This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
File: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft (raw, json)
Hash identifier: wbEoW3aU4LDwKdp3OmwoRHjXbDyZwAMWbBX8j928puM=
Subject key identifier: 9C:61:CD:D8:EE:47:E4:83:3E:EB:DC:A0:09:8B:41:25:60:A8:D2:57
Authority key identifier: F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB
Certificate issuer: /CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
Manifest number: 01A2
Signing time: Sun 11 Jan 2026 02:35:22 +0000
Manifest this update: Sun 11 Jan 2026 02:35:21 +0000
Manifest next update: Sun 18 Jan 2026 02:35:21 +0000
Files and hashes: 1: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl (hash: IKncHAArP0YtI50d68svlgn4tUpgX1wp2T+Anj1vuOA=)
2: 37E179CC6F0011EEAFD97016C4F9AE02.roa (hash: 0EXIo+3jT2LrdvdE+EYM/ALiqqQUvx4lMi+70Kb3xlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl
rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 02:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1B9F, serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
Validity
Not Before: Jan 11 02:35:21 2026 GMT
Not After : Jan 18 02:35:21 2026 GMT
Subject: CN=69630c6a-59c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:4f:0f:24:b4:4f:30:47:71:c0:86:34:c8:
f9:26:27:c5:81:32:0f:93:82:ad:c0:6b:c9:6e:1f:
28:8f:6b:fc:79:13:9c:76:02:df:62:43:f9:28:a0:
32:d1:63:68:f6:e0:08:54:c3:45:a6:b2:9c:d1:83:
fb:f5:f4:19:0c:81:2a:d0:59:12:70:53:63:34:87:
08:8e:1c:f0:e5:2b:78:ef:33:46:71:8a:9d:04:5e:
86:62:55:cc:c9:1f:2e:e0:17:8f:67:b4:b7:a7:1c:
4e:b3:7a:ab:91:a0:9f:f1:5e:28:4e:e4:38:4c:5b:
a5:63:27:b5:82:84:68:ec:9c:e8:5e:5d:2a:5b:3e:
75:96:6c:ee:6f:95:5f:d0:61:1b:c8:f9:46:04:f1:
c8:61:d3:93:d1:f0:0e:54:d9:89:58:76:45:93:8e:
b5:ae:5d:be:02:15:03:9a:d6:7f:f8:c8:2a:99:5d:
28:df:c5:76:2d:83:ab:9b:24:62:2f:a4:ba:41:a1:
5f:42:6f:bf:42:89:3d:2e:d1:6d:ce:4e:e9:92:22:
e1:4c:2b:3b:90:33:3c:6d:56:f2:44:9c:ad:11:0c:
e0:8b:8e:a7:36:a0:51:87:b8:ce:d1:d9:e1:a1:3a:
5a:6f:b5:21:14:83:53:20:09:9a:64:c4:21:4c:30:
1d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:61:CD:D8:EE:47:E4:83:3E:EB:DC:A0:09:8B:41:25:60:A8:D2:57
X509v3 Authority Key Identifier:
keyid:F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:c7:dc:c6:ca:a3:ee:c8:4d:48:04:f7:de:b6:02:c8:18:b5:
45:a5:35:ed:19:31:df:1f:1d:30:22:c7:e1:d7:c7:1e:d0:b6:
15:b9:c9:1d:ff:a3:49:42:e3:36:21:8c:eb:5b:66:e5:5f:65:
80:98:96:67:b6:71:58:4d:68:6a:18:f6:36:7d:0e:5b:9e:67:
11:48:61:6a:a0:2d:48:e0:c0:eb:c8:83:9a:9f:6b:a5:a4:f9:
e2:59:a6:a7:f3:3d:0b:2f:75:50:3c:f7:0c:ee:5d:fe:d7:f6:
ad:ce:ce:bf:ec:f8:98:dc:ad:68:96:df:f5:cb:a3:8d:98:1b:
21:0e:5e:3f:5a:c9:3c:7e:0d:55:ae:a2:e5:58:b8:59:76:cc:
8c:5a:49:aa:80:c0:db:86:af:90:e4:1a:b4:26:78:4a:e1:75:
c0:c4:38:e5:7e:ef:9b:78:d0:5b:36:72:22:c7:55:5f:d1:cd:
3b:85:5f:95:8c:b9:86:5d:88:ee:a9:53:47:b2:d0:97:33:8c:
38:4b:2f:e3:86:b9:90:74:21:49:27:30:8c:88:d7:22:1a:75:
a0:17:e6:af:9a:b1:0e:d1:07:aa:f9:68:cf:50:01:d3:15:05:
6d:3e:d8:fc:28:be:38:d7:cd:a0:80:4f:85:10:c4:95:6b:b6:
54:00:a6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 11:34:48 2026 by rpki-client