This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
File: D429p9DJoeyhlFxhtykg9aoOlGc.mft (raw, json)
Hash identifier: 0meUmhae2X1/AVDqirtZi5dzeFlFFep2bjzHfUqQTMw=
Subject key identifier: C4:77:11:AC:75:3D:D3:75:44:8B:90:1B:5F:CD:EF:4F:63:E3:61:1F
Authority key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67
Certificate issuer: /CN=A91FAF20/serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467
Certificate serial: 1C69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
Manifest number: 1C57
Signing time: Sat 24 Jan 2026 15:59:15 +0000
Manifest this update: Sat 24 Jan 2026 15:59:15 +0000
Manifest next update: Sat 31 Jan 2026 15:59:15 +0000
Files and hashes: 1: D429p9DJoeyhlFxhtykg9aoOlGc.crl (hash: 2RLzDtlufnOGMCUKyp8bBSWIv8UrLQHQpPKlxHrIMKc=)
2: C3ACDB568E9311E9AA8A2877C4F9AE02.roa (hash: u6rekZJ0jZc3ISHqsLCTcc0e5DQkPjPm3qL6iQKKzgs=)
3: D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa (hash: 3uXMO0UCJNabKr8uzhOcc7C4VV56oSmRiKoTg6QuV1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl
rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7273 (0x1c69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAF20, serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467
Validity
Not Before: Jan 24 15:59:15 2026 GMT
Not After : Jan 31 15:59:15 2026 GMT
Subject: CN=6974ec53-9d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:9d:68:07:3d:a5:e9:80:55:bc:13:64:52:
04:d9:b6:e3:9b:fb:76:92:81:71:9b:20:28:e6:07:
1d:fe:4a:2f:13:8d:31:3a:b4:0d:aa:b7:c9:90:73:
cd:6b:c3:05:88:24:73:86:7d:f2:9d:c5:00:df:c7:
8e:b5:b6:ba:aa:60:af:1b:53:c7:7b:25:66:f5:7a:
de:bc:f4:f3:35:21:c3:48:19:da:73:e6:ab:a9:de:
95:b0:8a:6a:f7:b4:b6:a0:ab:c1:42:d4:39:d1:b5:
52:55:92:96:d3:33:5c:f0:7d:98:36:fe:ac:65:dd:
ca:23:07:1c:63:a7:f7:c0:4d:b6:f7:32:d5:13:20:
3b:0a:b4:99:d9:dc:4a:35:f8:da:6e:7e:9d:c1:85:
6f:19:85:e5:9e:42:7a:87:f0:59:12:49:d3:41:25:
7f:d1:69:4f:b9:43:e5:a3:92:3d:26:8a:c5:61:5f:
b8:6c:e3:9f:12:84:25:a6:4c:a6:4e:dd:59:b0:73:
a0:85:3b:f6:d9:50:35:53:2d:49:9c:87:d1:e2:c4:
90:4a:fc:da:55:ab:a8:0b:b4:b7:46:82:a1:8c:84:
4d:33:52:26:27:0d:36:31:20:46:83:6c:ae:b4:b9:
b5:a7:ac:ca:10:4b:3d:1f:ea:77:83:e5:51:47:00:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:77:11:AC:75:3D:D3:75:44:8B:90:1B:5F:CD:EF:4F:63:E3:61:1F
X509v3 Authority Key Identifier:
keyid:0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4e:82:6b:06:36:37:c8:7a:fd:89:85:ed:09:1d:4a:de:90:
b2:43:7b:0f:8d:f3:95:5c:71:7a:8d:01:63:1a:ba:80:61:14:
25:22:a2:49:29:95:ba:1d:81:15:99:5f:78:0d:96:c5:ea:bf:
61:a3:0d:cd:56:3d:cb:eb:4e:fd:3e:42:64:a1:b6:80:44:a1:
3c:6d:72:22:02:82:90:fa:94:db:98:ea:32:c0:71:1c:a0:b3:
15:44:78:e2:bf:be:21:a5:da:57:bd:9e:a3:5a:b3:7e:6e:0c:
c4:5f:aa:e4:2e:28:db:e1:d4:fe:3c:34:59:0b:d1:17:9d:c8:
58:0d:8b:fd:a8:c2:e3:cd:b1:39:7e:3c:2f:b3:21:4d:48:d4:
e9:34:e9:f6:c2:b4:98:8b:67:65:01:b6:11:91:87:b1:15:37:
be:75:0e:d6:1e:c0:a8:e9:f6:a8:b3:cf:6d:66:67:72:9d:28:
d0:f0:0b:04:35:a0:3a:27:3c:1c:a5:c4:a5:1c:77:6a:30:60:
ad:3d:f8:c4:18:3b:84:52:3e:d2:42:c6:8d:fd:84:01:b2:99:
51:ce:6e:75:0e:3c:b5:bc:15:14:73:d1:52:2a:e2:0f:62:80:
45:ef:fb:27:03:e8:cd:75:8d:9b:2c:45:bc:6c:ec:5e:54:cc:
76:3e:f9:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFGMjAxMTAvBgNVBAUTKDBGOERCREE3RDBDOUExRUNBMTk0NUM2MUI3MjkyMEY1
QUEwRTk0NjcwHhcNMjYwMTI0MTU1OTE1WhcNMjYwMTMxMTU1OTE1WjAYMRYwFAYD
VQQDDA02OTc0ZWM1My05ZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtEudaAc9pemAVbwTZFIE2bbjm/t2koFxmyAo5gcd/kovE40xOrQNqrfJkHPN
a8MFiCRzhn3yncUA38eOtba6qmCvG1PHeyVm9XrevPTzNSHDSBnac+arqd6VsIpq
97S2oKvBQtQ50bVSVZKW0zNc8H2YNv6sZd3KIwccY6f3wE229zLVEyA7CrSZ2dxK
Nfjabn6dwYVvGYXlnkJ6h/BZEknTQSV/0WlPuUPlo5I9JorFYV+4bOOfEoQlpkym
Tt1ZsHOghTv22VA1Uy1JnIfR4sSQSvzaVauoC7S3RoKhjIRNM1ImJw02MSBGg2yu
tLm1p6zKEEs9H+p3g+VRRwDIBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMR3Eax1
PdN1RIuQG1/N709j42EfMB8GA1UdIwQYMBaAFA+NvafQyaHsoZRcYbcpIPWqDpRn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUYyMC82NUE5QTI0MkY1
QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9leWhsRnhodHlrZzlhb09s
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q0MjlwOURKb2V5aGxGeGh0eWtnOWFvT2xHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUYyMC82NUE5QTI0MkY1QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9l
eWhsRnhodHlrZzlhb09sR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfToJrBjY3yHr9iYXtCR1K3pCyQ3sPjfOVXHF6jQFjGrqAYRQlIqJJ
KZW6HYEVmV94DZbF6r9how3NVj3L6079PkJkobaARKE8bXIiAoKQ+pTbmOoywHEc
oLMVRHjiv74hpdpXvZ6jWrN+bgzEX6rkLijb4dT+PDRZC9EXnchYDYv9qMLjzbE5
fjwvsyFNSNTpNOn2wrSYi2dlAbYRkYexFTe+dQ7WHsCo6faos89tZmdynSjQ8AsE
NaA6JzwcpcSlHHdqMGCtPfjEGDuEUj7SQsaN/YQBsplRzm51Djy1vBUUc9FSKuIP
YoBF7/snA+jNdY2bLEW8bOxeVMx2Pvlu
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:56:35 2026 by rpki-client