This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json)
Hash identifier: 9E8DxxMPBhv9TO0vADj+s8IAMoIvS4sSnZYQNo36RN8=
Subject key identifier: EE:42:0E:D6:79:53:CC:6D:D3:E4:BA:AE:FF:1A:BE:79:2B:A8:B7:8E
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
Manifest number: 020E
Signing time: Thu 29 Jan 2026 02:23:09 +0000
Manifest this update: Thu 29 Jan 2026 02:23:09 +0000
Manifest next update: Thu 05 Feb 2026 02:23:09 +0000
Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: GVstsK7nywBX0CSGAGW5WMbUGT4hVffw7j+BzbW84Vs=)
2: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: edUlYrUcw9nemw/UT7S46VmgpUXLu0gAESR1RTk4AOI=)
3: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: 7OyWzhEYc1OoBkrdP9NnWA0PjS6KslbL/GgGS4z8wV0=)
4: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: G2el60zyW5DLxxUiqRoxyHbxi0YhTWGIRCSb/KhXW78=)
5: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: HvV48I109s9+Qsv4Wno42zSr43P6rFtI4uz1VW60NvA=)
6: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: KXiWnH7RLdD8k1bKnrw/NL0MoMgP+K3mZfrXszKRO+k=)
7: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: t1t5ERQK21Czu6UgrAaBph2clA23SD9Ihs9VsoqVI8k=)
8: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: tUG8yJiHn55iF+p5xuktjgNqO57AMcBScipLCgmp+AU=)
9: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: eTquNld5nLEFKYyMHLG1VzJGsnFO7+pijIq3z1S1zVg=)
10: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: yAhldKSbT9eXvW5YXq5JzADs625rpn5nRswKYZ3uyDM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 01:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Jan 29 02:23:09 2026 GMT
Not After : Feb 5 02:23:09 2026 GMT
Subject: CN=697ac48d-5f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:ab:db:6e:72:79:65:1d:f7:ed:ea:ca:d0:
1d:a7:39:5e:49:99:0d:0c:13:b4:64:ce:2d:77:7f:
23:af:c7:1a:5c:59:73:02:ec:00:d0:3d:13:17:ab:
d6:52:fb:4c:c1:30:c1:c0:0d:28:18:33:a0:9f:30:
46:d0:64:a2:4a:b0:eb:27:c5:af:d6:40:ef:bb:cd:
57:58:e4:c0:5b:19:1b:7a:73:81:22:54:ba:86:42:
81:96:d0:f6:a8:3a:d2:13:07:e6:d9:f2:64:99:27:
9e:73:25:8f:6c:72:21:96:29:bf:c5:55:ee:62:03:
f8:a7:8b:8f:66:e4:b3:0f:a2:64:2a:d1:1a:9a:a6:
f5:84:1e:bd:d8:c7:f1:ad:52:7f:19:3d:f6:30:51:
f4:4a:bc:da:57:25:a6:79:00:80:d7:a4:cb:39:ab:
f0:84:b6:4d:64:8e:4a:71:62:90:82:01:54:9c:ac:
a8:f8:b8:c8:f5:c3:e6:f7:47:9b:66:8a:e3:54:39:
68:b9:e5:6a:40:39:41:74:e6:db:8b:d6:2e:ea:53:
fb:c7:d5:fe:c9:74:38:22:20:12:89:47:7a:59:8f:
74:ce:e9:e2:5a:36:94:8e:3c:6d:c0:f3:b4:49:17:
f1:ee:60:1e:24:37:24:4b:82:97:ea:f8:c5:44:e9:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:42:0E:D6:79:53:CC:6D:D3:E4:BA:AE:FF:1A:BE:79:2B:A8:B7:8E
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:b1:85:b3:bd:fa:e9:94:5b:94:bf:86:6d:0e:14:24:42:08:
c7:f9:29:4f:5c:c7:20:6d:f0:d7:a2:b7:9f:cb:8f:70:d4:7b:
2a:99:0a:51:bc:b3:48:6b:51:c2:ef:de:44:8d:c7:e3:ef:50:
41:e5:32:5c:87:30:64:0b:f2:34:2d:47:2f:51:d5:67:6e:eb:
4b:61:38:62:8f:d4:3e:8e:71:b4:df:74:68:1e:53:cf:30:98:
9b:82:32:f7:38:15:e1:2b:0e:29:45:11:4d:8a:f4:88:44:4d:
1d:12:e5:1d:52:c5:0d:bb:e1:78:dd:34:fb:16:5b:b4:a3:29:
4b:fe:5c:5d:6d:92:1e:12:8d:f2:06:a4:95:6e:1a:7c:9f:f2:
ab:3c:95:e5:b4:fe:88:ca:f5:6b:74:fa:b7:11:e1:b6:87:f0:
29:d7:74:a0:ab:db:46:5a:67:26:e9:87:6f:34:05:2a:88:9e:
6d:0a:ef:8d:41:8f:11:83:75:74:c7:24:b5:8d:02:10:ed:e1:
ea:38:d7:04:80:61:8a:a8:bd:f8:e3:15:ae:5c:2a:b3:58:ce:
a1:92:d9:62:72:e7:aa:e7:b5:6a:21:e3:a7:18:9f:4d:6d:11:
6c:e6:3a:84:bc:d2:38:c8:09:04:7f:96:9a:bb:da:38:f4:6f:
93:53:d5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:30:53 2026 by rpki-client