This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json)
Hash identifier: QjsS7t8hdt7EfUKZo4VmVWk78WZlF9Yu2ubmSjiWt+g=
Subject key identifier: FF:75:47:70:01:14:71:A8:2C:8C:62:31:38:FE:1E:0E:55:16:90:C8
Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4
Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
Certificate serial: 01BF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
Manifest number: 01B8
Signing time: Sat 17 Jan 2026 02:17:22 +0000
Manifest this update: Sat 17 Jan 2026 02:17:22 +0000
Manifest next update: Sat 24 Jan 2026 02:17:21 +0000
Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: FUryDPz5gHTtdJz4NGiHaIvWzmAZFGpc8kQUuGhrRf0=)
2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: ZpCx0RDhO/3a016yxSmp4qzmXeudCkZizqsM58t9iRc=)
3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: zJ+T1/Hkopnt885YDIhvqhmTsj2QoX1P6tQiloS39aw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl
rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 02:17:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
Validity
Not Before: Jan 17 02:17:22 2026 GMT
Not After : Jan 24 02:17:21 2026 GMT
Subject: CN=696af132-1a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4d:09:85:0d:73:73:ab:12:fd:bb:e6:42:a2:
aa:8f:b1:af:d1:9f:db:30:83:b5:ce:19:3b:b4:c5:
ff:83:ed:1b:13:80:0c:ec:98:9d:ad:26:5d:d6:5b:
23:1b:32:a1:2b:87:3f:70:d4:ce:07:6d:f9:27:40:
b8:ca:28:7e:40:d5:6b:ca:53:a6:f5:ea:31:e9:2a:
58:d7:dd:1d:34:4e:da:30:2b:26:2a:83:24:cc:74:
9b:62:8f:48:41:fd:d3:1f:29:dc:40:5a:89:a8:cc:
e0:d2:cd:bf:c2:84:a9:d2:c1:97:b4:f9:1d:9a:a2:
4a:3c:a2:20:1e:34:d0:db:b3:43:a4:46:29:9c:33:
5a:b8:4d:62:ae:3a:c2:93:90:f0:51:b4:99:8d:1b:
17:5e:9d:b1:2a:d7:32:ce:6c:bc:fe:fb:c0:6c:6c:
a7:81:c0:28:c2:8a:51:f7:b2:40:7b:5c:f9:20:50:
a8:8f:f2:e0:56:7f:0c:d3:8f:d6:9d:03:6b:18:ba:
07:f6:7e:4c:c3:0e:ed:d6:0d:51:ef:f8:bc:41:c7:
0f:ca:7d:23:e8:81:0e:d3:d2:9e:6a:35:a3:c8:62:
a3:6c:74:e4:d3:85:5f:a5:11:42:33:66:8d:fe:3e:
d2:49:36:ef:34:79:2c:7b:e2:7d:f5:c1:36:ee:38:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:47:70:01:14:71:A8:2C:8C:62:31:38:FE:1E:0E:55:16:90:C8
X509v3 Authority Key Identifier:
keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1f:a7:48:35:d7:4a:c1:a9:91:eb:e7:2b:e5:4b:39:96:ca:
d4:69:55:48:55:76:40:a0:00:78:ac:2e:8f:3a:08:cf:fb:f1:
09:4c:fe:cc:bb:f1:55:ba:1c:ac:d9:37:66:78:e6:67:8f:a4:
2c:07:cd:d4:0e:ea:26:ba:43:93:c4:0d:5d:70:ee:ae:bc:70:
05:db:df:88:e4:8f:f4:ba:42:b8:74:e7:fd:d8:48:97:2a:e6:
66:b3:ec:a2:03:87:a8:6f:c6:ab:64:5f:ae:b4:4d:4c:af:7a:
5e:23:e8:ac:3f:ae:99:64:ae:70:97:ef:f7:57:04:24:af:e5:
78:18:8a:2e:af:7a:b7:1c:e5:e1:bd:de:27:19:a1:4b:82:7d:
46:aa:13:28:73:5d:a7:6d:96:e1:34:55:a2:0e:e3:52:80:6f:
2d:b8:f8:ff:15:25:5c:6c:ad:00:98:a4:18:81:07:5e:bf:06:
5b:85:75:2e:43:20:ac:dd:7a:94:9d:17:28:3d:a7:8c:73:52:
16:89:ea:b1:e2:50:bb:0a:73:ef:3d:68:e9:28:c7:a6:50:aa:
bf:51:ab:79:37:d5:f9:c2:09:ca:c9:c6:3d:52:40:3d:16:a6:
e5:bb:fa:2e:c2:e4:f7:09:a2:c1:0c:77:6b:e8:6d:79:bc:b2:
c5:ea:4c:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC
MjdEODQ3QTQwHhcNMjYwMTE3MDIxNzIyWhcNMjYwMTI0MDIxNzIxWjAYMRYwFAYD
VQQDDA02OTZhZjEzMi0xYTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7U0JhQ1zc6sS/bvmQqKqj7Gv0Z/bMIO1zhk7tMX/g+0bE4AM7JidrSZd1lsj
GzKhK4c/cNTOB235J0C4yih+QNVrylOm9eox6SpY190dNE7aMCsmKoMkzHSbYo9I
Qf3THyncQFqJqMzg0s2/woSp0sGXtPkdmqJKPKIgHjTQ27NDpEYpnDNauE1irjrC
k5DwUbSZjRsXXp2xKtcyzmy8/vvAbGyngcAowopR97JAe1z5IFCoj/LgVn8M04/W
nQNrGLoH9n5Mww7t1g1R7/i8QccPyn0j6IEO09KeajWjyGKjbHTk04VfpRFCM2aN
/j7SSTbvNHkse+J99cE27jjSpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP91R3AB
FHGoLIxiMTj+Hg5VFpDIMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz
NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS
NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz
dG9jdlpUcVZoRC15ZllSNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpH6dINddKwamR6+cr5Us5lsrUaVVIVXZAoAB4rC6POgjP+/EJTP7M
u/FVuhys2TdmeOZnj6QsB83UDuomukOTxA1dcO6uvHAF29+I5I/0ukK4dOf92EiX
KuZms+yiA4eob8arZF+utE1Mr3peI+isP66ZZK5wl+/3VwQkr+V4GIour3q3HOXh
vd4nGaFLgn1GqhMoc12nbZbhNFWiDuNSgG8tuPj/FSVcbK0AmKQYgQdevwZbhXUu
QyCs3XqUnRcoPaeMc1IWieqx4lC7CnPvPWjpKMemUKq/Uat5N9X5wgnKycY9UkA9
Fqblu/ouwuT3CaLBDHdr6G15vLLF6kxu
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:26 2026 by rpki-client