This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
File: RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json)
Hash identifier: di2TZJptoTJTsSMLpYYT+QMPK0DKyInDfj0tM1BZ7JU=
Subject key identifier: 2B:A2:4C:80:A2:DB:22:AA:A7:76:28:60:39:1E:6E:CB:28:D8:21:6A
Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E
Certificate issuer: /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
Manifest number: FD
Signing time: Sat 17 Jan 2026 04:20:05 +0000
Manifest this update: Sat 17 Jan 2026 04:20:05 +0000
Manifest next update: Sat 24 Jan 2026 04:20:05 +0000
Files and hashes: 1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: 0tYZXf2+4czdhbspbBkw+9PPTfjlSe2CjT0tvDMWvPQ=)
2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: Lo2vDLqUWYKZZBt2t4d2KqlKu9tqzBqX5FsiB+knExY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl
rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 04:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE92F, serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E
Validity
Not Before: Jan 17 04:20:05 2026 GMT
Not After : Jan 24 04:20:05 2026 GMT
Subject: CN=696b0df5-ac2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:c6:32:31:08:87:c3:1a:1e:12:9d:83:c1:
6c:22:ef:d3:de:a2:ba:96:ba:98:84:63:c0:71:b7:
15:df:a1:c8:ce:26:fb:7f:a1:07:00:71:30:c2:5e:
ca:19:fd:0c:54:36:53:94:67:b6:d6:5a:b2:0c:6f:
7b:21:bd:00:ca:04:30:02:bc:d4:64:ce:3c:5a:dc:
08:9c:38:0b:c7:83:08:26:4d:90:3e:99:86:83:b2:
46:18:7c:52:7c:61:53:c6:be:27:8c:11:40:67:d7:
a9:de:1d:86:3b:5f:21:cd:e7:6c:bf:ea:14:d9:2c:
8c:10:19:b2:c9:ce:9e:0a:17:e7:e0:d5:7d:09:39:
0c:fb:25:94:78:3f:3b:ca:d8:f1:cb:0f:66:de:47:
a6:46:b2:d1:d2:bb:75:69:bd:01:22:65:1a:00:b8:
9a:18:09:9f:b7:7c:9e:4e:2b:22:bb:18:76:b3:79:
63:e9:42:9e:fb:95:85:c6:ae:9b:ff:bd:07:55:11:
8c:80:65:9a:c2:59:20:b4:37:0d:7d:64:07:fe:a7:
30:9d:9e:1a:65:36:30:9a:b1:c9:24:b7:1d:c4:d1:
7c:ac:f9:b9:02:6d:66:40:2f:7b:42:db:08:a5:e2:
af:e1:7c:7a:e2:ff:98:55:8d:bb:ee:b9:b3:72:ec:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A2:4C:80:A2:DB:22:AA:A7:76:28:60:39:1E:6E:CB:28:D8:21:6A
X509v3 Authority Key Identifier:
keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:40:8d:b1:bb:b6:59:17:c7:6e:d1:21:d0:7b:52:71:7a:cb:
74:9e:8c:1a:4b:76:06:43:f1:27:0c:a0:35:1d:16:04:2b:4f:
8a:2a:03:78:24:31:80:0d:49:82:9c:27:10:34:cd:28:3c:c1:
c8:1a:78:f7:13:a0:9c:48:93:37:9d:04:39:e6:eb:65:10:11:
f1:1d:76:cb:dd:5d:d4:da:bb:76:05:1e:3a:41:bd:35:dd:a7:
fc:bb:22:3d:ee:4f:90:eb:1f:29:fb:40:03:fc:e4:4d:94:b6:
a2:a7:f9:24:f9:11:67:f3:e2:5a:7e:3c:1a:e7:1c:7a:f8:d2:
e5:31:30:d2:42:92:cd:d4:1e:91:77:ad:aa:c6:a6:db:5b:13:
49:53:99:2f:db:f3:36:b9:d2:eb:3b:6b:23:fd:e8:32:04:ee:
0b:2f:72:a5:66:1c:55:a4:69:e8:f2:22:66:87:9f:fe:a4:18:
63:42:ef:90:2d:ca:39:a3:14:43:15:77:0f:a8:21:8a:ef:9b:
c3:26:12:58:e2:e7:1d:28:c3:45:c8:43:80:c4:a2:42:a6:75:
ce:2c:f2:63:88:02:71:cd:77:a6:44:c9:f6:29:e2:50:27:ed:
d1:b0:83:11:08:e5:f3:c4:64:50:5c:41:bb:74:d5:81:e1:04:
d5:77:5d:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUU5MkYxMTAvBgNVBAUTKDQ1N0RCNzY2RTFCMEQ2QTREQ0M3RjlBRUNEMjg3RDRE
QzNFNzBDOUUwHhcNMjYwMTE3MDQyMDA1WhcNMjYwMTI0MDQyMDA1WjAYMRYwFAYD
VQQDDA02OTZiMGRmNS1hYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj2TGMjEIh8MaHhKdg8FsIu/T3qK6lrqYhGPAcbcV36HIzib7f6EHAHEwwl7K
Gf0MVDZTlGe21lqyDG97Ib0AygQwArzUZM48WtwInDgLx4MIJk2QPpmGg7JGGHxS
fGFTxr4njBFAZ9ep3h2GO18hzedsv+oU2SyMEBmyyc6eChfn4NV9CTkM+yWUeD87
ytjxyw9m3kemRrLR0rt1ab0BImUaALiaGAmft3yeTisiuxh2s3lj6UKe+5WFxq6b
/70HVRGMgGWawlkgtDcNfWQH/qcwnZ4aZTYwmrHJJLcdxNF8rPm5Am1mQC97QtsI
peKv4Xx64v+YVY277rmzcuzUSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuiTICi
2yKqp3YoYDkebsso2CFqMB8GA1UdIwQYMBaAFEV9t2bhsNak3Mf5rs0ofU3D5wye
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xMjA4NUQxODc0
MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFxVGN4X211elNoOVRjUG5E
SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1JYMjNadUd3MXFUY3hfbXV6U2g5VGNQbkRKNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTkyRi8xMjA4NUQxODc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFx
VGN4X211elNoOVRjUG5ESjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0QI2xu7ZZF8du0SHQe1Jxest0nowaS3YGQ/EnDKA1HRYEK0+KKgN4
JDGADUmCnCcQNM0oPMHIGnj3E6CcSJM3nQQ55utlEBHxHXbL3V3U2rt2BR46Qb01
3af8uyI97k+Q6x8p+0AD/ORNlLaip/kk+RFn8+Jafjwa5xx6+NLlMTDSQpLN1B6R
d62qxqbbWxNJU5kv2/M2udLrO2sj/egyBO4LL3KlZhxVpGno8iJmh5/+pBhjQu+Q
Lco5oxRDFXcPqCGK75vDJhJY4ucdKMNFyEOAxKJCpnXOLPJjiAJxzXemRMn2KeJQ
J+3RsIMRCOXzxGRQXEG7dNWB4QTVd10t
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:31 2026 by rpki-client