This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json)
Hash identifier: r3Pd1SF/nzsPHS/L74Xo/QFiH4p572G4C3Y348ZSx8E=
Subject key identifier: EE:69:2F:93:FF:12:58:A8:B5:79:E8:7E:01:0D:A8:DB:3C:2B:42:D9
Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1
Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
Certificate serial: 0CB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
Manifest number: 0CA2
Signing time: Sat 24 Jan 2026 18:01:47 +0000
Manifest this update: Sat 24 Jan 2026 18:01:46 +0000
Manifest next update: Sat 31 Jan 2026 18:01:46 +0000
Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: n47tEZ9CPo4JKAkkMeNL9Xpj+UvduegjAHl+1zmcnxU=)
2: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: MSG4IEJD21Lg46cXlyVsJXQNoEWSJs0ZdoCdo0HPe4k=)
3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: oiRTxf178GSVajMFJOV88czGN0g9LsEQwe3fVsmhNYs=)
4: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: I8xUhuaKZwm6lPAAKATroItwpWXb2vxsxqVz/BIgbyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl
rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3253 (0xcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
Validity
Not Before: Jan 24 18:01:46 2026 GMT
Not After : Jan 31 18:01:46 2026 GMT
Subject: CN=6975090b-4f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:a1:f7:f7:e6:31:a6:b8:51:bc:db:8b:f4:
44:87:68:48:44:56:ed:f2:05:56:1f:35:fb:bd:45:
dc:c3:2b:86:af:71:ce:7f:99:10:0a:a4:11:eb:b2:
04:fa:c4:05:a6:e8:9d:5b:f9:8f:97:cc:0d:70:f7:
86:ca:1d:01:99:f3:b3:dc:99:f1:41:a4:82:87:02:
43:6c:f6:7b:e0:a0:ff:e5:8f:99:15:bf:9f:41:68:
a0:98:d6:e4:b8:b8:c0:47:fa:42:d3:92:cb:47:7e:
76:e6:a3:07:62:75:59:05:b7:78:5d:a7:a3:7e:31:
46:29:fa:d1:b0:99:c3:78:de:30:b1:88:da:e6:38:
0a:02:13:8a:a1:d4:60:46:7d:99:64:54:f9:40:ae:
59:76:e7:2e:e0:eb:49:a5:22:33:74:b2:5d:2d:b9:
87:f2:52:eb:9c:f9:ab:37:29:3e:29:62:c2:b4:dc:
67:b6:8b:a8:78:cb:60:89:e1:f7:64:b9:0c:64:0b:
81:21:42:df:69:71:d7:3c:99:1b:ed:ca:f6:e6:16:
fa:a6:7b:17:b3:0a:0b:89:c7:2f:9b:91:97:fb:18:
b8:89:43:6a:f5:eb:13:80:9a:38:0e:56:c5:ce:d0:
ab:58:6e:cf:7e:5a:01:2c:f3:1d:6d:db:66:da:37:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:69:2F:93:FF:12:58:A8:B5:79:E8:7E:01:0D:A8:DB:3C:2B:42:D9
X509v3 Authority Key Identifier:
keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:76:41:60:7d:e0:71:35:62:4e:a9:b8:db:98:67:f6:33:77:
f5:2a:3a:0b:17:31:15:0a:d8:66:f9:85:ec:54:58:19:9c:f6:
ba:6a:5b:29:98:08:ee:26:00:5e:69:be:29:17:d7:52:c4:9c:
b9:08:60:eb:90:b5:4a:f7:69:a0:fa:b1:e2:6c:f2:23:04:96:
ac:95:fa:84:20:2e:fe:77:29:cd:2f:c1:32:ae:a2:96:53:87:
75:40:7d:00:d9:26:55:f6:2a:1c:7b:31:17:2a:13:d1:41:62:
bf:2d:d5:19:85:06:53:9b:60:24:10:dd:66:3f:92:62:0b:5c:
9a:a1:e5:12:17:7f:88:fc:83:b7:0b:c2:3f:33:bb:bd:3d:e6:
70:64:cd:11:1d:0a:61:48:1c:b8:b3:ad:90:d1:d3:69:9d:93:
1a:bf:49:1c:3a:4a:83:8b:d1:76:3b:ce:75:e0:b0:1a:32:89:
86:52:6c:42:84:69:a5:84:f1:e5:33:d6:a0:9e:e6:2d:c9:e1:
af:14:41:b5:c9:91:93:81:a7:45:fa:1a:44:dd:53:b8:0e:f4:
65:dd:62:11:c4:66:8e:d8:8e:cf:ef:49:eb:79:d9:ba:a2:dd:
00:ad:85:d3:67:15:94:fd:51:0a:e6:97:14:c9:c8:40:30:14:
6e:db:30:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG
RkI1QjczQjEwHhcNMjYwMTI0MTgwMTQ2WhcNMjYwMTMxMTgwMTQ2WjAYMRYwFAYD
VQQDDA02OTc1MDkwYi00ZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAttah9/fmMaa4Ubzbi/REh2hIRFbt8gVWHzX7vUXcwyuGr3HOf5kQCqQR67IE
+sQFpuidW/mPl8wNcPeGyh0BmfOz3JnxQaSChwJDbPZ74KD/5Y+ZFb+fQWigmNbk
uLjAR/pC05LLR3525qMHYnVZBbd4XaejfjFGKfrRsJnDeN4wsYja5jgKAhOKodRg
Rn2ZZFT5QK5Zducu4OtJpSIzdLJdLbmH8lLrnPmrNyk+KWLCtNxntouoeMtgieH3
ZLkMZAuBIULfaXHXPJkb7cr25hb6pnsXswoLiccvm5GX+xi4iUNq9esTgJo4DlbF
ztCrWG7PfloBLPMdbdtm2jf7HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5pL5P/
EliotXnofgENqNs8K0LZMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5
RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0
cFN0cElubWtMRXJfdGJjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUdkFgfeBxNWJOqbjbmGf2M3f1KjoLFzEVCthm+YXsVFgZnPa6alsp
mAjuJgBeab4pF9dSxJy5CGDrkLVK92mg+rHibPIjBJaslfqEIC7+dynNL8EyrqKW
U4d1QH0A2SZV9iocezEXKhPRQWK/LdUZhQZTm2AkEN1mP5JiC1yaoeUSF3+I/IO3
C8I/M7u9PeZwZM0RHQphSBy4s62Q0dNpnZMav0kcOkqDi9F2O8514LAaMomGUmxC
hGmlhPHlM9agnuYtyeGvFEG1yZGTgadF+hpE3VO4DvRl3WIRxGaO2I7P70nredm6
ot0ArYXTZxWU/VEK5pcUychAMBRu2zCO
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:28:47 2026 by rpki-client