This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C85E837A439911ED839D720EC4F9AE02/rehZrZQNGhc_pkzXBYZ9SH5nNog.mft
File: rehZrZQNGhc_pkzXBYZ9SH5nNog.mft (raw, json)
Hash identifier: tIL6Gxne3kQLev0Y1OigCzJiQSLQSegWdQpoCvGDM6Q=
Subject key identifier: AB:5D:01:E1:9D:0C:3B:90:4B:97:92:6E:A7:92:3B:1C:69:4E:3D:A4
Authority key identifier: AD:E8:59:AD:94:0D:1A:17:3F:A6:4C:D7:05:86:7D:48:7E:67:36:88
Certificate issuer: /CN=A91FDAD4/serialNumber=ADE859AD940D1A173FA64CD705867D487E673688
Certificate serial: 0272
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rehZrZQNGhc_pkzXBYZ9SH5nNog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C85E837A439911ED839D720EC4F9AE02/rehZrZQNGhc_pkzXBYZ9SH5nNog.mft
Manifest number: 026D
Signing time: Sat 24 Jan 2026 23:18:24 +0000
Manifest this update: Sat 24 Jan 2026 23:18:24 +0000
Manifest next update: Sat 31 Jan 2026 23:18:24 +0000
Files and hashes: 1: rehZrZQNGhc_pkzXBYZ9SH5nNog.crl (hash: WHyAOADpQJNmXLQ88jLrfAVAq3c51fBa7IeSg+ErW74=)
2: A99BC9D64CAC11EDA3BF485AC4F9AE02.roa (hash: M0LQ0bOgsXho1IONj8CXX3n4kpo/nKJprHxKVrxONpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C85E837A439911ED839D720EC4F9AE02/rehZrZQNGhc_pkzXBYZ9SH5nNog.crl
rsync://rpki.apnic.net/member_repository/A91FDAD4/C85E837A439911ED839D720EC4F9AE02/rehZrZQNGhc_pkzXBYZ9SH5nNog.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rehZrZQNGhc_pkzXBYZ9SH5nNog.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 626 (0x272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDAD4, serialNumber=ADE859AD940D1A173FA64CD705867D487E673688
Validity
Not Before: Jan 24 23:18:24 2026 GMT
Not After : Jan 31 23:18:24 2026 GMT
Subject: CN=69755340-56f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:cb:33:6e:b9:49:76:87:63:58:03:8a:07:
29:8a:ea:cf:d4:06:36:d3:41:73:47:9f:ab:25:0e:
ab:8a:83:7f:8a:df:5b:6b:06:9e:89:66:42:fc:40:
91:97:eb:69:ed:15:69:f2:10:ec:37:2d:8c:26:7b:
c8:22:e1:cd:96:17:b7:fe:54:4a:8c:ba:6e:c2:bf:
2d:9b:14:db:43:e8:3a:3e:d4:fb:ba:5e:1f:77:2a:
2a:2f:d3:df:00:d5:ef:ad:1b:e1:3b:fa:86:ee:09:
1a:22:f5:8f:17:73:80:4a:f4:d7:94:36:22:0b:bc:
fc:21:62:18:03:b8:f8:96:78:d0:ec:71:20:7a:86:
fd:8d:08:fe:28:60:d1:49:5f:2b:bf:74:37:de:8f:
f9:0d:1b:b3:5a:cc:87:62:e3:65:7e:1e:60:53:fa:
d1:b1:a6:d3:b4:42:1b:d6:b5:f4:bd:6c:99:2c:49:
41:7f:a1:1e:b5:34:2f:67:89:2d:de:3a:c2:da:af:
e2:ac:7d:57:48:06:95:a6:49:7a:2a:e5:23:5a:f2:
01:35:2e:31:a7:54:8e:a3:e9:7f:75:ca:26:0c:d5:
4d:6b:24:41:b3:d6:dd:95:69:78:ce:6d:03:2e:5a:
da:07:f2:2f:37:02:9a:e8:c1:4e:79:4e:19:26:ee:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5D:01:E1:9D:0C:3B:90:4B:97:92:6E:A7:92:3B:1C:69:4E:3D:A4
X509v3 Authority Key Identifier:
