a:74:42:b8:35:aa:28:31:7c:bf:
b8:e1:6d:63:d1:93:b8:b0:10:17:ca:72:76:2b:ea:
cb:e1:7b:ff:af:41:83:42:df:ef:79:a8:85:e0:4d:
0d:9c:99:3a:25:02:5e:53:b6:82:fd:fa:ce:70:10:
9a:75:14:6b:71:60:5b:b2:10:a8:20:e9:dd:cb:b0:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:45:F0:09:A3:03:F6:55:3F:EF:68:29:3E:B6:1D:E4:E6:85:13:0F
X509v3 Authority Key Identifier:
keyid:56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:c6:4a:70:cc:33:60:27:b8:cc:2d:de:23:0f:78:ad:ff:54:
35:ae:9a:bc:26:92:c4:02:5a:4e:93:f2:95:f0:26:d8:f1:11:
7b:3a:a5:5e:7f:cf:e9:5d:e1:06:d4:a2:f9:67:d4:3e:94:9e:
0e:d4:51:77:e3:07:c2:42:41:14:88:da:a8:1b:0f:04:17:5c:
e0:61:ec:fb:67:95:e6:4e:cd:c0:5d:5b:f1:d6:8f:57:14:b3:
a1:c5:16:58:72:1c:24:8c:d0:de:cd:73:cd:2c:c0:59:a6:c1:
d3:c5:fd:aa:7d:f0:df:cf:a6:f9:84:88:93:53:bd:b2:7d:fc:
64:7f:a3:a2:57:e5:89:b7:4b:1e:c3:71:d2:21:df:e5:31:61:
62:87:9a:21:d2:4f:81:40:dd:02:99:5a:5d:92:55:63:1f:c5:
49:3f:85:de:01:2a:3e:04:c5:db:05:7c:99:8a:ec:89:05:63:
d2:89:e8:4f:33:a6:8d:61:88:29:1d:d2:d7:90:4d:f7:00:42:
ea:a3:fd:47:4b:5f:49:57:25:9b:55:6f:13:80:2f:65:f9:52:
6c:87:6b:48:f5:c3:13:a3:e1:56:84:4d:82:82:90:89:26:ac:
cd:2b:f3:90:10:1b:f8:0a:d8:b7:51:22:02:16:2e:6e:26:ed:
d0:91:a0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:58:14 2026 by rpki-client