This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json)
Hash identifier: XW7gDlHZXHVKGWguRqFACP6obyB00mbdYl0pFb3pN24=
Subject key identifier: 76:79:AA:3B:12:35:A5:F6:B7:8F:DC:46:85:10:BE:31:62:56:20:35
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial: 1478
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
Manifest number: 1418
Signing time: Mon 26 Jan 2026 16:39:04 +0000
Manifest this update: Mon 26 Jan 2026 16:39:04 +0000
Manifest next update: Mon 02 Feb 2026 16:39:04 +0000
Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: BQKop4jiFDn/t2LEcz/rwDvsv12+Sm/5ZEiuGQWTt5Q=)
2: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: Flu+OB6NSXTr2/DICAFpHEHutk0iqrBQ5kD9GJPbb90=)
3: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: lBRDtES/HZOfboWNM5sziaPImTLADmv7HDwM0/uuCvk=)
4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: OqEEQNcYyBCDgQL1llF0AYlCqLNvN3uXPMeNJtc0cyI=)
5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: faPX+RT4u0aFWk0BQoLYurHE34SqXeH6Z33EAVEOUo0=)
6: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: V1iSNQB8ve6x07QbL++7FcG93VsgUWiOli7wIFWtTZY=)
7: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: PEQx20rXW3wWd56B/SVjtbMpJcwzQ8D6MiDi0J0Jbek=)
8: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: HUiyLswpuxKdbNSVPaGfLSYEn6DWoC29PelmwIAjJ5Y=)
9: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: kfMM6t13zt/9QojJHd0HyZbpxpoTwXxNY4n4Idi5NyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 16:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5240 (0x1478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Validity
Not Before: Jan 26 16:39:04 2026 GMT
Not After : Feb 2 16:39:04 2026 GMT
Subject: CN=697798a8-d6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:c9:3b:67:ce:54:7a:c1:ae:7c:1f:36:de:
65:3c:d0:a9:49:b1:ac:5d:44:b9:d1:51:7c:5f:e4:
7e:06:7b:e7:08:af:03:81:27:e3:f6:cc:81:df:8e:
6c:a2:cf:ef:fa:22:6e:a0:92:ba:a7:41:2a:e1:30:
5e:3b:a3:e0:bd:2a:90:11:95:4c:83:13:0f:83:7c:
ac:c3:fb:9d:4d:2d:30:be:a3:e4:89:c1:e1:49:57:
3c:f9:ca:87:cc:61:bd:62:28:34:09:10:20:91:ee:
4c:da:f8:6d:db:8e:8c:eb:16:cf:af:ed:5b:24:e3:
33:95:ea:87:67:b2:99:80:b6:f8:29:e7:71:dd:40:
7c:57:8b:3a:72:b1:93:05:27:4c:82:b1:46:93:f1:
80:3b:32:7f:76:e7:ec:02:cb:73:de:33:f8:73:ec:
55:01:c3:01:6c:1f:e1:1a:1e:ab:0b:e4:6c:d0:34:
fa:af:2e:72:58:77:74:3f:b2:17:e6:75:aa:a1:c8:
c9:ef:9a:a5:38:bd:a8:8c:c0:7f:e5:27:31:74:11:
3f:f7:93:0c:1f:c4:03:09:41:50:09:3a:4b:93:bf:
60:6b:5c:be:b7:9d:7c:d9:72:d3:42:cf:4b:c0:d0:
8b:ad:76:ad:84:e6:c9:d5:a0:0f:44:2d:e8:69:16:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:79:AA:3B:12:35:A5:F6:B7:8F:DC:46:85:10:BE:31:62:56:20:35
X509v3 Authority Key Identifier:
keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:d1:e1:d2:5d:22:08:a4:f1:c5:a0:f9:6d:0d:fc:df:ae:23:
86:2a:47:85:77:da:03:9f:bb:3b:0e:cc:c9:bb:72:b7:82:ed:
44:38:c8:78:cc:8b:bb:db:51:d6:9a:e9:08:25:dc:bd:a1:33:
bb:fe:b8:5b:cd:3a:11:6f:9f:16:66:93:53:cf:4d:0a:91:af:
61:f5:83:22:ef:33:3b:11:c2:21:52:9a:a6:45:58:78:c5:de:
b9:5e:01:c1:43:66:13:68:7d:81:8d:af:d2:8e:b8:ab:79:d4:
21:e5:4a:73:a4:fe:05:a9:22:be:5a:5d:73:0a:8e:a6:f1:a8:
e5:c7:e5:e0:b1:37:ad:28:0b:d5:f9:d7:6f:21:37:f9:a9:de:
ab:fe:2b:35:8c:6d:ad:59:9b:80:24:ee:f5:d3:93:55:2b:4c:
f1:c6:37:07:0a:02:4d:b9:27:4d:6d:de:dc:df:97:70:23:a7:
8f:14:f9:76:be:a0:c7:d7:7c:f9:26:e1:17:18:da:62:3a:f4:
d3:f5:f9:2d:6e:ad:57:9d:4f:ca:e8:67:06:f7:b1:a8:f7:ec:
51:b8:17:9e:10:8b:bf:50:f3:a2:0f:03:c8:f9:a5:6a:18:f4:
73:2d:ba:11:3c:ae:15:46:d8:4a:1c:d5:75:f6:ab:49:b5:9b:
c8:fc:78:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2
MTg0MUMzOUEwHhcNMjYwMTI2MTYzOTA0WhcNMjYwMjAyMTYzOTA0WjAYMRYwFAYD
VQQDDA02OTc3OThhOC1kNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAovjJO2fOVHrBrnwfNt5lPNCpSbGsXUS50VF8X+R+BnvnCK8DgSfj9syB345s
os/v+iJuoJK6p0Eq4TBeO6PgvSqQEZVMgxMPg3ysw/udTS0wvqPkicHhSVc8+cqH
zGG9Yig0CRAgke5M2vht246M6xbPr+1bJOMzleqHZ7KZgLb4Kedx3UB8V4s6crGT
BSdMgrFGk/GAOzJ/dufsAstz3jP4c+xVAcMBbB/hGh6rC+Rs0DT6ry5yWHd0P7IX
5nWqocjJ75qlOL2ojMB/5ScxdBE/95MMH8QDCUFQCTpLk79ga1y+t5182XLTQs9L
wNCLrXathObJ1aAPRC3oaRbAzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZ5qjsS
NaX2t4/cRoUQvjFiViA1MB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB
RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp
NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBp0eHSXSIIpPHFoPltDfzfriOGKkeFd9oDn7s7DszJu3K3gu1EOMh4
zIu721HWmukIJdy9oTO7/rhbzToRb58WZpNTz00Kka9h9YMi7zM7EcIhUpqmRVh4
xd65XgHBQ2YTaH2Bja/SjriredQh5UpzpP4FqSK+Wl1zCo6m8ajlx+XgsTetKAvV
+ddvITf5qd6r/is1jG2tWZuAJO7105NVK0zxxjcHCgJNuSdNbd7c35dwI6ePFPl2
vqDH13z5JuEXGNpiOvTT9fktbq1XnU/K6GcG97Go9+xRuBeeEIu/UPOiDwPI+aVq
GPRzLboRPK4VRthKHNV19qtJtZvI/HhM
-----END CERTIFICATE-----
Generated at Tue Jan 27 23:17:38 2026 by rpki-client