This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File: 30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier: huCHtYAKBqPgDJ8DHq4RT0wkt6hQi/AozesWAZN0kLE=
Subject key identifier: CE:E6:22:A3:E7:FB:76:1E:52:E3:98:C8:10:15:61:02:E0:F1:11:05
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 70DAD56278E473B49C2308970D36578D063F9C05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number: 06E9
Signing time: Sat 24 Jan 2026 19:18:56 +0000
Manifest this update: Sat 24 Jan 2026 19:13:56 +0000
Manifest next update: Sun 25 Jan 2026 23:06:56 +0000
Files and hashes: 1: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: qktH9CmoSMi4zY7SUgxfdRgLAlOa3yTYkuOYxTloRPw=)
2: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: OFQUaZfxmar8QdwOWotCs19NcWRunbT96cEQtkG/1Oc=)
3: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: 4M3Gj7VtwtPss7dq7bEuNaNtbKXrLCHIYjSN8LGXjK0=)
4: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: /0yN++jm+p36a1RqsE4mEzoXTCQt97C3PHvZO77d9ic=)
5: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: 7xp6Qecc5/OOhL0p9AX/cfT6YnZhKTIxBQ5OCdlFvaU=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 23:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:da:d5:62:78:e4:73:b4:9c:23:08:97:0d:36:57:8d:06:3f:9c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Validity
Not Before: Jan 24 19:13:56 2026 GMT
Not After : Jan 25 23:06:56 2026 GMT
Subject: CN=CEE622A3E7FB761E52E398C810156102E0F11105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:40:77:7e:8f:d9:92:2e:e2:b5:0c:30:16:
f8:fb:e8:62:f7:e8:c7:aa:f1:fa:03:3d:60:73:dc:
f4:a6:dc:4d:51:ba:ad:60:2a:a2:d1:6a:bc:10:99:
ef:c9:64:13:ec:57:3e:8b:d0:9e:ba:fd:c1:f1:cb:
9f:61:3d:b2:e2:5b:0a:62:43:3e:c2:b8:88:c0:17:
0f:8e:4f:96:a9:55:d6:cd:ec:ed:b3:3d:37:94:42:
10:5e:fa:3a:7d:8c:a2:7b:ea:f1:8b:66:15:fc:8e:
91:b9:58:b0:0d:77:9a:6e:fa:3b:c4:f6:45:e1:97:
c1:fc:7b:27:37:cd:77:44:c2:3a:83:5e:70:29:71:
4f:79:3f:21:d8:6b:c1:ac:55:10:2e:9b:84:91:c9:
18:77:56:d6:ac:1e:68:f2:05:b4:11:92:e0:99:33:
f0:fb:81:39:91:6c:a0:e1:7d:e7:68:96:b3:db:71:
6c:af:fb:a5:1e:7a:eb:73:94:63:0a:6c:fb:44:75:
08:a7:52:73:1b:07:54:48:2b:eb:30:1b:50:61:26:
60:22:f1:63:18:f3:d5:4d:ff:37:6e:52:2a:7f:cc:
bb:40:77:15:bc:35:88:f8:13:f0:b5:78:cd:34:35:
e3:eb:fd:96:d8:26:81:fb:ec:6f:54:8b:db:2f:e0:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E6:22:A3:E7:FB:76:1E:52:E3:98:C8:10:15:61:02:E0:F1:11:05
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c5:58:62:6b:e5:9f:32:f9:69:33:8d:b2:39:b8:64:91:48:
ca:55:7d:63:8c:c8:19:ec:91:40:7c:91:22:84:30:2b:65:f8:
38:c4:c3:45:39:d6:ec:4d:1a:75:d1:bd:26:75:bd:67:70:2a:
04:1e:f1:f2:52:11:94:b9:50:df:77:3e:a5:bc:a6:1c:11:e1:
fd:67:e4:fe:44:5d:06:14:cb:6f:7d:f9:0c:8c:17:87:af:4a:
03:0a:9d:c1:24:b7:f1:c3:d7:db:6a:a4:19:1e:67:67:30:4d:
e5:2c:29:98:1c:67:27:14:13:2e:4d:76:20:05:67:76:2a:2f:
15:66:1d:c3:2e:44:05:c9:6f:ac:c1:7c:d1:1b:fd:58:cd:0f:
f6:f1:26:3e:ae:03:5d:47:27:ad:aa:e8:6d:1c:99:01:ef:d8:
80:8a:ce:c7:8c:6c:72:66:e5:76:4d:ed:0a:eb:5a:04:63:51:
5d:36:b0:da:a1:8e:5f:2f:31:bb:d2:51:69:e8:ea:c4:8d:ce:
35:66:17:22:72:fe:66:5b:e0:4b:9d:f1:4b:f3:63:ea:81:49:
60:13:c9:d5:4d:c2:bd:8e:1e:3e:10:f7:ee:ec:2a:92:1e:e2:
47:46:e8:64:43:29:13:77:97:d0:48:05:e2:b0:72:2f:15:45:
0f:d3:bf:60
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUcNrVYnjkc7ScIwiXDTZXjQY/nAUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTA1MzAwMDAwMTEwLwYDVQQFEygzMDM1NkVGNDZE
NTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwMB4XDTI2MDEyNDE5MTM1NloX
DTI2MDEyNTIzMDY1NlowMzExMC8GA1UEAxMoQ0VFNjIyQTNFN0ZCNzYxRTUyRTM5
OEM4MTAxNTYxMDJFMEYxMTEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALWlQHd+j9mSLuK1DDAW+PvoYvfox6rx+gM9YHPc9KbcTVG6rWAqotFqvBCZ
78lkE+xXPovQnrr9wfHLn2E9suJbCmJDPsK4iMAXD45PlqlV1s3s7bM9N5RCEF76
On2Monvq8YtmFfyOkblYsA13mm76O8T2ReGXwfx7JzfNd0TCOoNecClxT3k/Idhr
waxVEC6bhJHJGHdW1qweaPIFtBGS4Jkz8PuBOZFsoOF952iWs9txbK/7pR5663OU
Ywps+0R1CKdScxsHVEgr6zAbUGEmYCLxYxjz1U3/N25SKn/Mu0B3Fbw1iPgT8LV4
zTQ14+v9ltgmgfvsb1SL2y/gc6MCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTO5iKj
5/t2HlLjmMgQFWEC4PERBTAfBgNVHSMEGDAWgBQwNW70bVlNpXx2lwERg6z/4EYT
4DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMC8zMDM1NkVG
NDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NRFZ1OUcxWlRh
VjhkcGNCRVlPc18tQkdFLUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz
MDAwMDAvMC8zMDM1NkVGNDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0Uw
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAB8VYYmvlnzL5aTONsjm4ZJFIylV9Y4zIGeyRQHyRIoQwK2X4
OMTDRTnW7E0addG9JnW9Z3AqBB7x8lIRlLlQ33c+pbymHBHh/Wfk/kRdBhTLb335
DIwXh69KAwqdwSS38cPX22qkGR5nZzBN5SwpmBxnJxQTLk12IAVndiovFWYdwy5E
BclvrMF80Rv9WM0P9vEmPq4DXUcnrarobRyZAe/YgIrOx4xscmbldk3tCutaBGNR
XTaw2qGOXy8xu9JRaejqxI3ONWYXInL+ZlvgS53xS/Nj6oFJYBPJ1U3CvY4ePhD3
7uwqkh7iR0boZEMpE3eX0EgF4rByLxVFD9O/YA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:29 2026 by rpki-client