This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json)
Hash identifier: kveOV5UwHJYSwIJU8d96gOT3jcUEUqZQuNUcYdUVghM=
Subject key identifier: 2A:01:C7:73:31:BF:EA:FD:14:62:29:4F:9B:7F:E5:0B:5B:83:5B:16
Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14
Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514
Certificate serial: 03B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
Manifest number: 03AF
Signing time: Tue 03 Feb 2026 00:10:16 +0000
Manifest this update: Tue 03 Feb 2026 00:10:16 +0000
Manifest next update: Tue 10 Feb 2026 00:10:16 +0000
Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: ns1urz5AdD8oC3uIrmAaE58k+gNloMf0fZYoFdgl0Jo=)
2: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: 2bcV6GxsWp02/25GPOOyDI2TUUeSbqzzvJgPU+rv3Lc=)
3: 15D68F5ED55011EFA0564D54C4F9AE02.roa (hash: S/3id5/GrdHISWrodbVNvQaLLsQVLmIkD0brgywz+oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl
rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Feb 2026 00:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951 (0x3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD00C, serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514
Validity
Not Before: Feb 3 00:10:16 2026 GMT
Not After : Feb 10 00:10:16 2026 GMT
Subject: CN=69813ce8-4198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:60:44:a0:60:f3:2e:c3:de:a8:5c:80:70:
16:51:d6:b5:0c:c6:ed:4a:3a:f8:2f:7a:d0:47:d7:
e0:2d:a3:39:da:c5:50:ec:1b:79:bb:7f:65:a6:98:
b6:24:c5:70:13:68:d5:7e:a1:62:ad:2d:c0:af:bd:
e0:40:82:d9:84:48:b6:ca:5b:4e:c8:38:d9:53:cd:
9f:54:72:c6:57:68:c5:20:40:ac:f0:ed:0b:6a:58:
23:cf:62:e4:ec:59:31:59:29:fb:f2:75:ed:9a:bf:
57:46:39:5c:7c:07:34:42:cf:4b:50:8d:82:bd:0f:
c2:a2:b1:82:4e:92:c5:32:f9:ab:f1:27:ad:07:ed:
ca:9a:cb:7f:99:65:2a:1d:cd:bf:94:40:ff:92:a7:
e7:be:79:c1:6b:d5:81:ac:f4:30:d2:fd:98:c7:42:
42:88:dc:cc:90:ea:65:5e:32:b7:d6:24:0f:24:07:
d7:b7:a0:16:76:c5:89:b7:e3:f4:fd:cf:98:77:b6:
64:5a:41:76:8b:31:88:03:c8:d6:2d:5d:ce:10:f7:
19:81:46:a1:b4:5a:61:32:c5:f7:27:5f:fb:96:f7:
4d:33:2b:b5:f5:a1:c4:88:25:57:c9:0c:2b:b3:8c:
34:02:1c:23:44:2c:29:78:41:84:6a:5f:4b:ef:9e:
c4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:01:C7:73:31:BF:EA:FD:14:62:29:4F:9B:7F:E5:0B:5B:83:5B:16
X509v3 Authority Key Identifier:
keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f4:1f:08:2f:72:d3:78:ba:1f:e1:0b:e8:cf:c0:0e:70:d9:
ed:c7:e2:23:f2:32:d8:2f:62:ee:b3:dc:8c:9a:92:b3:b5:79:
87:e8:fd:9c:ce:a2:2f:5f:56:b7:b0:28:5d:1b:34:25:35:df:
85:5f:36:6d:81:62:8e:1a:67:70:39:50:d2:ae:74:a0:d4:42:
8b:fc:02:44:e8:a9:0b:5c:fb:8a:a2:e3:27:3b:a4:a4:e3:e5:
0b:b5:f3:e6:6f:1b:95:71:b1:87:3f:a2:a7:1b:c4:9c:de:09:
0e:71:b1:c1:81:73:88:92:48:81:6e:be:9a:7c:05:16:c9:15:
01:e0:f1:dd:4d:60:72:e6:30:6d:8b:78:c9:4a:6e:6d:c9:ee:
28:a3:83:b1:3b:a7:ab:47:97:31:16:2c:fc:c3:47:53:2e:29:
cf:b0:30:f2:c0:c7:52:8e:37:53:6e:9d:06:c0:d6:c2:7a:7c:
da:e9:13:2a:98:5c:41:82:88:cf:f7:98:a0:34:3e:f3:fd:cc:
4a:34:11:0a:42:26:dc:93:70:9c:f8:c8:5e:f1:6b:9c:f5:ae:
ca:4f:bc:72:96:0b:04:56:61:8c:2a:6f:c3:13:2b:7c:ca:56:
28:95:f8:61:0a:be:98:79:71:58:d5:b3:bb:36:6a:79:ed:4d:
7d:36:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:11:06 2026 by rpki-client