This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
File: 9JSW-V35WIgb9LfpcuUbbzylnfo.mft (raw, json)
Hash identifier: CsqeB+lZka1yikZ//u1TNGdDnBXcMPrZweVtbW9L8Ak=
Subject key identifier: A4:5F:3C:FE:C3:76:FD:F7:B7:F9:16:F6:FD:FD:A4:F9:92:BF:27:7E
Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
Manifest number: A5
Signing time: Wed 21 Jan 2026 05:31:07 +0000
Manifest this update: Wed 21 Jan 2026 05:31:07 +0000
Manifest next update: Wed 28 Jan 2026 05:31:07 +0000
Files and hashes: 1: 9JSW-V35WIgb9LfpcuUbbzylnfo.crl (hash: ErkHgg2Q6gPUKFWP4GpINpPIaoGCVa2jC638NtKpSVY=)
2: E11B4E9E051F11F0AD77753FC4F9AE02.roa (hash: sVOAnjOooXjAE0Tav8hlMKDeBwe/09k0ESEyHjy7uTE=)
3: 78B92D76052E11F0A9CDFD7AC4F9AE02.roa (hash: tnKgGkku4d4mjIiCwDPkpPAd8tAhahbvC8udGjDVa4c=)
4: 25C80478053A11F08A0D6F31C4F9AE02.roa (hash: LiUBZoVw3Jt99/4FU3g3RposaxL70t+JGdJUjhZObvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 05:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABA84, serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Validity
Not Before: Jan 21 05:31:07 2026 GMT
Not After : Jan 28 05:31:07 2026 GMT
Subject: CN=6970649b-5132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:b0:6c:64:5c:09:b6:d1:77:39:33:cf:74:
a7:98:9a:93:9c:2b:bf:1f:1b:92:bd:14:d6:f2:43:
36:1c:44:3a:c1:70:d3:f5:61:47:4c:0b:f8:74:1d:
71:4b:b9:38:70:fd:36:0d:2b:17:f7:9f:ee:05:4d:
60:16:05:93:55:cc:57:94:98:6b:fb:aa:b9:9d:17:
f5:fa:b0:e7:14:da:d6:4f:54:1f:57:68:76:77:ff:
07:27:e3:0a:fc:01:bb:95:d1:ab:9f:17:23:22:cd:
7c:7c:ef:5e:78:2e:1a:c7:cb:e7:37:d0:c9:ab:7f:
54:1c:6e:1f:9e:9b:fb:03:9c:95:29:9b:10:63:aa:
82:4b:17:03:3e:be:e0:0a:09:27:52:b8:54:c6:1b:
be:0f:a5:e1:5a:1b:1a:ef:b1:b9:f8:ac:91:50:28:
57:82:50:88:12:e5:9f:41:3f:6f:2b:a8:c4:b9:99:
f1:34:ae:49:8e:c1:46:5a:84:a6:76:bb:a8:99:95:
27:69:d4:19:fe:52:1b:35:4e:6c:4b:b5:57:73:fc:
12:bc:e2:a9:bc:6c:09:f8:75:81:e3:f3:1e:d0:de:
1b:ed:66:ec:93:70:d3:4f:e3:10:67:4d:11:c8:3f:
66:0d:aa:36:cd:a7:17:71:cf:a7:8a:1b:6e:86:85:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5F:3C:FE:C3:76:FD:F7:B7:F9:16:F6:FD:FD:A4:F9:92:BF:27:7E
X509v3 Authority Key Identifier:
keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:36:24:c8:0d:2f:ec:a8:3c:4d:fd:a1:7c:cf:f1:da:1e:4a:
54:a5:36:37:dc:17:fb:52:1a:25:93:cf:a7:c4:22:d9:8f:c5:
