This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json)
Hash identifier: csBy/jxKAPmyEAK6JtelbdZs+7UKIL8zY0gNa/oNA8I=
Subject key identifier: 2C:31:0A:91:EB:D2:38:DE:C7:F1:F5:1E:8C:9B:5D:FC:EB:95:EC:EC
Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00
Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
Manifest number: 01D7
Signing time: Tue 27 Jan 2026 02:00:19 +0000
Manifest this update: Tue 27 Jan 2026 02:00:19 +0000
Manifest next update: Tue 03 Feb 2026 02:00:19 +0000
Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: mPySSDF21AcxN9WGeQgybfz4OEAEfwWD4GXvg7/w78M=)
2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: ZqsBefU5j7GUz5qH7o82aafqjpUX9O/Biz1HkkL6OG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl
rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00
Validity
Not Before: Jan 27 02:00:19 2026 GMT
Not After : Feb 3 02:00:19 2026 GMT
Subject: CN=69781c33-fb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ea:a2:7d:da:07:aa:4f:b5:ff:1f:6c:e8:3b:
4c:04:1f:b4:de:b4:16:8d:2f:10:2b:d0:24:a3:2d:
d0:58:6e:a1:fc:fa:e7:5c:f5:f8:28:0f:65:01:af:
7f:10:5c:2f:74:c1:af:62:82:af:39:e6:d0:40:d1:
46:6b:f6:15:33:ee:b9:fe:55:26:d7:b3:9d:78:2b:
d3:26:27:c0:9b:22:44:a2:73:46:64:e2:3c:f6:3e:
af:d4:d7:cd:7d:23:16:5d:c2:5b:51:3d:9c:12:3e:
9d:f0:0c:36:9c:ca:f1:a2:3c:b2:8f:09:6b:1e:8e:
6f:7b:b0:44:1e:ed:f8:76:06:c7:81:d5:3a:ef:8d:
0f:4d:2a:be:22:1f:70:95:64:35:07:e0:21:8a:a8:
5a:ef:cf:b8:c2:24:2d:97:a1:4b:b7:b8:6b:74:67:
e6:88:11:8e:21:09:6d:d6:0a:40:5f:07:cf:bc:0c:
88:30:77:76:bb:ad:2f:e1:57:a3:34:f4:55:4b:05:
da:a3:01:a9:d4:ee:6e:02:61:49:31:64:ef:b0:5e:
a9:8d:a6:d1:c8:49:46:01:c6:75:03:9d:7f:43:e6:
b7:61:1d:da:1f:1a:99:98:c7:6d:54:34:2d:a4:e9:
71:82:95:a1:3b:de:9e:63:8a:78:d1:8d:37:78:31:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:31:0A:91:EB:D2:38:DE:C7:F1:F5:1E:8C:9B:5D:FC:EB:95:EC:EC
X509v3 Authority Key Identifier:
keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:a3:f4:cf:9a:2a:52:a3:78:a6:3e:96:d1:34:6d:20:ae:35:
26:77:00:8b:d4:a2:21:8d:b3:6d:f6:14:5b:12:61:8e:69:22:
7d:f3:3a:ff:4a:da:8a:86:d1:c2:9a:38:e5:81:d7:b2:9a:fb:
90:10:8e:10:9e:e6:4d:5f:7b:bb:3a:86:4c:ac:c2:2f:8c:d3:
79:0f:e4:8c:28:6f:2f:04:90:1b:46:d6:1e:08:cc:c3:1d:f2:
af:fa:24:62:b6:1a:3a:e0:90:7c:ae:36:4e:3e:a4:0a:f9:d5:
41:89:31:61:c6:5c:7e:4e:a9:0e:3b:15:8f:06:57:f1:07:7f:
0e:1c:fc:72:4d:7f:4a:5d:59:c9:7e:57:09:f5:56:75:80:70:
81:f0:36:82:20:09:95:92:a0:45:3e:6d:3a:6c:68:d4:08:df:
24:a7:d0:c6:f9:45:41:9d:57:1c:a5:bb:75:2e:6b:78:b9:6f:
97:23:65:46:7f:8f:a4:c4:99:4d:f8:68:c8:16:47:b3:e1:a6:
a5:65:db:84:91:f5:94:30:f1:f0:e3:a9:f8:8c:cf:5c:fd:ab:
d9:19:1c:64:e3:8f:60:a8:3b:48:1e:0c:a7:94:07:84:e9:5c:
90:eb:2c:50:91:a3:17:ce:80:31:22:6f:c4:48:be:ed:bb:c6:
3f:9d:ba:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2
QUFDN0JCMDAwHhcNMjYwMTI3MDIwMDE5WhcNMjYwMjAzMDIwMDE5WjAYMRYwFAYD
VQQDDA02OTc4MWMzMy1mYjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmuqifdoHqk+1/x9s6DtMBB+03rQWjS8QK9Akoy3QWG6h/PrnXPX4KA9lAa9/
EFwvdMGvYoKvOebQQNFGa/YVM+65/lUm17OdeCvTJifAmyJEonNGZOI89j6v1NfN
fSMWXcJbUT2cEj6d8Aw2nMrxojyyjwlrHo5ve7BEHu34dgbHgdU6740PTSq+Ih9w
lWQ1B+Ahiqha78+4wiQtl6FLt7hrdGfmiBGOIQlt1gpAXwfPvAyIMHd2u60v4Vej
NPRVSwXaowGp1O5uAmFJMWTvsF6pjabRyElGAcZ1A51/Q+a3YR3aHxqZmMdtVDQt
pOlxgpWhO96eY4p40Y03eDEQuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwxCpHr
0jjex/H1HoybXfzrlezsMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB
QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw
TXYyZ0hBdjZZbTlxckh1d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCAo/TPmipSo3imPpbRNG0grjUmdwCL1KIhjbNt9hRbEmGOaSJ98zr/
StqKhtHCmjjlgdeymvuQEI4QnuZNX3u7OoZMrMIvjNN5D+SMKG8vBJAbRtYeCMzD
HfKv+iRitho64JB8rjZOPqQK+dVBiTFhxlx+TqkOOxWPBlfxB38OHPxyTX9KXVnJ
flcJ9VZ1gHCB8DaCIAmVkqBFPm06bGjUCN8kp9DG+UVBnVccpbt1Lmt4uW+XI2VG
f4+kxJlN+GjIFkez4aalZduEkfWUMPHw46n4jM9c/avZGRxk449gqDtIHgynlAeE
6VyQ6yxQkaMXzoAxIm/ESL7tu8Y/nbpE
-----END CERTIFICATE-----
Generated at Wed Jan 28 18:43:32 2026 by rpki-client