This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier: U/JiAB9HQkNAybHMlhcJrNXlV30KXm0CAuaqcYEEm00=
Subject key identifier: E7:99:8F:0E:4B:49:B4:20:FD:28:83:B6:B2:35:CF:D9:67:1F:C7:3C
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial: 074C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number: 073F
Signing time: Tue 20 Jan 2026 21:06:21 +0000
Manifest this update: Tue 20 Jan 2026 21:06:20 +0000
Manifest next update: Tue 27 Jan 2026 21:06:20 +0000
Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: 1gZAkT3E/NOOyHkz88/Y0rYpAgARKNE3taanoff+1ag=)
2: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: t/jzVO6L3wgo+QH7mzqB0zSXy5Nwbra0pOtYvgiFmIs=)
3: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: bMetSmWwjzP6LMILwQp0327+1V3svzhvOdiLjBriktI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 21:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1868 (0x74c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Validity
Not Before: Jan 20 21:06:20 2026 GMT
Not After : Jan 27 21:06:20 2026 GMT
Subject: CN=696fee4d-e728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:f9:e4:02:bd:a6:4a:18:e3:e0:c4:8f:df:
52:c9:25:e4:83:9e:68:8e:b1:bb:8b:9a:66:d9:ee:
85:a7:e2:b5:f3:94:ff:cf:7a:60:e8:dc:5e:ee:38:
9d:6e:6c:a8:1a:b2:6a:88:51:0f:48:43:fb:51:7c:
9e:39:48:0c:14:2d:e7:72:c2:38:27:94:b7:fa:d7:
ae:3d:11:d3:f9:1f:f3:1f:b5:f6:05:8d:bf:4a:3c:
1b:13:ad:92:24:09:95:ce:2b:13:eb:55:86:1f:a6:
d3:3d:3a:0e:38:89:d9:49:73:b9:ff:b0:1f:cb:c6:
65:da:3a:f7:c0:65:d6:a3:27:aa:4c:f5:f6:b0:f7:
5b:6e:a6:2f:e5:b8:6a:66:e7:cd:37:4c:aa:ac:71:
fc:99:3d:8b:9f:74:3b:5e:48:0b:4e:31:f0:a3:eb:
7a:8c:17:3b:54:6d:1c:cd:a1:a7:84:f3:16:ce:03:
2e:55:a8:ef:71:ba:88:64:99:e0:dd:f0:fa:4d:59:
1c:6a:c7:e3:da:d7:7a:ff:ca:b3:bb:6a:1e:0d:7d:
8b:1e:94:89:45:06:b5:60:48:a3:d8:ec:c2:36:38:
f0:5f:34:e2:c8:7f:31:2a:12:c2:ce:13:a1:16:f2:
cc:46:c7:a0:22:4f:96:c7:01:06:ae:0d:ba:4a:6f:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:99:8F:0E:4B:49:B4:20:FD:28:83:B6:B2:35:CF:D9:67:1F:C7:3C
X509v3 Authority Key Identifier:
keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:18:15:a1:87:48:a7:96:a7:85:b0:13:56:92:b5:68:14:8a:
cc:ac:1b:a4:c4:8d:20:91:91:6c:72:99:a6:3c:11:d9:d8:25:
8d:4d:6f:91:5c:a1:70:70:f7:13:6e:52:22:c9:77:71:7d:e5:
f7:d4:b2:0f:11:43:d9:54:69:de:60:50:72:cb:c1:db:53:9c:
da:56:62:51:e9:9c:6e:7a:43:95:6c:ef:b9:28:62:12:39:ab:
aa:11:ae:48:7b:27:22:7d:b0:da:64:51:1a:59:fb:d7:b8:f6:
39:26:bc:04:8b:b0:31:fd:c9:08:29:6f:12:2b:9f:ae:b8:e6:
65:01:33:b1:fa:f1:90:67:ff:0c:9c:b5:6f:6c:e6:8a:3e:32:
90:66:52:79:a9:8d:c1:33:84:90:28:2a:37:8a:07:77:d7:55:
3d:66:2e:87:e0:c7:d4:6f:a1:c1:f5:07:31:31:8b:cf:b8:31:
d2:9e:08:db:29:97:a6:ef:c0:5b:f8:9b:9d:49:67:16:73:a2:
48:43:19:57:84:25:2b:c4:3e:2c:7e:c4:87:52:73:1d:52:f5:
6f:b9:5c:65:3c:1b:e8:32:a8:e6:ad:e3:6a:7f:94:93:9b:5f:
90:cc:c9:49:8d:70:fa:c5:7d:6f:a6:a8:2f:26:ef:17:eb:57:
c1:8d:0d:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I0MzUxMTAvBgNVBAUTKDk4Qzk3RTA1MkQ3RDlBRDUzNjA5NTlCOUQzRTA3NkRB
REQ3NkVBMDEwHhcNMjYwMTIwMjEwNjIwWhcNMjYwMTI3MjEwNjIwWjAYMRYwFAYD
VQQDDA02OTZmZWU0ZC1lNzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAreH55AK9pkoY4+DEj99SySXkg55ojrG7i5pm2e6Fp+K185T/z3pg6Nxe7jid
bmyoGrJqiFEPSEP7UXyeOUgMFC3ncsI4J5S3+teuPRHT+R/zH7X2BY2/SjwbE62S
JAmVzisT61WGH6bTPToOOInZSXO5/7Afy8Zl2jr3wGXWoyeqTPX2sPdbbqYv5bhq
ZufNN0yqrHH8mT2Ln3Q7XkgLTjHwo+t6jBc7VG0czaGnhPMWzgMuVajvcbqIZJng
3fD6TVkcasfj2td6/8qzu2oeDX2LHpSJRQa1YEij2OzCNjjwXzTiyH8xKhLCzhOh
FvLMRsegIk+WxwEGrg26Sm9N9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeZjw5L
SbQg/SiDtrI1z9lnH8c8MB8GA1UdIwQYMBaAFJjJfgUtfZrVNglZudPgdtrdduoB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9FQzA1OTA0NjVC
RTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10VTJDVm01MC1CMjJ0MTI2
Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL21NbC1CUzE5bXRVMkNWbTUwLUIyMnQxMjZnRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjQzNS9FQzA1OTA0NjVCRTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10
VTJDVm01MC1CMjJ0MTI2Z0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCnGBWhh0inlqeFsBNWkrVoFIrMrBukxI0gkZFscpmmPBHZ2CWNTW+R
XKFwcPcTblIiyXdxfeX31LIPEUPZVGneYFByy8HbU5zaVmJR6ZxuekOVbO+5KGIS
OauqEa5IeycifbDaZFEaWfvXuPY5JrwEi7Ax/ckIKW8SK5+uuOZlATOx+vGQZ/8M
nLVvbOaKPjKQZlJ5qY3BM4SQKCo3igd311U9Zi6H4MfUb6HB9QcxMYvPuDHSngjb
KZem78Bb+JudSWcWc6JIQxlXhCUrxD4sfsSHUnMdUvVvuVxlPBvoMqjmreNqf5ST
m1+QzMlJjXD6xX1vpqgvJu8X61fBjQ0I
-----END CERTIFICATE-----
Generated at Wed Jan 21 07:51:22 2026 by rpki-client