This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
File: iOe1QfQimNbptRZdllJGzBzB9aI.mft (raw, json)
Hash identifier: ATMq4yvyQzMSsFwtbqxMmuPugnhKnA9HgVvBBi0Y2pw=
Subject key identifier: 2F:F4:12:8D:DF:F0:38:92:45:C3:48:63:DB:9F:98:F9:F6:C5:9E:AF
Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Certificate issuer: /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Certificate serial: 0FD4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
Manifest number: 0F99
Signing time: Sat 10 Jan 2026 17:15:46 +0000
Manifest this update: Sat 10 Jan 2026 17:15:45 +0000
Manifest next update: Sat 17 Jan 2026 17:15:45 +0000
Files and hashes: 1: iOe1QfQimNbptRZdllJGzBzB9aI.crl (hash: Frk2KgXDFi/33pNA2WhJoc5ptRTYFiqn3Uw+/aAgzd8=)
2: 13C1EDA8767911EE9A957930C4F9AE02.roa (hash: rMgdKojSnMQn5zP9ArOeE344pCaixcohoQsewhOoy54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 17:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4052 (0xfd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9D0F, serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Validity
Not Before: Jan 10 17:15:45 2026 GMT
Not After : Jan 17 17:15:45 2026 GMT
Subject: CN=69628942-3abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:2e:cc:1f:d0:93:db:15:3b:a7:d8:cf:a4:
16:b9:0b:c1:66:db:cc:1f:36:64:66:44:9d:e7:2b:
a0:9d:bd:87:d8:fa:79:43:69:67:ca:bf:bb:57:b4:
40:ac:75:63:eb:51:ff:10:73:93:c6:d8:d6:d8:41:
c9:3a:c7:e7:c4:7a:96:9c:26:5c:13:75:91:fe:48:
30:b2:1a:9e:f0:1a:bf:8d:f7:c2:53:fd:5e:67:d8:
f0:78:e7:67:b9:25:0d:a5:b4:e5:2b:99:40:50:bd:
84:e5:d3:bf:42:8f:33:1a:4b:c7:7b:27:00:3c:54:
06:53:02:7d:ee:0c:dd:2c:b4:2a:4c:39:b7:f9:3e:
93:e3:30:91:7e:57:db:97:72:98:63:a5:15:27:e2:
df:61:55:8d:e8:21:80:1f:c7:be:71:1b:f8:68:56:
87:bc:84:34:71:ba:6c:a2:80:d3:74:87:b3:dc:e1:
71:53:47:d1:62:50:40:87:c9:42:c5:9c:27:e4:99:
e0:41:93:f6:99:8f:07:2d:41:84:50:ba:62:fb:71:
68:4b:45:cd:30:90:ac:7c:ba:1a:54:ec:06:c9:de:
5a:88:7b:13:b5:1c:11:83:b0:f1:3a:13:bb:5d:9e:
98:00:10:0b:11:1c:8f:de:0f:70:15:4a:20:a8:78:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F4:12:8D:DF:F0:38:92:45:C3:48:63:DB:9F:98:F9:F6:C5:9E:AF
X509v3 Authority Key Identifier:
keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c5:2a:ba:7c:8c:c3:be:c1:f7:e3:aa:0d:07:2e:e5:73:ba:
c0:de:0e:a2:7a:54:d9:3e:2c:12:95:36:87:17:e4:c1:1c:29:
fe:64:d5:0a:70:6d:fa:21:90:fb:a9:9c:ac:c0:30:7e:26:4d:
8a:d2:ad:e2:42:7d:b8:f0:c6:7a:4a:ec:8c:70:c8:3d:c8:2c:
2a:6d:8f:ec:79:82:f6:3f:fb:58:52:f6:97:bc:d1:77:14:74:
4a:81:99:7a:e0:7c:47:0d:51:6c:a8:34:47:40:e9:9e:9d:b9:
d3:0b:6f:07:04:c4:77:08:d0:cf:d0:ca:2b:eb:86:b7:65:74:
d6:c6:0b:b3:3a:05:31:c6:74:85:93:a5:67:63:a0:9d:31:d6:
7d:3e:f1:c7:3a:af:bb:ab:ff:88:d9:c1:c4:7d:c4:89:11:d6:
82:fd:e9:25:7d:92:f3:66:61:50:47:a1:1e:df:a6:b2:e4:c3:
43:db:63:dd:ea:41:68:12:48:eb:5e:bd:2f:27:6f:b3:60:db:
ab:60:e9:ad:5a:8c:02:47:a7:b6:5d:3b:26:5d:f2:3f:6e:6a:
73:de:15:cd:65:c7:a7:47:6d:fe:36:ef:e3:29:c1:aa:b5:89:
76:75:31:2e:76:c3:59:cb:39:2f:ed:8a:95:64:46:35:62:63:
09:54:1e:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlEMEYxMTAvBgNVBAUTKDg4RTdCNTQxRjQyMjk4RDZFOUI1MTY1RDk2NTI0NkND
MUNDMUY1QTIwHhcNMjYwMTEwMTcxNTQ1WhcNMjYwMTE3MTcxNTQ1WjAYMRYwFAYD
VQQDDA02OTYyODk0Mi0zYWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuLcuzB/Qk9sVO6fYz6QWuQvBZtvMHzZkZkSd5yugnb2H2Pp5Q2lnyr+7V7RA
rHVj61H/EHOTxtjW2EHJOsfnxHqWnCZcE3WR/kgwshqe8Bq/jffCU/1eZ9jweOdn
uSUNpbTlK5lAUL2E5dO/Qo8zGkvHeycAPFQGUwJ97gzdLLQqTDm3+T6T4zCRflfb
l3KYY6UVJ+LfYVWN6CGAH8e+cRv4aFaHvIQ0cbpsooDTdIez3OFxU0fRYlBAh8lC
xZwn5JngQZP2mY8HLUGEULpi+3FoS0XNMJCsfLoaVOwGyd5aiHsTtRwRg7DxOhO7
XZ6YABALERyP3g9wFUogqHiuLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/0Eo3f
8DiSRcNIY9ufmPn2xZ6vMB8GA1UdIwQYMBaAFIjntUH0IpjW6bUWXZZSRswcwfWi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUQwRi83NEJFMzhENjgw
Q0YxMUU5QUNENzFCNTBDNEY5QUUwMi9pT2UxUWZRaW1OYnB0UlpkbGxKR3pCekI5
YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lPZTFRZlFpbU5icHRSWmRsbEpHekJ6QjlhSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUQwRi83NEJFMzhENjgwQ0YxMUU5QUNENzFCNTBDNEY5QUUwMi9pT2UxUWZRaW1O
YnB0UlpkbGxKR3pCekI5YUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBcxSq6fIzDvsH346oNBy7lc7rA3g6ielTZPiwSlTaHF+TBHCn+ZNUK
cG36IZD7qZyswDB+Jk2K0q3iQn248MZ6SuyMcMg9yCwqbY/seYL2P/tYUvaXvNF3
FHRKgZl64HxHDVFsqDRHQOmenbnTC28HBMR3CNDP0Mor64a3ZXTWxguzOgUxxnSF
k6VnY6CdMdZ9PvHHOq+7q/+I2cHEfcSJEdaC/eklfZLzZmFQR6Ee36ay5MND22Pd
6kFoEkjrXr0vJ2+zYNurYOmtWowCR6e2XTsmXfI/bmpz3hXNZcenR23+Nu/jKcGq
tYl2dTEudsNZyzkv7YqVZEY1YmMJVB4T
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:08:16 2026 by rpki-client