This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json)
Hash identifier: crFSfha/NSCQHJcldcxkrFRtO4H8HhK5AhvfAhIwvxM=
Subject key identifier: 3F:FE:0E:DF:68:B9:07:FF:4F:3B:60:88:98:5F:63:60:7D:6B:A2:8A
Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04
Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
Certificate serial: 0406
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
Manifest number: 0404
Signing time: Sat 24 Jan 2026 23:39:01 +0000
Manifest this update: Sat 24 Jan 2026 23:39:01 +0000
Manifest next update: Sat 31 Jan 2026 23:39:01 +0000
Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: D83XoxOfYVyO47eIZaCg1C97nnqtKYoB8S+rM7+331g=)
2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl
rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1030 (0x406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
Validity
Not Before: Jan 24 23:39:01 2026 GMT
Not After : Jan 31 23:39:01 2026 GMT
Subject: CN=69755815-a994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:62:0a:23:f3:56:bf:0f:87:88:51:97:36:
77:4e:0e:41:f2:89:5c:0a:26:f7:55:2d:55:91:18:
ea:77:3f:be:99:ac:45:6c:50:44:02:43:1f:7a:66:
a3:67:cf:27:30:d6:55:7c:81:6d:57:89:2c:72:fa:
1c:2f:ce:03:dd:e8:c1:53:5d:7b:bf:b8:58:45:67:
1b:43:de:a6:7a:c2:49:a0:dc:45:5d:87:2b:25:10:
c0:0b:ad:5b:36:3e:da:43:1e:99:e7:e1:09:0e:8d:
3c:71:c0:ba:f1:22:e3:99:5d:5b:b3:ae:ce:df:09:
1d:39:8a:aa:59:3f:51:4f:5e:11:0a:cd:b6:aa:9a:
ce:68:e2:eb:b8:6d:07:a6:1c:dd:17:a5:2f:b4:1d:
67:21:23:53:30:7b:c6:b1:9b:74:40:47:0d:46:62:
6d:b5:d4:fc:ac:6a:1a:61:0c:91:14:58:00:17:13:
0e:57:76:18:47:b3:04:37:4c:d0:7b:ac:50:4d:f8:
3a:01:db:61:10:96:80:49:ba:76:27:af:fa:15:eb:
8b:e8:99:bf:ab:df:f8:ea:d9:f8:74:63:62:60:6e:
46:ba:5c:bc:44:b4:80:29:c6:30:2e:c9:69:a7:fe:
86:c9:d5:d5:05:f2:00:35:12:ab:fe:68:bb:b8:7e:
5a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FE:0E:DF:68:B9:07:FF:4F:3B:60:88:98:5F:63:60:7D:6B:A2:8A
X509v3 Authority Key Identifier:
keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:14:6f:69:14:2a:a5:c5:03:c3:d0:d1:98:d0:56:0e:42:7b:
df:76:69:35:26:74:84:db:dd:3a:10:ec:fd:04:4e:6c:7c:53:
19:22:3e:7d:16:8a:cd:44:b3:cf:01:30:88:ac:e2:0d:6f:5a:
3c:1e:8e:44:c9:71:27:15:52:fe:b7:24:92:8c:80:b2:76:ed:
36:d3:d2:b8:30:26:93:7c:b4:a9:46:5b:de:31:84:d8:30:6b:
50:59:35:f4:11:82:f8:fb:ff:69:d3:04:e1:85:a5:05:02:95:
59:dc:fc:66:e8:dd:d4:3e:c7:7d:38:f1:af:00:1d:01:c8:52:
cb:f5:fb:c0:19:58:7f:e2:f5:d7:1c:f3:95:38:b3:2a:3a:a2:
4b:0e:bc:a4:5b:28:35:80:08:b9:55:67:13:26:36:7b:14:d7:
0c:ca:ac:8d:7c:57:c1:ac:83:16:d4:32:92:87:75:85:08:74:
2f:87:3a:53:b9:2f:68:19:d6:5d:45:63:2d:50:8a:cf:dd:7a:
3c:bc:6a:32:43:aa:8b:36:15:1b:88:32:e2:02:27:e4:62:76:
3e:d0:c9:d7:52:34:1f:2e:c0:aa:ff:f6:d4:d9:2d:43:a6:8f:
43:23:be:d7:43:9a:6d:d1:db:b7:e4:d7:2a:b9:09:8c:18:aa:
ec:45:d5:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4
N0Y1QkZFMDQwHhcNMjYwMTI0MjMzOTAxWhcNMjYwMTMxMjMzOTAxWjAYMRYwFAYD
VQQDDA02OTc1NTgxNS1hOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApwhiCiPzVr8Ph4hRlzZ3Tg5B8olcCib3VS1VkRjqdz++maxFbFBEAkMfemaj
Z88nMNZVfIFtV4kscvocL84D3ejBU117v7hYRWcbQ96mesJJoNxFXYcrJRDAC61b
Nj7aQx6Z5+EJDo08ccC68SLjmV1bs67O3wkdOYqqWT9RT14RCs22qprOaOLruG0H
phzdF6UvtB1nISNTMHvGsZt0QEcNRmJttdT8rGoaYQyRFFgAFxMOV3YYR7MEN0zQ
e6xQTfg6AdthEJaASbp2J6/6FeuL6Jm/q9/46tn4dGNiYG5Guly8RLSAKcYwLslp
p/6GydXVBfIANRKr/mi7uH5aYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/+Dt9o
uQf/TztgiJhfY2B9a6KKMB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew
MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf
Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM
QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDFFG9pFCqlxQPD0NGY0FYOQnvfdmk1JnSE2906EOz9BE5sfFMZIj59
ForNRLPPATCIrOINb1o8Ho5EyXEnFVL+tySSjICydu0209K4MCaTfLSpRlveMYTY
MGtQWTX0EYL4+/9p0wThhaUFApVZ3Pxm6N3UPsd9OPGvAB0ByFLL9fvAGVh/4vXX
HPOVOLMqOqJLDrykWyg1gAi5VWcTJjZ7FNcMyqyNfFfBrIMW1DKSh3WFCHQvhzpT
uS9oGdZdRWMtUIrP3Xo8vGoyQ6qLNhUbiDLiAifkYnY+0MnXUjQfLsCq//bU2S1D
po9DI77XQ5pt0du35NcquQmMGKrsRdXt
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:20 2026 by rpki-client