This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json)
Hash identifier: I1hhgXDYO/IUNqBcduZAflAAx5rlsGzoIQI+HlhImAg=
Subject key identifier: 1B:BF:27:ED:D5:4D:3B:40:22:27:C4:BC:B0:97:5D:16:61:52:7F:EF
Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4
Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4
Certificate serial: 01F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
Manifest number: 01E9
Signing time: Sun 25 Jan 2026 01:59:53 +0000
Manifest this update: Sun 25 Jan 2026 01:59:53 +0000
Manifest next update: Sun 01 Feb 2026 01:59:53 +0000
Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: TUpDl5KDPc9e/F/g3d08hQScckySI0lgcDUMzM3h4Bw=)
2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: 9LAHdHsawi0yR1YTlc8B3C4b8RoCwR5kxpNFMuHNGb4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl
rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4
Validity
Not Before: Jan 25 01:59:53 2026 GMT
Not After : Feb 1 01:59:53 2026 GMT
Subject: CN=69757919-fca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:ec:19:12:bd:8b:dd:1e:d1:a8:92:c9:c6:
e3:41:2e:c6:49:c1:c7:9c:f5:04:ec:30:bb:70:bd:
80:da:41:a3:9a:b6:3d:76:42:92:e8:d0:26:cd:97:
82:b7:68:3d:41:47:da:11:e6:38:4b:0a:ae:2a:8e:
59:4b:f7:e4:83:cb:5e:b7:6a:82:c9:df:a1:fe:db:
02:61:f9:ef:1a:d9:41:b8:86:42:3f:15:52:23:e4:
29:f6:92:06:53:62:ae:59:68:11:fd:6c:22:0c:e9:
c0:e7:c4:b8:2f:61:65:9d:f6:a7:00:03:76:ff:27:
21:28:6c:38:fb:30:20:7d:16:ff:a2:a4:56:a4:af:
e6:cd:f2:60:d8:89:84:1f:f7:61:4e:8a:8a:ff:56:
ec:52:5a:2f:96:e9:f9:f5:2d:a0:7a:34:43:58:c8:
06:70:3b:94:82:23:22:ef:a5:18:21:e4:58:9c:87:
de:f1:9b:28:51:2f:07:c8:a6:b1:f9:3d:ee:0f:4b:
ef:af:72:3d:9e:f6:5f:08:d3:ca:81:9e:14:ef:65:
44:a2:a2:9e:02:26:3d:64:2f:7b:3a:7a:fe:bd:1c:
9c:f8:16:03:1f:88:d1:a7:50:ee:be:63:d6:78:cf:
84:50:fb:3f:f9:2b:44:83:4b:71:ed:ac:76:cc:a9:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BF:27:ED:D5:4D:3B:40:22:27:C4:BC:B0:97:5D:16:61:52:7F:EF
X509v3 Authority Key Identifier:
keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:6a:58:02:cb:8c:b3:82:fd:71:9a:26:dc:20:f4:40:7f:32:
ed:b1:4a:2e:61:99:76:de:df:81:5a:03:80:ed:51:62:67:9f:
a6:8b:64:0e:50:8b:bb:13:c5:4e:0f:72:80:b8:ad:7a:07:82:
ff:be:94:71:47:d9:8c:d4:7a:e9:b4:f8:f8:59:53:e6:f4:dd:
59:d0:a5:5b:0a:59:fd:aa:64:96:19:6a:4a:67:ed:98:e0:2d:
e4:39:ef:76:d8:fb:a2:57:f9:66:7f:57:ba:c7:e0:95:e2:cb:
27:cd:da:26:17:ad:cb:d8:ac:c8:20:d6:a5:b8:ea:e8:1b:47:
81:90:00:e0:27:fe:9d:1d:ec:ad:81:ec:17:a5:c8:96:51:7f:
6a:ae:ac:4e:db:e2:f9:a0:62:03:54:dc:e6:f1:0a:b2:d5:d5:
45:f2:27:47:b1:80:aa:04:05:45:1c:e5:07:f0:0a:ae:e9:64:
a3:ee:d6:a0:f2:a8:be:79:97:be:34:22:35:07:39:7f:11:a3:
8c:d8:4d:ef:bb:af:27:4e:b9:1b:b3:55:cb:41:0d:b4:71:da:
13:c2:ea:41:c0:ae:7d:90:bf:36:04:69:c0:84:00:3f:5e:6b:
48:fd:ad:ec:3b:5e:32:15:73:86:1c:66:d9:65:22:81:ef:27:
50:fa:83:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC
REUzNDJCRjQwHhcNMjYwMTI1MDE1OTUzWhcNMjYwMjAxMDE1OTUzWjAYMRYwFAYD
VQQDDA02OTc1NzkxOS1mY2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJfsGRK9i90e0aiSycbjQS7GScHHnPUE7DC7cL2A2kGjmrY9dkKS6NAmzZeC
t2g9QUfaEeY4SwquKo5ZS/fkg8tet2qCyd+h/tsCYfnvGtlBuIZCPxVSI+Qp9pIG
U2KuWWgR/WwiDOnA58S4L2FlnfanAAN2/ychKGw4+zAgfRb/oqRWpK/mzfJg2ImE
H/dhToqK/1bsUlovlun59S2gejRDWMgGcDuUgiMi76UYIeRYnIfe8ZsoUS8HyKax
+T3uD0vvr3I9nvZfCNPKgZ4U72VEoqKeAiY9ZC97Onr+vRyc+BYDH4jRp1DuvmPW
eM+EUPs/+StEg0tx7ax2zKmeHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBu/J+3V
TTtAIifEvLCXXRZhUn/vMB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB
NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ
UFBVTkt1YjZNT0c5NDBLX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBoalgCy4yzgv1xmibcIPRAfzLtsUouYZl23t+BWgOA7VFiZ5+mi2QO
UIu7E8VOD3KAuK16B4L/vpRxR9mM1HrptPj4WVPm9N1Z0KVbCln9qmSWGWpKZ+2Y
4C3kOe922PuiV/lmf1e6x+CV4ssnzdomF63L2KzIINaluOroG0eBkADgJ/6dHeyt
gewXpciWUX9qrqxO2+L5oGIDVNzm8Qqy1dVF8idHsYCqBAVFHOUH8Aqu6WSj7tag
8qi+eZe+NCI1Bzl/EaOM2E3vu68nTrkbs1XLQQ20cdoTwupBwK59kL82BGnAhAA/
XmtI/a3sO14yFXOGHGbZZSKB7ydQ+oNO
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:25:49 2026 by rpki-client