This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
File: mGsNU3ZLyD3A4HLsrzacefIqOdc.mft (raw, json)
Hash identifier: fpKcUBuALaqiz5WZ1A067Brx6yrj+zLh7n3/MJkdxbk=
Subject key identifier: EA:0C:5D:96:96:2C:3E:0B:A3:87:0A:70:B2:75:D5:E7:8F:B7:6E:3B
Authority key identifier: 98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7
Certificate issuer: /CN=A91DD799/serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7
Certificate serial: 0782
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
Manifest number: 0782
Signing time: Fri 16 Jan 2026 14:44:56 +0000
Manifest this update: Fri 16 Jan 2026 14:44:55 +0000
Manifest next update: Fri 23 Jan 2026 14:44:55 +0000
Files and hashes: 1: mGsNU3ZLyD3A4HLsrzacefIqOdc.crl (hash: oXFgMHsSFOIUM/uTDmhR2rKZpXGPrGdBSGo3rUgnVx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl
rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 14:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD799, serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7
Validity
Not Before: Jan 16 14:44:55 2026 GMT
Not After : Jan 23 14:44:55 2026 GMT
Subject: CN=696a4ee7-0d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:2d:a6:3e:99:5b:6d:65:66:d2:92:90:c9:
ee:6a:00:51:b8:52:75:b1:08:87:5f:a6:e2:1b:7c:
40:77:8e:c9:80:0d:ce:2d:3e:05:7b:9a:86:f9:e2:
18:50:b2:85:d9:66:0a:4a:1e:a6:0c:df:75:df:d9:
88:14:d2:3f:ba:35:8d:cc:22:a9:51:e6:54:a4:ac:
b9:5f:05:68:54:fe:33:47:ea:9f:80:01:65:e4:e2:
5c:fc:5f:2d:11:13:9a:47:78:5c:74:30:67:89:4a:
f5:54:d7:38:45:be:61:71:55:34:2a:83:26:d2:a9:
be:dc:34:85:78:f4:dd:32:97:d0:7c:5e:06:d7:50:
cd:e3:44:cc:35:35:75:ca:14:4e:b2:ad:07:a3:ea:
51:79:1b:11:cd:fb:71:74:a9:4e:9d:8d:8d:65:dc:
5f:3c:f5:34:49:97:db:9c:e5:fd:bf:9a:af:30:80:
57:e5:08:34:b9:5e:39:72:5b:f6:67:bd:88:81:a5:
69:f7:ef:31:ae:b5:26:a5:b7:83:ca:50:84:1b:bd:
01:41:2d:c7:67:e2:43:b4:82:ff:68:01:61:1b:f4:
cd:d2:90:b3:65:68:fc:dc:e8:61:a0:45:f9:67:e3:
b5:d1:1d:83:61:97:d4:fb:07:d9:ff:3b:80:de:d1:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0C:5D:96:96:2C:3E:0B:A3:87:0A:70:B2:75:D5:E7:8F:B7:6E:3B
X509v3 Authority Key Identifier:
keyid:98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:24:a9:c1:28:c9:8f:a4:2e:42:56:66:66:d9:67:0c:8c:d7:
71:01:2c:17:3f:47:f2:3a:9c:31:2a:7b:94:c3:b0:53:52:9e:
27:ca:4a:92:3b:30:fe:83:db:96:23:96:61:83:43:78:16:95:
20:27:a9:3a:c2:e1:38:87:7a:27:42:eb:39:61:2a:b3:dd:f6:
d2:2b:17:4c:3e:5d:6d:bb:66:a5:61:ae:3d:1e:a8:e4:5e:f7:
6b:14:8a:e5:f2:76:7d:b6:1f:0c:65:9d:e1:88:cd:30:53:4b:
f5:db:4a:1c:55:3c:57:9e:8f:1e:2d:43:57:b1:83:17:0e:be:
d1:bd:88:c1:cf:5b:81:ec:c3:99:1e:b7:71:f8:bd:74:22:d9:
11:be:52:b0:11:02:c7:71:81:02:f3:9c:e3:0c:00:40:0f:37:
0f:c9:1f:d4:df:ff:6a:00:a7:3a:dd:cd:c2:6c:55:26:70:f8:
6b:03:89:e5:5b:fd:ec:87:d3:04:9d:a1:a2:5c:b0:03:d5:5c:
35:90:9a:b4:66:14:89:70:83:50:bf:14:d6:c5:81:bf:38:f0:
f8:c1:73:63:4d:0f:c6:29:48:33:3e:7d:2d:ed:b8:d8:f2:bd:
d6:b1:7d:74:8e:a2:70:52:07:80:b0:75:de:7b:37:76:c2:4e:
d9:ab:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:22 2026 by rpki-client