This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
File: t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json)
Hash identifier: 83nvnU1URl1rfFm7kqbOs1Vya8FQS7E3Cr8mx5uKnq0=
Subject key identifier: 4B:64:42:62:B1:86:2E:DE:D3:A6:4A:75:AC:19:EA:75:3F:80:0B:8F
Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06
Certificate issuer: /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
Certificate serial: 09A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
Manifest number: 09A3
Signing time: Sat 24 Jan 2026 19:26:27 +0000
Manifest this update: Sat 24 Jan 2026 19:26:26 +0000
Manifest next update: Sat 31 Jan 2026 19:26:26 +0000
Files and hashes: 1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: C91N0CTjYOGqe2g3HYETiWljg7hVvVow/124NTHlAeY=)
2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: CHvHnzrsNRtyF0f1bsjGZNNk/7bOq09fS+B9V5tsdBI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl
rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2473 (0x9a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FED7C, serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
Validity
Not Before: Jan 24 19:26:26 2026 GMT
Not After : Jan 31 19:26:26 2026 GMT
Subject: CN=69751ce3-f609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:dd:bd:ec:17:db:31:ca:b4:10:7e:29:0f:
e6:f2:17:0b:9f:2f:bf:83:94:6e:b5:c4:dc:1a:d0:
1e:50:f4:ac:8d:b5:19:db:a5:06:11:d1:3a:29:53:
e7:3c:e5:49:e2:50:63:c5:da:8e:c6:d6:8e:c7:77:
a6:f0:09:ee:81:64:02:85:45:12:6a:e7:a1:92:44:
76:72:8e:ae:e9:bb:7e:74:df:8a:e4:79:4b:c3:cf:
49:5b:62:91:95:64:43:c9:8f:0f:56:ee:bb:d7:b8:
dd:5f:97:7d:60:fa:f1:f8:9a:93:c2:8b:d4:c1:28:
55:17:50:ff:5b:23:ec:c6:6b:00:c2:55:8d:6a:d0:
38:2e:96:2f:e8:1f:3c:2f:e2:c1:e4:cf:09:32:1a:
0c:0b:c3:64:1e:fd:86:31:72:c7:f3:a4:a0:b1:c1:
9c:58:53:9f:e5:f8:6c:b0:03:07:f2:03:23:9c:2d:
39:0d:2a:f7:a9:03:c1:5d:66:af:3f:31:b5:87:c0:
08:2b:c1:77:5f:6e:28:f1:3d:38:ec:74:ea:8b:58:
49:29:ba:a2:ba:b8:a1:1f:72:e5:75:42:4c:b0:42:
d7:9b:91:a3:92:23:ec:5e:7d:6b:46:2b:aa:4b:cf:
d1:8a:ff:b4:9a:8b:27:04:c6:d0:ec:b7:d4:f1:2e:
96:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:64:42:62:B1:86:2E:DE:D3:A6:4A:75:AC:19:EA:75:3F:80:0B:8F
X509v3 Authority Key Identifier:
keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:9b:c7:46:91:a0:0e:f6:63:a9:38:c2:71:e0:58:ed:eb:f7:
b7:5f:bc:9d:1f:c2:3e:1f:6c:52:5d:b6:25:41:12:74:3f:01:
a4:15:85:01:c4:5c:af:df:1b:cc:f0:5d:0b:b2:c8:c3:27:08:
f9:56:d0:09:cb:08:b4:29:a0:62:cb:87:eb:af:c4:41:f9:f6:
d6:c9:62:c8:c7:98:aa:a0:b9:27:a0:96:e7:f4:e5:a0:32:56:
52:6d:dc:2d:bc:56:4a:c0:65:b1:e8:9e:ee:4e:d6:c4:02:9d:
97:ad:c7:9b:64:81:16:5e:5b:b9:a1:8d:fa:1e:ff:a7:78:56:
e0:d6:48:6b:b1:ca:47:ed:fc:e6:8f:3f:b6:e4:ea:76:f8:7a:
43:87:21:42:5a:39:a3:a5:09:0c:76:36:94:57:01:82:2a:62:
21:8f:00:55:a8:77:4c:03:ea:6e:ac:5e:78:25:bd:11:b7:5b:
0d:44:9e:d3:de:6c:10:98:b1:ef:de:bf:3c:5e:c7:cb:ff:73:
ff:30:79:41:2d:2f:1d:77:e7:77:ee:17:3c:a3:c0:8f:04:f2:
f3:30:18:b6:a0:bb:cd:85:ab:de:2c:ec:ad:04:db:68:39:b0:
c3:3f:9d:1b:88:48:c4:f0:89:b7:72:70:e0:4c:7b:fb:61:22:
c8:f2:77:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVEN0MxMTAvBgNVBAUTKEI3RDNFQjYxQ0MwMjhDMzhCRkQzRjdBMjgwRjM2OTA0
Njg2NTVCMDYwHhcNMjYwMTI0MTkyNjI2WhcNMjYwMTMxMTkyNjI2WjAYMRYwFAYD
VQQDDA02OTc1MWNlMy1mNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArYPdvewX2zHKtBB+KQ/m8hcLny+/g5RutcTcGtAeUPSsjbUZ26UGEdE6KVPn
POVJ4lBjxdqOxtaOx3em8AnugWQChUUSauehkkR2co6u6bt+dN+K5HlLw89JW2KR
lWRDyY8PVu6717jdX5d9YPrx+JqTwovUwShVF1D/WyPsxmsAwlWNatA4LpYv6B88
L+LB5M8JMhoMC8NkHv2GMXLH86SgscGcWFOf5fhssAMH8gMjnC05DSr3qQPBXWav
PzG1h8AIK8F3X24o8T047HTqi1hJKbqiurihH3LldUJMsELXm5GjkiPsXn1rRiuq
S8/Riv+0mosnBMbQ7LfU8S6WBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtkQmKx
hi7e06ZKdawZ6nU/gAuPMB8GA1UdIwQYMBaAFLfT62HMAow4v9P3ooDzaQRoZVsG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUQ3Qy9GRkQzQjNGRTlG
RjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pEaV8wX2VpZ1BOcEJHaGxX
d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q5UHJZY3dDakRpXzBfZWlnUE5wQkdobFd3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUQ3Qy9GRkQzQjNGRTlGRjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pE
aV8wX2VpZ1BOcEJHaGxXd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBWm8dGkaAO9mOpOMJx4Fjt6/e3X7ydH8I+H2xSXbYlQRJ0PwGkFYUB
xFyv3xvM8F0LssjDJwj5VtAJywi0KaBiy4frr8RB+fbWyWLIx5iqoLknoJbn9OWg
MlZSbdwtvFZKwGWx6J7uTtbEAp2XrcebZIEWXlu5oY36Hv+neFbg1khrscpH7fzm
jz+25Op2+HpDhyFCWjmjpQkMdjaUVwGCKmIhjwBVqHdMA+purF54Jb0Rt1sNRJ7T
3mwQmLHv3r88XsfL/3P/MHlBLS8dd+d37hc8o8CPBPLzMBi2oLvNhaveLOytBNto
ObDDP50biEjE8Im3cnDgTHv7YSLI8nfW
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:12 2026 by rpki-client