This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json)
Hash identifier: gXjxihU/x9C/GtmCR3fruKLVnNoLFd8tfdH3STvvh74=
Subject key identifier: 36:38:79:C8:8B:0E:E1:18:58:67:E2:C4:89:9C:27:97:C8:2B:02:E1
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
Manifest number: 014A
Signing time: Wed 07 Jan 2026 03:30:45 +0000
Manifest this update: Wed 07 Jan 2026 03:30:44 +0000
Manifest next update: Wed 14 Jan 2026 03:30:44 +0000
Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: 0i6vnCZMJs+1x66557iVgyge6czmSzUZzvDuGlu90LA=)
2: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: GMXU4PxSO88RcbBqzb2gyEchtqA2OVDVG15sHhZwd7g=)
3: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: dK1RlQyJjeiwzuMRZD6/CsndMyibK0XoFCLqDbss32s=)
4: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: UOVpPqyzylpvUS4PFJS4QPq1eALE7pHfj83Afvy+ymM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Jan 2026 03:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Validity
Not Before: Jan 7 03:30:44 2026 GMT
Not After : Jan 14 03:30:44 2026 GMT
Subject: CN=695dd364-f9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:25:62:1f:00:f7:c7:0c:19:2a:c8:07:83:
00:7f:72:32:fd:72:17:33:7e:38:90:dc:fa:5f:ad:
23:d0:ee:05:6f:6a:92:e6:12:ab:84:1a:2e:5d:12:
4b:67:61:7c:f8:f9:0a:42:88:eb:62:e2:a7:c4:14:
0c:dd:d2:9a:d1:bb:db:d5:74:cb:77:01:02:3a:e4:
29:db:c6:59:ab:8c:ba:e6:59:42:83:ed:0a:40:a2:
2e:06:85:e0:b7:17:68:85:bb:70:a9:84:50:28:12:
a6:b9:8f:d2:46:1f:04:c8:05:5c:14:7a:69:16:d0:
01:ac:ac:ba:7c:74:dd:5a:a6:c3:f0:86:6a:4c:17:
87:6b:ac:9e:01:93:d9:3b:ab:ed:3d:08:12:b2:d9:
c5:95:6b:ec:f0:72:50:95:54:75:55:c0:01:2b:38:
7f:76:a3:05:db:ed:fc:f1:59:b0:c3:a6:59:7b:ab:
a7:bc:eb:1d:68:9e:0c:87:be:15:da:33:73:ab:f8:
91:b3:c1:6b:a6:35:bd:f0:02:46:d4:ec:83:3f:a3:
7e:18:00:ef:3f:77:a3:00:31:b5:5e:d2:d6:27:40:
88:93:a8:e8:83:8c:8a:81:88:b6:13:77:b3:d8:68:
6b:ec:6b:f6:de:8c:c2:87:3e:d5:dd:66:1b:a4:64:
11:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:38:79:C8:8B:0E:E1:18:58:67:E2:C4:89:9C:27:97:C8:2B:02:E1
X509v3 Authority Key Identifier:
keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a9:0b:d9:b9:3d:a6:26:0f:58:68:92:9f:f6:38:fa:51:8d:
36:0c:06:c6:e6:10:b5:6c:20:03:7f:9c:ff:8f:37:eb:df:ca:
85:1f:4b:62:0d:97:96:66:7b:02:ad:29:1b:8d:ca:6a:83:76:
37:fb:e9:d3:f9:b7:f4:e3:d8:e0:0e:82:d5:4c:bd:90:d5:de:
35:89:78:a3:37:ff:2a:a2:c6:0e:15:6a:67:97:03:49:f0:2e:
8a:2c:8f:47:a9:ef:35:6d:72:ae:b9:58:ec:8e:04:8d:d1:ba:
2b:2f:c1:45:0c:ea:8d:5e:b7:42:59:6c:1b:29:08:dc:23:a8:
e7:08:b5:4f:f1:b0:87:18:10:da:ef:91:68:fa:cf:94:aa:90:
13:67:de:1f:53:13:6e:93:1a:c9:16:92:79:80:70:18:0b:82:
96:79:a1:01:66:d2:b4:83:99:7b:d6:9f:ee:af:07:9b:6f:a0:
5e:c5:46:e1:bd:77:03:ad:47:cf:88:21:0d:88:db:fe:b6:d9:
4a:6c:d9:7c:46:7e:7e:b3:d6:52:f7:f4:f0:45:8c:f8:a3:43:
64:83:7c:f1:64:93:52:9e:d8:2f:1b:5b:81:db:cd:65:8a:cb:
48:4c:ef:38:56:76:65:73:d9:ef:eb:8d:b6:f3:12:4e:31:a9:
f2:5c:0d:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC
RkNBQ0RDOTgwHhcNMjYwMTA3MDMzMDQ0WhcNMjYwMTE0MDMzMDQ0WjAYMRYwFAYD
VQQDDA02OTVkZDM2NC1mOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArfclYh8A98cMGSrIB4MAf3Iy/XIXM344kNz6X60j0O4Fb2qS5hKrhBouXRJL
Z2F8+PkKQojrYuKnxBQM3dKa0bvb1XTLdwECOuQp28ZZq4y65llCg+0KQKIuBoXg
txdohbtwqYRQKBKmuY/SRh8EyAVcFHppFtABrKy6fHTdWqbD8IZqTBeHa6yeAZPZ
O6vtPQgSstnFlWvs8HJQlVR1VcABKzh/dqMF2+388Vmww6ZZe6unvOsdaJ4Mh74V
2jNzq/iRs8FrpjW98AJG1OyDP6N+GADvP3ejADG1XtLWJ0CIk6jog4yKgYi2E3ez
2Ghr7Gv23ozChz7V3WYbpGQRTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDY4eciL
DuEYWGfixImcJ5fIKwLhMB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy
RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK
bVdRM0hLN2lZZy1feXMzSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC2qQvZuT2mJg9YaJKf9jj6UY02DAbG5hC1bCADf5z/jzfr38qFH0ti
DZeWZnsCrSkbjcpqg3Y3++nT+bf049jgDoLVTL2Q1d41iXijN/8qosYOFWpnlwNJ
8C6KLI9Hqe81bXKuuVjsjgSN0borL8FFDOqNXrdCWWwbKQjcI6jnCLVP8bCHGBDa
75Fo+s+UqpATZ94fUxNukxrJFpJ5gHAYC4KWeaEBZtK0g5l71p/urwebb6BexUbh
vXcDrUfPiCENiNv+ttlKbNl8Rn5+s9ZS9/TwRYz4o0Nkg3zxZJNSntgvG1uB281l
istITO84VnZlc9nv64228xJOManyXA2V
-----END CERTIFICATE-----
Generated at Fri Jan 9 00:53:19 2026 by rpki-client