This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json)
Hash identifier: XPdzCe034tpp/Uh9gsmoUO5dR9dweOZm5OhtfaFQuGE=
Subject key identifier: 9E:60:EA:55:90:79:18:8F:74:80:0B:A1:71:64:C3:E5:B9:78:CC:4D
Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429
Certificate serial: 3524
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
Manifest number: 350F
Signing time: Mon 26 Jan 2026 15:09:32 +0000
Manifest this update: Mon 26 Jan 2026 15:09:32 +0000
Manifest next update: Mon 02 Feb 2026 15:09:32 +0000
Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: z6n5HWTQY764COcsksUefnSI5pnPgULQRdfFXRJ/B+E=)
2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: diz+Mu2U4uCFECF4R8aohazh+vKfN3ig2+OPcHe2dC8=)
3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 7uOB6N38ardleWnTuq1RJZwPlZnlnhINCIW0PLcMR9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl
rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 15:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13604 (0x3524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429
Validity
Not Before: Jan 26 15:09:32 2026 GMT
Not After : Feb 2 15:09:32 2026 GMT
Subject: CN=697783ac-41b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:fe:39:10:d1:65:17:65:28:61:49:1f:4d:
38:f7:e9:fe:a2:79:e6:73:82:0b:ba:a8:72:ec:9e:
fe:70:dc:8a:53:8a:d3:2a:ec:38:f4:a7:11:a6:c0:
31:a3:18:26:35:0c:17:f3:23:b0:bd:1e:30:58:76:
63:de:dc:57:03:f4:6e:32:41:0a:74:aa:58:28:cd:
cd:03:7d:5d:73:16:c6:4d:48:3c:86:c4:88:2a:85:
f1:e3:3d:89:51:87:7f:9d:74:e4:2c:1b:1f:78:3d:
8e:64:0d:05:6e:b9:e1:95:7f:f7:f9:da:fd:be:d1:
4f:c7:03:ad:4a:12:1d:58:0b:30:05:94:ae:f5:4e:
23:28:10:d7:d8:81:dc:6d:6b:83:a1:0c:e5:be:9a:
4e:d9:9b:64:20:b9:42:25:a6:96:ee:45:aa:7d:a8:
12:be:9f:47:86:9e:03:6c:f2:1f:10:b2:0f:e2:2c:
21:3d:cf:4c:a6:a6:e4:ff:bb:91:82:63:0f:60:23:
7c:b3:fc:07:78:4b:20:e3:d2:e4:2b:eb:da:c5:5d:
74:ec:a7:27:00:5b:fc:39:46:bb:3d:38:17:6e:67:
32:70:28:a9:b5:4c:5d:72:26:42:fb:9c:97:df:a8:
e1:b8:95:5d:54:e6:96:af:24:5f:3f:7a:12:49:02:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:60:EA:55:90:79:18:8F:74:80:0B:A1:71:64:C3:E5:B9:78:CC:4D
X509v3 Authority Key Identifier:
keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:a8:73:87:ff:83:14:8e:b1:c1:2e:fb:9c:cc:9d:0e:23:3c:
52:56:cb:ed:44:37:23:c4:56:39:b0:d9:b8:5e:96:7c:d4:f5:
7b:61:06:e0:99:1e:58:53:5d:1a:11:17:11:d9:d1:dd:de:f5:
0d:c0:55:59:e3:e5:e3:c8:f6:21:70:38:ad:5c:92:5f:71:8b:
1d:95:55:0b:e8:76:f9:3c:80:93:ac:b9:13:8c:4d:fc:f0:4f:
dc:6e:1d:29:b2:17:b2:b7:25:59:77:e1:80:d9:a9:81:58:1d:
bb:3f:36:f4:af:d9:9c:81:7c:3a:ee:83:8c:6b:e1:3d:02:10:
7c:24:d0:37:50:8d:c1:5e:a6:a9:4a:99:ef:15:d5:ea:3c:d2:
40:f4:f1:4f:b4:f3:a6:64:9b:29:96:24:2a:05:bc:a9:dc:63:
33:ec:ed:53:4e:e6:50:c8:5f:dd:72:5d:e5:1f:d0:21:dd:a8:
ff:38:54:54:1a:af:4b:b2:57:8c:e9:58:19:8f:aa:14:1f:dc:
15:d8:a9:95:9f:0d:0f:6b:8a:77:eb:26:b8:3a:d4:84:b9:ac:
a5:ca:4b:63:6e:57:0b:95:0d:6a:09:53:e8:22:a1:7a:d9:bc:
02:28:32:8c:ae:8a:b6:ce:b2:5a:4d:c8:eb:f2:85:fa:f7:c3:
75:4c:e8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:46:45 2026 by rpki-client