keyid:AD:E8:59:AD:94:0D:1A:17:3F:A6:4C:D7:05:86:7D:48:7E:67:36:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C85E837A439911ED839D720EC4F9AE02/rehZrZQNGhc_pkzXBYZ9SH5nNog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rehZrZQNGhc_pkzXBYZ9SH5nNog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C85E837A439911ED839D720EC4F9AE02/rehZrZQNGhc_pkzXBYZ9SH5nNog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:03:58:1e:5f:c1:a3:00:c2:f9:12:8f:e8:24:0c:a3:13:0b:
05:7c:6a:6b:43:54:a4:b3:e5:67:76:5f:a6:04:70:a4:cb:39:
4c:db:bc:44:9e:c2:94:8c:be:fd:7c:d4:94:9e:1d:0f:92:ee:
6e:74:f2:44:aa:6b:b9:b8:e3:45:b9:91:f1:c5:76:32:fb:80:
4e:c6:1f:3f:03:ec:61:10:dc:dc:71:62:a5:6d:69:cd:24:cc:
f6:d7:61:0a:1b:cc:17:1c:d4:3d:a5:04:b8:83:72:96:08:8b:
95:ca:10:41:e5:54:cc:e6:7c:3f:a2:96:82:b0:30:8f:6d:4e:
1d:92:bf:48:4b:26:16:1f:69:f0:60:50:71:1c:a6:be:b3:e6:
8d:a2:8a:d8:f0:e9:89:83:b0:12:1a:f3:e2:f7:8c:16:2b:ba:
32:20:11:17:78:38:ac:a0:e9:98:90:31:b3:58:24:88:9a:4b:
71:05:d8:4b:9d:f2:28:da:4e:ed:59:b0:72:16:a4:5d:09:64:
38:97:63:de:02:de:8e:80:54:d9:88:36:2d:7e:51:22:7c:09:
70:a5:9b:5b:1a:38:5b:9d:29:64:17:00:29:01:fd:ba:42:16:
3c:ab:44:8b:e3:be:84:ba:cf:75:81:75:3e:79:d5:5a:ad:3c:
a2:62:f3:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRBRDQxMTAvBgNVBAUTKEFERTg1OUFEOTQwRDFBMTczRkE2NENENzA1ODY3RDQ4
N0U2NzM2ODgwHhcNMjYwMTI0MjMxODI0WhcNMjYwMTMxMjMxODI0WjAYMRYwFAYD
VQQDDA02OTc1NTM0MC01NmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnr7LM265SXaHY1gDigcpiurP1AY200FzR5+rJQ6rioN/it9bawaeiWZC/ECR
l+tp7RVp8hDsNy2MJnvIIuHNlhe3/lRKjLpuwr8tmxTbQ+g6PtT7ul4fdyoqL9Pf
ANXvrRvhO/qG7gkaIvWPF3OASvTXlDYiC7z8IWIYA7j4lnjQ7HEgeob9jQj+KGDR
SV8rv3Q33o/5DRuzWsyHYuNlfh5gU/rRsabTtEIb1rX0vWyZLElBf6EetTQvZ4kt
3jrC2q/irH1XSAaVpkl6KuUjWvIBNS4xp1SOo+l/dcomDNVNayRBs9bdlWl4zm0D
LlraB/IvNwKa6MFOeU4ZJu4HbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtdAeGd
DDuQS5eSbqeSOxxpTj2kMB8GA1UdIwQYMBaAFK3oWa2UDRoXP6ZM1wWGfUh+ZzaI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DODVFODM3QTQz
OTkxMUVEODM5RDcyMEVDNEY5QUUwMi9yZWhaclpRTkdoY19wa3pYQllaOVNINW5O
b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3JlaFpyWlFOR2hjX3BrelhCWVo5U0g1bk5vZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REFENC9DODVFODM3QTQzOTkxMUVEODM5RDcyMEVDNEY5QUUwMi9yZWhaclpRTkdo
Y19wa3pYQllaOVNINW5Ob2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxA1geX8GjAML5Eo/oJAyjEwsFfGprQ1Sks+Vndl+mBHCkyzlM27xE
nsKUjL79fNSUnh0Pku5udPJEqmu5uONFuZHxxXYy+4BOxh8/A+xhENzccWKlbWnN
JMz212EKG8wXHNQ9pQS4g3KWCIuVyhBB5VTM5nw/opaCsDCPbU4dkr9ISyYWH2nw
YFBxHKa+s+aNoorY8OmJg7ASGvPi94wWK7oyIBEXeDisoOmYkDGzWCSImktxBdhL
nfIo2k7tWbByFqRdCWQ4l2PeAt6OgFTZiDYtflEifAlwpZtbGjhbnSlkFwApAf26
QhY8q0SL476Eus91gXU+edVarTyiYvMb
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:28:09 2026 by rpki-client