This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
File: mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft (raw, json)
Hash identifier: XdQzCbrdmwntu28k5ktUtq7s1Pe5I/aCzxxhSqMdV1I=
Subject key identifier: D6:E3:9A:13:D7:91:47:D0:C9:3B:41:D3:FC:55:27:B8:F2:A4:91:1A
Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Certificate serial: 05EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
Manifest number: 05E3
Signing time: Sat 10 Jan 2026 22:15:21 +0000
Manifest this update: Sat 10 Jan 2026 22:15:21 +0000
Manifest next update: Sat 17 Jan 2026 22:15:21 +0000
Files and hashes: 1: mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl (hash: whHgwe4UZs2MDz4giJOyVXPh8UicOWNO1wWmCOFUG18=)
2: C4CB04C4E2A911EBB4631960C4F9AE02.roa (hash: w5XSagCBbj7wYrqd/6P5FJGCYb7FRwj35SS+I3gJcAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl
rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 22:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1514 (0x5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B6C, serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Validity
Not Before: Jan 10 22:15:21 2026 GMT
Not After : Jan 17 22:15:21 2026 GMT
Subject: CN=6962cf79-cc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:65:9e:8b:c3:72:04:f6:ec:b4:c6:3a:55:
33:f1:95:bf:df:61:c3:44:68:da:ec:09:b4:f8:ad:
1a:a1:2c:3f:7b:b0:e9:3b:c1:11:d1:01:18:da:4a:
a0:6b:dc:d7:7b:ef:6d:c7:cc:f9:b6:3d:90:c7:c8:
e8:28:ca:8d:15:85:64:74:92:9c:b2:b3:9a:ec:f6:
63:42:c7:ea:22:8f:2f:f1:41:99:de:a6:2c:53:ce:
d0:be:13:be:d4:33:a9:f0:95:53:6c:b5:83:a1:79:
bb:fc:6c:22:46:54:71:6c:e6:c2:08:37:d9:6a:2c:
62:e6:81:cd:4f:ac:4c:04:79:45:b4:e6:38:fc:54:
c0:f2:e7:a8:16:f2:36:4d:38:91:23:40:ae:75:fc:
d0:5d:f2:c0:3c:00:68:e7:cb:11:f5:f8:db:eb:34:
8c:29:c8:df:9e:07:10:9c:4d:d2:fc:d9:b3:5a:0e:
ae:2e:06:ee:79:8d:52:4f:71:a4:aa:b9:f0:04:cb:
b7:8c:5d:9a:d5:68:13:60:28:f3:80:88:49:a5:b4:
6f:b0:bb:57:fc:95:75:75:bc:2c:cb:63:af:f6:4b:
27:df:5f:93:00:91:3a:38:14:1b:3d:71:55:34:8b:
58:34:93:fe:8e:aa:88:c6:14:56:06:9f:05:d7:31:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E3:9A:13:D7:91:47:D0:C9:3B:41:D3:FC:55:27:B8:F2:A4:91:1A
X509v3 Authority Key Identifier:
keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:b5:1b:a5:63:e4:98:3e:d2:59:21:f3:b7:3f:3e:b0:16:d2:
ac:9a:3f:c2:ed:6c:8d:98:df:5f:dd:bc:ad:e6:fd:e5:1e:5c:
ef:84:c5:d0:40:e7:07:d2:2c:72:98:34:21:87:42:d9:b7:4f:
84:e9:ed:1b:a0:3f:e3:9e:6e:28:76:2d:5b:0e:33:77:0e:de:
31:fa:0b:0a:98:f8:aa:0e:86:76:a1:08:38:c2:c9:92:26:54:
87:46:95:2c:68:f3:a7:93:53:5f:27:b9:cf:5b:76:f5:9d:df:
75:86:d8:4b:48:34:ac:08:0b:b4:00:2f:2b:7c:2c:29:59:a4:
5f:da:4c:14:14:21:f3:62:58:0a:7e:9c:95:d3:8f:0c:2c:05:
88:c4:14:a4:8b:bf:01:cc:41:47:17:e1:a7:f9:b7:b7:0a:2f:
ba:b2:58:56:c4:01:7c:ee:01:23:75:64:91:59:46:c1:b5:a0:
db:41:75:09:90:b3:c1:f7:10:24:d4:3e:e9:07:df:f4:05:76:
7d:df:9d:0c:86:bf:8b:8f:00:32:89:6b:ec:a3:ee:05:ad:90:
ca:ac:36:9f:bb:cd:b4:bc:ac:a5:61:3d:ee:9a:0b:12:a7:04:
d9:1a:23:04:6b:6e:2e:9a:f7:2f:88:3f:a9:5c:37:75:95:d9:
ea:ec:7f:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNCNkMxMTAvBgNVBAUTKDlCMDlFOTVGRTQ2QUJEQkM5RjkwMjA1ODVGOUE1ODMy
Njc3NzNGQzkwHhcNMjYwMTEwMjIxNTIxWhcNMjYwMTE3MjIxNTIxWjAYMRYwFAYD
VQQDDA02OTYyY2Y3OS1jYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqr5lnovDcgT27LTGOlUz8ZW/32HDRGja7Am0+K0aoSw/e7DpO8ER0QEY2kqg
a9zXe+9tx8z5tj2Qx8joKMqNFYVkdJKcsrOa7PZjQsfqIo8v8UGZ3qYsU87QvhO+
1DOp8JVTbLWDoXm7/GwiRlRxbObCCDfZaixi5oHNT6xMBHlFtOY4/FTA8ueoFvI2
TTiRI0CudfzQXfLAPABo58sR9fjb6zSMKcjfngcQnE3S/NmzWg6uLgbueY1ST3Gk
qrnwBMu3jF2a1WgTYCjzgIhJpbRvsLtX/JV1dbwsy2Ov9ksn31+TAJE6OBQbPXFV
NItYNJP+jqqIxhRWBp8F1zFAywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbjmhPX
kUfQyTtB0/xVJ7jypJEaMB8GA1UdIwQYMBaAFJsJ6V/kar28n5AgWF+aWDJndz/J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I2Qy84QjA4OTIwQUUy
QTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZieWZrQ0JZWDVwWU1tZDNQ
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL213bnBYLVJxdmJ5ZmtDQllYNXBZTW1kM1A4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
M0I2Qy84QjA4OTIwQUUyQTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZi
eWZrQ0JZWDVwWU1tZDNQOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA0tRulY+SYPtJZIfO3Pz6wFtKsmj/C7WyNmN9f3byt5v3lHlzvhMXQ
QOcH0ixymDQhh0LZt0+E6e0boD/jnm4odi1bDjN3Dt4x+gsKmPiqDoZ2oQg4wsmS
JlSHRpUsaPOnk1NfJ7nPW3b1nd91hthLSDSsCAu0AC8rfCwpWaRf2kwUFCHzYlgK
fpyV048MLAWIxBSki78BzEFHF+Gn+be3Ci+6slhWxAF87gEjdWSRWUbBtaDbQXUJ
kLPB9xAk1D7pB9/0BXZ9350Mhr+LjwAyiWvso+4FrZDKrDafu820vKylYT3umgsS
pwTZGiMEa24umvcviD+pXDd1ldnq7H8J
-----END CERTIFICATE-----
Generated at Mon Jan 12 02:16:51 2026 by rpki-client