d1:11:fb:a5:fc:55:5a:50:3f:87:a9:13:f0:8c:65:0c:79:28:
e6:6e:7b:66:89:c8:e4:23:ac:7f:9e:7d:ed:e8:2f:44:86:71:
d5:19:a0:41:53:bb:51:97:16:33:6b:ff:b6:6f:7f:cd:25:c8:
90:fb:7d:c6:3d:66:75:1d:b6:e4:16:c7:19:91:2b:38:de:b4:
b9:44:24:aa:55:e8:cc:52:5b:37:b1:21:e5:2d:ec:23:85:a0:
93:88:ab:31:39:f1:ab:2a:47:e6:65:08:a7:ad:82:07:08:2f:
61:cf:a4:be:32:38:9f:48:bb:43:00:70:7d:3a:83:b7:0f:96:
b8:e5:de:67:9d:10:28:f5:86:23:84:c3:97:5b:6f:ca:45:4e:
62:c5:d9:e5:5f:23:51:4e:09:8e:1c:17:ad:59:4d:be:c7:87:
3f:c7:ff:ab:36:5e:2b:a9:b1:83:0b:4b:3e:63:48:8b:49:47:
2d:44:49:16:14:57:ac:91:2c:14:d4:09:ce:4a:4a:6e:3d:fd:
13:4a:b0:b6:c3:1b:70:22:0c:d3:27:99:48:9d:71:d8:ae:8e:
10:b0:64:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUJBODQxMTAvBgNVBAUTKEY0OTQ5NkY5NURGOTU4ODgxQkY0QjdFOTcyRTUxQjZG
M0NBNTlERkEwHhcNMjYwMTIxMDUzMTA3WhcNMjYwMTI4MDUzMTA3WjAYMRYwFAYD
VQQDDA02OTcwNjQ5Yi01MTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArmywbGRcCbbRdzkzz3SnmJqTnCu/HxuSvRTW8kM2HEQ6wXDT9WFHTAv4dB1x
S7k4cP02DSsX95/uBU1gFgWTVcxXlJhr+6q5nRf1+rDnFNrWT1QfV2h2d/8HJ+MK
/AG7ldGrnxcjIs18fO9eeC4ax8vnN9DJq39UHG4fnpv7A5yVKZsQY6qCSxcDPr7g
CgknUrhUxhu+D6XhWhsa77G5+KyRUChXglCIEuWfQT9vK6jEuZnxNK5JjsFGWoSm
druomZUnadQZ/lIbNU5sS7VXc/wSvOKpvGwJ+HWB4/Me0N4b7Wbsk3DTT+MQZ00R
yD9mDao2zacXcc+nihtuhoU36QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRfPP7D
dv33t/kW9v39pPmSvyd+MB8GA1UdIwQYMBaAFPSUlvld+ViIG/S36XLlG288pZ36
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkE4NC83MkMxMDQ1QzA1
MUYxMUYwQUJGREQ1M0VDNEY5QUUwMi85SlNXLVYzNVdJZ2I5TGZwY3VVYmJ6eWxu
Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlKU1ctVjM1V0lnYjlMZnBjdVViYnp5bG5mby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QkE4NC83MkMxMDQ1QzA1MUYxMUYwQUJGREQ1M0VDNEY5QUUwMi85SlNXLVYzNVdJ
Z2I5TGZwY3VVYmJ6eWxuZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMNiTIDS/sqDxN/aF8z/HaHkpUpTY33Bf7Uholk8+nxCLZj8XREful
/FVaUD+HqRPwjGUMeSjmbntmicjkI6x/nn3t6C9EhnHVGaBBU7tRlxYza/+2b3/N
JciQ+33GPWZ1HbbkFscZkSs43rS5RCSqVejMUls3sSHlLewjhaCTiKsxOfGrKkfm
ZQinrYIHCC9hz6S+MjifSLtDAHB9OoO3D5a45d5nnRAo9YYjhMOXW2/KRU5ixdnl
XyNRTgmOHBetWU2+x4c/x/+rNl4rqbGDC0s+Y0iLSUctREkWFFeskSwU1AnOSkpu
Pf0TSrC2wxtwIgzTJ5lInXHYro4QsGSv
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:44:15 2026 by rpki-client