This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
File: C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json)
Hash identifier: eQBYg4WcaJ7zg7uoI/Ey02uk1Y8jMotwCTahrUaqKlM=
Subject key identifier: 8E:8E:9B:B4:13:16:DD:5F:CF:9C:C5:A0:46:F3:F8:B9:E0:6B:D7:16
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial: 0666
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
Manifest number: 0648
Signing time: Mon 26 Jan 2026 21:59:38 +0000
Manifest this update: Mon 26 Jan 2026 21:59:38 +0000
Manifest next update: Mon 02 Feb 2026 21:59:38 +0000
Files and hashes: 1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: MTP7DgTbpV/dZiwQr1ILwESe2HT7u5VgC8UJbHcaoVs=)
2: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: JjwRM28UWpqUpm8V4jbamMbdEhJ8x26HdODuQra73JI=)
3: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: R8MAXcI9/yvxzT89z1WDBO8OZ5lHOE8A6WUOtaaft6k=)
4: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: AWiL7Ku+LhuTzw8yYOes8DFZCiFrs+UOfXRiEC5RaE4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 21:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1638 (0x666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Validity
Not Before: Jan 26 21:59:38 2026 GMT
Not After : Feb 2 21:59:38 2026 GMT
Subject: CN=6977e3ca-b57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:5d:a5:64:51:5e:f1:28:de:68:2a:65:1c:
b2:85:99:e6:a0:64:98:38:a8:3a:46:5c:11:ca:ba:
cc:4c:f5:b8:40:78:9d:14:ed:18:4b:bf:80:2b:60:
45:14:e2:18:49:08:65:bf:2a:ad:1c:a3:28:f0:99:
54:3d:28:36:d5:66:67:12:ce:2e:d5:3e:e6:c4:0f:
4a:22:98:e0:fe:fc:c5:17:4f:f6:00:2f:37:f4:d3:
d3:6c:df:bd:ef:82:ed:b5:32:d1:ad:08:0c:e2:e6:
a8:d0:b9:37:fc:ae:af:a1:b6:4f:f6:e3:ba:62:b8:
7f:e9:c4:8c:7e:d5:4c:cf:dc:28:e7:a9:7b:4c:bb:
c1:20:f9:21:5b:23:ff:64:f7:67:0e:0d:e7:4b:b5:
6e:8c:7c:80:14:07:48:6a:fc:83:aa:00:55:7c:31:
2e:93:32:f9:7b:c4:8f:c4:4e:5c:78:8e:7b:98:68:
8e:33:88:17:13:0f:bb:c8:73:19:73:de:9c:23:4d:
a3:5c:87:5e:cb:6a:03:e2:3a:03:07:c4:ff:09:82:
1b:26:c2:35:76:22:33:cd:94:9f:c5:dd:7b:4f:52:
04:08:a2:78:c6:5a:ff:8a:90:de:9e:f9:e1:b0:af:
cd:c6:e6:0a:51:61:16:d6:08:e4:59:03:72:72:13:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8E:9B:B4:13:16:DD:5F:CF:9C:C5:A0:46:F3:F8:B9:E0:6B:D7:16
X509v3 Authority Key Identifier:
keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:5d:1f:86:03:bb:0d:02:fb:63:10:19:84:3a:f3:e7:96:e7:
be:45:f1:bb:f6:91:d2:1c:89:f0:5c:73:ac:c9:52:fc:a1:8c:
04:2b:5e:5a:85:35:f9:4d:2d:7f:a9:9e:ec:6a:28:6c:dd:13:
6a:04:93:9c:fc:b5:aa:73:e2:4f:a3:b8:3f:62:19:70:14:8b:
91:7a:7c:db:56:f9:a3:50:c8:3b:81:d8:82:5e:35:3c:37:6f:
61:93:be:dc:9a:f5:a2:5b:8c:a7:16:35:ad:44:54:07:25:46:
31:6e:50:d8:4b:a7:79:92:31:fe:15:e6:7f:92:b7:26:88:82:
d2:76:7b:26:ca:8a:59:85:3b:b8:a9:16:8d:a6:09:97:8c:f0:
31:b2:bf:63:f9:35:e6:21:a1:ff:2c:30:29:2f:70:57:40:d5:
a3:9a:c2:e4:16:60:7c:69:41:1c:c9:93:58:fa:1d:ca:b1:b8:
27:57:a1:a9:14:d9:75:54:04:e2:d1:09:8c:92:b7:03:d3:3e:
78:27:54:a4:70:9d:62:c1:8e:27:2a:ef:12:87:52:ca:12:f9:
de:cd:10:92:3e:9a:5e:73:f9:ab:0e:84:a7:f8:03:19:e1:c1:
d2:75:e4:5f:e8:5e:d8:d5:9e:f4:95:26:e9:c0:75:19:e9:0c:
44:11:c3:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkyRUIxMTAvBgNVBAUTKDBCNkNERjNGQUNDNjgwQjc4NjkyNkRFMTM5RjFFMEY2
NzQ0NDA2NTQwHhcNMjYwMTI2MjE1OTM4WhcNMjYwMjAyMjE1OTM4WjAYMRYwFAYD
VQQDDA02OTc3ZTNjYS1iNTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArcpdpWRRXvEo3mgqZRyyhZnmoGSYOKg6RlwRyrrMTPW4QHidFO0YS7+AK2BF
FOIYSQhlvyqtHKMo8JlUPSg21WZnEs4u1T7mxA9KIpjg/vzFF0/2AC839NPTbN+9
74LttTLRrQgM4uao0Lk3/K6vobZP9uO6Yrh/6cSMftVMz9wo56l7TLvBIPkhWyP/
ZPdnDg3nS7VujHyAFAdIavyDqgBVfDEukzL5e8SPxE5ceI57mGiOM4gXEw+7yHMZ
c96cI02jXIdey2oD4joDB8T/CYIbJsI1diIzzZSfxd17T1IECKJ4xlr/ipDenvnh
sK/NxuYKUWEW1gjkWQNychP2LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6Om7QT
Ft1fz5zFoEbz+Lnga9cWMB8GA1UdIwQYMBaAFAts3z+sxoC3hpJt4Tnx4PZ0RAZU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTJFQi9GRDAwODFERUM1
NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dMZUdrbTNoT2ZIZzluUkVC
bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MyemZQNnpHZ0xlR2ttM2hPZkhnOW5SRUJsUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTJFQi9GRDAwODFERUM1NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dM
ZUdrbTNoT2ZIZzluUkVCbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTXR+GA7sNAvtjEBmEOvPnlue+RfG79pHSHInwXHOsyVL8oYwEK15a
hTX5TS1/qZ7saihs3RNqBJOc/LWqc+JPo7g/YhlwFIuRenzbVvmjUMg7gdiCXjU8
N29hk77cmvWiW4ynFjWtRFQHJUYxblDYS6d5kjH+FeZ/krcmiILSdnsmyopZhTu4
qRaNpgmXjPAxsr9j+TXmIaH/LDApL3BXQNWjmsLkFmB8aUEcyZNY+h3KsbgnV6Gp
FNl1VATi0QmMkrcD0z54J1SkcJ1iwY4nKu8Sh1LKEvnezRCSPppec/mrDoSn+AMZ
4cHSdeRf6F7Y1Z70lSbpwHUZ6QxEEcPP
-----END CERTIFICATE-----
Generated at Tue Jan 27 13:24:11 2026 by rpki-client