This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
File: mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json)
Hash identifier: Bc/SoWVuC19Je9NIhJ4pRiowroc+YuLKO5FsFih03HM=
Subject key identifier: F3:79:5C:12:F4:6A:31:7D:00:66:D0:63:31:A5:DA:C2:1F:63:4C:54
Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Certificate serial: 08B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
Manifest number: 08A7
Signing time: Fri 30 Jan 2026 20:09:33 +0000
Manifest this update: Fri 30 Jan 2026 20:09:32 +0000
Manifest next update: Fri 06 Feb 2026 20:09:32 +0000
Files and hashes: 1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: u/O2wIC5YCtb4SYnvMhN2FuJXPF3dhsmqPB2VY88MAU=)
2: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: j94hdqhS8hEZkUNMK0Gy0/wMaWkISNSvPZJQcef/86U=)
3: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: xQNJE/wFi8JMz2ss0ss1yj9BAf/VPU6rBNzmi8uV9UI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Feb 2026 20:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225 (0x8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Validity
Not Before: Jan 30 20:09:32 2026 GMT
Not After : Feb 6 20:09:32 2026 GMT
Subject: CN=697d0ffd-ba42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:99:56:73:92:c0:8c:f3:46:fe:0e:96:dc:23:
a2:c2:8b:93:e2:40:c6:83:6d:65:16:32:8a:1b:ca:
3b:ae:5f:02:b4:00:5e:77:f0:4e:3f:17:30:be:e2:
4e:f5:da:ee:47:47:be:4f:5c:bf:28:56:eb:6c:50:
0a:37:d5:66:cc:43:bb:c8:e9:71:c8:80:49:08:ec:
4c:21:86:41:95:09:72:ad:ba:5f:c4:b7:88:d5:cf:
8f:ba:d0:a8:98:21:8f:70:e5:31:5e:10:f2:3a:de:
8f:18:1b:87:94:39:b8:6c:7c:6f:39:ad:e2:11:49:
8d:62:b8:16:d4:f0:b9:cd:0b:ea:b4:fb:36:7b:ff:
42:5e:25:0f:ed:13:fd:74:88:bb:2f:fb:7d:8c:9d:
64:7b:34:d9:bf:34:88:9f:10:4c:fa:91:04:fa:24:
1f:38:f7:32:79:c5:45:f2:44:80:d7:e9:45:e5:e9:
50:f4:bd:d3:01:86:0e:0f:17:a9:57:2c:df:62:ae:
dc:ec:93:ce:c1:8f:d0:d2:1c:0c:8a:d1:a3:a8:83:
d3:4c:b5:d2:65:30:19:a6:da:6c:15:f4:94:29:6c:
d9:16:4a:6f:c5:bf:3f:40:bd:e9:df:09:4b:e4:cc:
2e:95:06:84:4d:ec:05:11:3a:61:d9:21:d0:ba:51:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:79:5C:12:F4:6A:31:7D:00:66:D0:63:31:A5:DA:C2:1F:63:4C:54
X509v3 Authority Key Identifier:
keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c7:14:20:ee:0c:17:dc:a0:3e:91:b9:df:09:f8:ed:95:22:
c7:93:73:7e:fb:82:46:1e:59:31:a2:f5:67:a8:7b:50:b5:64:
7f:28:b6:68:07:2a:04:1d:cb:2f:61:ef:4f:0d:15:aa:6a:4a:
e0:d4:9d:fb:cd:b5:3d:7d:95:35:cc:d9:66:af:fd:9f:02:04:
d1:6e:57:a7:31:35:17:dc:63:ea:26:80:2c:54:bc:2b:be:6c:
b4:3e:62:e6:02:32:5e:ac:6c:1d:69:9e:af:66:8d:b1:05:97:
24:dc:dc:ed:7f:12:e6:44:e0:15:c7:2e:e0:d6:c8:fd:e2:6b:
b4:1f:f8:49:61:12:3b:f8:5d:32:1e:15:12:05:25:79:28:17:
f9:33:a7:8f:08:06:2f:f8:f1:3e:6d:f6:6b:74:4d:45:68:c4:
fb:52:84:7a:48:50:bc:a3:d6:c3:df:cf:7d:25:b0:44:21:44:
a6:7a:b3:5c:0b:71:ec:bb:63:d1:6d:de:96:57:6b:42:60:07:
81:01:02:ac:90:0e:73:9d:cb:62:62:bf:17:50:56:7e:c2:80:
83:ce:c0:76:f1:db:8b:51:b3:84:41:3f:12:d0:e1:74:32:8d:
45:8b:8d:9b:b6:e7:5e:ac:13:98:47:97:af:82:4e:9b:6d:3b:
3e:dc:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 11:54:21 2026 by rpki-client