This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
File: 5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json)
Hash identifier: ucDffyoVJ6TrijUq5b1QpwY7iDVC0WugxsxCV0e7qww=
Subject key identifier: 1F:A3:8C:B3:C4:00:2B:34:B2:CD:BE:01:C3:D3:22:B3:85:5E:2F:47
Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7
Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
Manifest number: 0214
Signing time: Tue 27 Jan 2026 01:32:04 +0000
Manifest this update: Tue 27 Jan 2026 01:32:04 +0000
Manifest next update: Tue 03 Feb 2026 01:32:04 +0000
Files and hashes: 1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: pC4OaU5cixgMWjVLKGX2JyUu8iAc0LfKsITjMAydiY0=)
2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: KXSCbuQLHG9xWL+hihrwdJUS/R0sgZW/C4dlIANzg14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl
rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 01:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
Validity
Not Before: Jan 27 01:32:04 2026 GMT
Not After : Feb 3 01:32:04 2026 GMT
Subject: CN=69781594-b409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:86:ba:ed:7a:5e:41:24:e0:64:a9:3f:d9:
bf:fa:c6:03:74:0b:b8:e7:dc:e5:de:8b:9b:c3:52:
ea:10:9a:7e:1c:06:b6:54:13:86:94:4b:8a:57:7f:
5f:28:18:0b:97:6f:83:d4:4c:27:e9:14:d3:f3:07:
29:b9:6c:93:a5:d1:e0:f2:46:b8:ee:b1:89:d2:f6:
d3:94:2e:df:4c:78:b2:17:ce:cc:c5:2f:57:a7:cc:
35:3e:5f:27:09:15:2e:ed:d6:c3:bc:93:2d:e9:29:
e2:cb:2c:37:7c:05:a3:c4:01:e5:ec:7e:d8:91:10:
bc:2a:cd:16:70:11:52:87:3b:49:c1:28:7a:d7:1c:
52:bf:8a:26:24:62:2e:ff:79:40:bf:42:97:ad:06:
01:3c:89:14:47:65:c8:d3:7b:e7:4a:72:99:c7:30:
6c:d8:22:d9:15:80:6d:2e:2c:ae:77:03:fd:16:28:
2e:a4:0e:8e:00:cb:c1:8e:bb:a4:75:28:f8:7e:b6:
1c:9f:c2:59:03:7c:15:08:7f:f9:1a:d5:33:0c:21:
20:df:0b:23:ee:84:27:42:f8:d8:7a:79:6c:0f:cf:
e2:9d:ad:f5:ce:90:76:2a:06:3e:03:06:9f:c4:5c:
d6:1a:85:99:39:4c:12:51:62:07:d0:b0:f3:76:66:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A3:8C:B3:C4:00:2B:34:B2:CD:BE:01:C3:D3:22:B3:85:5E:2F:47
X509v3 Authority Key Identifier:
keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:75:cd:5c:65:a9:c4:af:e1:7d:50:47:b8:2f:da:4e:a4:e1:
39:f7:c3:58:22:31:c7:30:68:5f:bf:e4:e9:32:f9:3c:16:ed:
18:80:21:fb:be:f9:db:b7:9e:6d:75:87:c3:7b:28:6c:a7:3e:
ed:44:67:af:6c:b7:1d:6e:55:07:2c:1d:05:66:32:76:3d:6f:
52:68:3b:71:13:8d:b7:7a:02:95:d3:72:33:1a:42:9b:07:2e:
20:f1:f8:38:13:5e:42:c3:e9:d5:ed:6e:0f:df:54:30:24:ec:
70:d6:a1:44:11:7b:d9:59:f6:6e:cc:f1:3f:6c:91:7d:8e:94:
7b:3e:99:05:9e:d6:17:b1:d2:d8:c7:6c:21:62:85:d3:d8:4f:
05:3f:a0:84:e2:7e:a8:50:c3:0c:ea:13:59:ef:12:0f:4b:76:
31:ef:61:63:63:f1:f7:ed:0d:bd:1b:eb:33:82:e4:8d:e2:1b:
30:51:71:67:fc:af:5b:ab:3b:f4:50:23:61:5e:94:d3:ce:f0:
7d:7a:38:c4:18:fe:3e:ca:ad:ab:4b:b2:ef:8f:d0:61:05:0f:
86:29:35:99:82:95:b8:49:60:09:f4:9c:45:1e:db:48:29:2f:
ed:b5:cb:23:53:a6:8d:c0:13:c3:f3:72:42:ad:e5:54:f8:c3:
af:49:91:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQyQkYxMTAvBgNVBAUTKEU2QkIwM0FBNThBMEMyNzBFQjY2QjNFQUVCMjQwOEZG
RkFCQTVFQzcwHhcNMjYwMTI3MDEzMjA0WhcNMjYwMjAzMDEzMjA0WjAYMRYwFAYD
VQQDDA02OTc4MTU5NC1iNDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAonmGuu16XkEk4GSpP9m/+sYDdAu459zl3oubw1LqEJp+HAa2VBOGlEuKV39f
KBgLl2+D1Ewn6RTT8wcpuWyTpdHg8ka47rGJ0vbTlC7fTHiyF87MxS9Xp8w1Pl8n
CRUu7dbDvJMt6Sniyyw3fAWjxAHl7H7YkRC8Ks0WcBFShztJwSh61xxSv4omJGIu
/3lAv0KXrQYBPIkUR2XI03vnSnKZxzBs2CLZFYBtLiyudwP9FigupA6OAMvBjruk
dSj4frYcn8JZA3wVCH/5GtUzDCEg3wsj7oQnQvjYenlsD8/ina31zpB2KgY+Awaf
xFzWGoWZOUwSUWIH0LDzdmYcywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+jjLPE
ACs0ss2+AcPTIrOFXi9HMB8GA1UdIwQYMBaAFOa7A6pYoMJw62az6uskCP/6ul7H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJCRi8yQTcxRTZCQ0Qz
NDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3duRHJaclBxNnlRSV9fcTZY
c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVyc0RxbGlnd25EclpyUHE2eVFJX19xNlhzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDJCRi8yQTcxRTZCQ0QzNDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3du
RHJaclBxNnlRSV9fcTZYc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJdc1cZanEr+F9UEe4L9pOpOE598NYIjHHMGhfv+TpMvk8Fu0YgCH7
vvnbt55tdYfDeyhspz7tRGevbLcdblUHLB0FZjJ2PW9SaDtxE423egKV03IzGkKb
By4g8fg4E15Cw+nV7W4P31QwJOxw1qFEEXvZWfZuzPE/bJF9jpR7PpkFntYXsdLY
x2whYoXT2E8FP6CE4n6oUMMM6hNZ7xIPS3Yx72FjY/H37Q29G+szguSN4hswUXFn
/K9bqzv0UCNhXpTTzvB9ejjEGP4+yq2rS7Lvj9BhBQ+GKTWZgpW4SWAJ9JxFHttI
KS/ttcsjU6aNwBPD83JCreVU+MOvSZHu
-----END CERTIFICATE-----
Generated at Tue Jan 27 12:23:54 2026 by rpki-client