This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
File: 0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json)
Hash identifier: E5cra2SNDQ4hAWzop76aww+ab+pssx0C28RR8ZgOVd8=
Subject key identifier: AA:3B:58:AC:14:5B:1F:C9:15:73:67:3D:D5:E2:0A:D5:11:5E:30:F6
Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
Certificate issuer: /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
Manifest number: 7C
Signing time: Sat 17 Jan 2026 05:49:24 +0000
Manifest this update: Sat 17 Jan 2026 05:49:24 +0000
Manifest next update: Sat 24 Jan 2026 05:49:24 +0000
Files and hashes: 1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: 67qzDSGsk+M0/nV2zR8CEucHhhNPDe9cGqEXQQxN8NA=)
2: C3C056A636DD11F08C82E269C4F9AE02.roa (hash: HBKXI2AjuuTAqBzBKbi8y9q49xdsPFITyMYY5p5WuOA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 05:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Validity
Not Before: Jan 17 05:49:24 2026 GMT
Not After : Jan 24 05:49:24 2026 GMT
Subject: CN=696b22e4-521f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:03:ef:ba:d9:2a:82:9f:c4:fc:71:dc:65:
f1:6e:b1:f1:67:12:17:a2:8e:6a:89:05:5a:14:b3:
d0:53:bf:dc:1c:0b:2e:35:0e:0e:84:c3:9a:ec:55:
ac:dd:54:2c:00:46:3a:cc:4b:cc:69:63:ec:20:01:
25:72:10:ee:b9:96:fd:ae:e4:9f:d3:9d:0a:cb:61:
c4:66:2a:81:56:84:09:74:75:ce:02:aa:53:44:9a:
42:52:2d:7e:dd:ea:d2:02:2f:26:c6:12:36:76:9a:
99:c7:2b:62:14:73:20:ec:5e:dc:89:dc:a8:56:66:
82:96:35:f1:8f:f1:b9:44:d2:e3:ab:b7:20:f1:eb:
91:54:1f:ba:d4:9d:b5:9b:83:91:8c:ee:54:b2:18:
31:8b:49:3d:90:ef:88:2c:9a:7d:39:81:10:e9:fe:
9b:ca:85:23:e8:2b:88:c8:90:08:44:6c:39:3a:98:
58:25:3c:7e:0e:b9:f0:60:0c:41:13:a9:58:3b:3d:
a0:35:5d:4c:00:2f:19:c8:5a:da:fc:b5:72:4b:6a:
9f:c9:12:25:c1:b1:04:9e:e6:72:df:cd:5b:96:85:
b0:74:1e:2c:af:23:19:3f:23:e0:68:f6:6c:3d:0c:
4a:84:3b:ce:61:85:c4:b3:00:00:a7:44:59:12:ff:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3B:58:AC:14:5B:1F:C9:15:73:67:3D:D5:E2:0A:D5:11:5E:30:F6
X509v3 Authority Key Identifier:
keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:64:07:80:97:79:25:0f:79:7c:d3:88:58:42:5c:8b:e0:5c:
a1:d1:31:3a:1e:f6:16:8d:cb:90:94:3d:74:74:d3:7f:c0:20:
bf:cc:a8:c0:82:5e:95:db:9a:97:49:c8:e7:73:85:ec:0d:b4:
e4:f5:82:2a:fb:7a:92:cd:36:57:5d:a3:5a:62:a1:7a:93:37:
c5:4c:2d:95:4d:18:1c:4b:c3:02:99:78:27:69:b9:5b:26:4d:
39:e3:ea:46:50:70:1e:a9:d9:45:ce:02:ae:ba:64:bd:c7:16:
a4:72:44:3d:88:24:50:12:2b:6d:80:32:47:46:ca:21:db:68:
9d:a5:84:a6:fa:ff:88:68:2a:ba:8b:bc:22:a5:4a:fe:ee:d1:
ac:68:cc:ba:da:c6:7a:49:6b:a5:0f:df:45:9f:f9:5d:58:50:
5d:e7:86:80:7c:b7:4b:ec:ec:b6:0f:96:8b:ab:6c:ee:a2:c6:
b8:84:15:33:c5:f4:33:ca:33:99:fe:7d:dd:30:d6:0d:61:cb:
85:47:50:d0:fe:53:90:62:07:47:0e:7b:0f:f1:7c:50:34:0e:
08:62:d4:9f:63:a4:1b:7d:58:9b:7f:bd:b4:49:65:b2:23:9c:
8d:44:cd:a8:6b:28:35:3d:2c:a1:26:e8:87:ac:98:ad:92:5b:
c7:f1:3e:cf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QkJBRjExMC8GA1UEBRMoRDIwNjZCNjE5MzRFNzdDRjI2N0E5RENDMzhCRjVERUUy
MUYwN0JBMzAeFw0yNjAxMTcwNTQ5MjRaFw0yNjAxMjQwNTQ5MjRaMBgxFjAUBgNV
BAMMDTY5NmIyMmU0LTUyMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjsAPvutkqgp/E/HHcZfFusfFnEheijmqJBVoUs9BTv9wcCy41Dg6Ew5rsVazd
VCwARjrMS8xpY+wgASVyEO65lv2u5J/TnQrLYcRmKoFWhAl0dc4CqlNEmkJSLX7d
6tICLybGEjZ2mpnHK2IUcyDsXtyJ3KhWZoKWNfGP8blE0uOrtyDx65FUH7rUnbWb
g5GM7lSyGDGLST2Q74gsmn05gRDp/pvKhSPoK4jIkAhEbDk6mFglPH4OufBgDEET
qVg7PaA1XUwALxnIWtr8tXJLap/JEiXBsQSe5nLfzVuWhbB0HiyvIxk/I+Bo9mw9
DEqEO85hhcSzAACnRFkS/zIvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqjtYrBRb
H8kVc2c91eIK1RFeMPYwHwYDVR0jBBgwFoAU0gZrYZNOd88mep3MOL9d7iHwe6Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQkFGLzEwQzE5RDMwMzZE
RDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4bWVwM01PTDlkN2lId2U2
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMGdacllaTk9kODhtZXAzTU9MOWQ3aUh3ZTZNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC
QkFGLzEwQzE5RDMwMzZERDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4
bWVwM01PTDlkN2lId2U2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGdkB4CXeSUPeXzTiFhCXIvgXKHRMToe9haNy5CUPXR003/AIL/MqMCC
XpXbmpdJyOdzhewNtOT1gir7epLNNlddo1pioXqTN8VMLZVNGBxLwwKZeCdpuVsm
TTnj6kZQcB6p2UXOAq66ZL3HFqRyRD2IJFASK22AMkdGyiHbaJ2lhKb6/4hoKrqL
vCKlSv7u0axozLraxnpJa6UP30Wf+V1YUF3nhoB8t0vs7LYPlourbO6ixriEFTPF
9DPKM5n+fd0w1g1hy4VHUND+U5BiB0cOew/xfFA0Dghi1J9jpBt9WJt/vbRJZbIj
nI1EzahrKDU9LKEm6IesmK2SW8fxPs8=
-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:57 2026 by rpki-client