This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
File: PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft (raw, json)
Hash identifier: 3gAwZKWYD/i5WqInF64PAUoaF42ThNx33vDoCTD4rys=
Subject key identifier: F0:5F:88:91:F5:87:42:6B:12:CB:24:C8:16:8D:A0:FA:0A:46:29:29
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
Manifest number: 57
Signing time: Fri 16 Jan 2026 20:19:01 +0000
Manifest this update: Fri 16 Jan 2026 20:19:01 +0000
Manifest next update: Fri 23 Jan 2026 20:19:01 +0000
Files and hashes: 1: PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl (hash: PgvA96lzJYxbSFbFK0llkbvYnrcYXTEykhGhdauN2SQ=)
2: 844A140AC5F111F08382761DC4F9AE02.roa (hash: Gx2kCxxEj3/RIVTnJMerfYLqRKpDP3Xj2fha+8LVQi8=)
3: 0228453AC5F811F08FFA5F38C4F9AE02.roa (hash: r4LE1v/40b0WOCFXtWlsGTCc5sxQVvVVfzbmBEp1ue4=)
4: 901A806E936311F0AFC2992BC4F9AE02.roa (hash: 4IjRBRyjuEdbkIY8f1/iw3KdwGSRgiR78o99r2JvTFk=)
5: 12A52794DD1211F0B41550BC5F6F56BC.roa (hash: oz8NIpj9Tm03gt/8vqVFLzi3RgMkoP/E07i1bU9Ue0g=)
6: A1FA022EC60C11F08F496250C4F9AE02.roa (hash: QpiAf33FZgMhwGGuEHfq10s771b9Wjyenh0fOxv6MN8=)
7: 025F9668C60A11F0AB4AE483C4F9AE02.roa (hash: 12RMAudJL+SHTcjUoCBqfB1EVhMixsbW3pw7P/AEY6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 20:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: Jan 16 20:19:01 2026 GMT
Not After : Jan 23 20:19:01 2026 GMT
Subject: CN=696a9d35-ff4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:c6:6f:6e:f1:91:64:e6:4a:d8:5e:0a:24:
ba:31:0e:76:7e:75:03:f4:7c:b0:69:dd:93:e9:78:
5b:8c:1f:0f:73:82:13:8c:df:81:26:d1:48:51:36:
bb:54:9b:bb:1b:ff:46:4a:6e:c6:5d:29:87:53:31:
b1:fa:14:9b:43:f4:b5:46:36:c5:77:83:1c:19:3a:
13:94:3b:d0:e7:65:ec:b2:7c:dc:be:66:a8:84:e2:
8c:06:20:92:54:33:0d:55:93:42:f1:6d:8b:05:aa:
ee:c8:ef:99:ea:d0:cf:3b:eb:57:50:82:ee:c7:f8:
14:62:0c:6d:53:eb:44:08:57:a2:49:11:e3:15:dc:
39:a7:59:12:a4:6e:3a:ad:57:d5:ba:a9:c8:66:11:
de:bd:0e:18:30:31:bd:f2:bf:f9:4f:c0:df:d7:b2:
a1:ca:91:28:1a:cb:fe:74:01:df:cd:b9:71:72:22:
86:6c:75:ca:12:2e:af:4b:e6:02:8f:c1:d4:2f:73:
af:51:77:c7:7d:cb:59:2b:04:f6:ad:42:de:47:80:
b4:89:f7:31:76:4d:d9:58:89:69:be:45:d9:dc:28:
20:62:1f:31:a5:1a:a0:12:fd:b7:d5:79:6b:29:15:
6e:c3:c1:22:64:1c:7f:b0:2d:9e:6c:91:23:76:fe:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5F:88:91:F5:87:42:6B:12:CB:24:C8:16:8D:A0:FA:0A:46:29:29
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5e:84:49:07:ea:ba:d2:e4:d1:be:54:8e:68:3c:f1:4b:f6:
b9:62:19:71:5c:77:09:58:9f:71:01:4f:6d:3f:93:e1:e4:3b:
4c:2a:47:dc:cf:d8:1c:25:12:bd:e3:25:74:f2:a1:e0:83:2b:
d4:b5:3f:66:4b:10:a5:91:f9:47:97:1e:2a:55:ad:f0:5d:3d:
f0:c5:2b:81:bb:64:75:93:69:6c:08:1f:cd:e4:8b:0a:70:a6:
9e:2a:33:fc:70:46:8f:ab:75:e7:a3:e1:28:13:82:49:95:21:
d6:6d:a1:2e:59:6a:1a:bd:2a:46:5b:35:6d:01:61:a2:d3:31:
8c:42:c9:fb:23:c7:1a:89:8f:72:16:e1:c3:1a:d5:05:52:88:
9d:9d:ac:78:ce:33:2f:f0:91:5f:0f:27:e1:cb:33:27:82:16:
98:49:02:4f:fe:42:ee:4f:37:fe:4c:b1:bf:6d:e2:16:c6:10:
6b:60:da:a2:fb:b4:1f:64:97:55:73:16:5d:87:c1:b3:c6:a3:
c8:d0:1a:39:4b:30:de:52:42:d5:7a:41:47:98:f7:61:00:50:
cd:5f:38:b5:f0:ea:f6:2c:f9:4a:d7:06:4b:a6:17:f1:6f:03:
53:d7:86:e4:7b:69:a1:6c:43:95:20:8d:f4:d1:45:0c:6e:a6:
40:d9:4f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:11:15 2026 by rpki-client