This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft
File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json)
Hash identifier: PpxHHAdyt0MjOoygK89S9Hk47cW+0dHqFWlA6v94jpc=
Subject key identifier: E6:1A:4A:B3:A8:55:B2:2A:CF:AC:C9:EE:54:ED:6A:1F:F8:EB:9B:07
Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09
Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft
Manifest number: 8B
Signing time: Tue 03 Feb 2026 06:22:00 +0000
Manifest this update: Tue 03 Feb 2026 06:21:59 +0000
Manifest next update: Tue 10 Feb 2026 06:21:59 +0000
Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: Fs4oJXA8rTpaKJhUa9StLYRppl3WCzJRvqS4WM+hIxw=)
2: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: 4EnYQ2VSNQD0o3dL265fkKkyLcx5j9mcOc/dYLCsIwo=)
3: 570B12E0562611F09F085F44C4F9AE02.roa (hash: CaHNy+5XgMUOPof5CFjhIu8D1eRPSffz8Arg3q0Y77U=)
4: E73A5E40A28C11F0A6491A72C4F9AE02.roa (hash: tcOXOuYgGu+RB0bUc2Sne4w/DApsR3iV2dNestsnCuc=)
5: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: xPkqxoVSxyXeKSaq5jtn4/m5jr8BJckiAgNe5WWb60U=)
6: CA5B991430E111F09B76D311C4F9AE02.roa (hash: KDnCMQ2nRjU0Va+lifX6vSdvj7g5AOqm8qx3ZCAL398=)
7: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: fV/0Vo51myrGthfe3wjSyvx/kYCAyZZZpPfFqvBV/w4=)
8: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: qvmxAIblo8LoVtJQCEVB0mOCUBhb2PQ/53hCphSqwWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl
rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Feb 2026 06:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409
Validity
Not Before: Feb 3 06:21:59 2026 GMT
Not After : Feb 10 06:21:59 2026 GMT
Subject: CN=69819408-416b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:a8:05:c7:1f:9e:b6:17:97:38:2e:b3:da:
c6:b3:18:18:f1:a1:78:7e:e3:f8:b1:36:ab:c6:45:
84:33:a7:53:ff:8c:f4:8c:e9:90:82:3e:ba:06:30:
19:72:8e:4a:6f:59:68:fa:05:e8:f9:c3:34:5d:8d:
11:0f:c2:de:96:c2:16:30:07:8b:d9:bf:df:ac:f4:
6a:14:ff:97:2d:d2:85:3a:cb:fb:91:36:85:27:c3:
5e:25:eb:8f:43:75:a0:8c:7d:6a:8c:94:95:18:de:
e9:71:b3:0f:b7:5a:83:3d:f2:13:50:cb:88:56:f8:
df:08:43:89:f3:08:4c:b8:3c:36:42:a4:3a:87:22:
8a:f5:94:f0:01:03:2b:55:17:b2:fc:59:80:a2:83:
04:27:53:57:ee:6f:52:1c:df:55:68:b1:86:7c:29:
67:2c:3e:20:0d:b9:7c:06:a8:7c:60:00:e5:f7:45:
d2:2e:90:da:a5:07:4e:73:a6:0c:a6:2c:60:9d:fa:
2d:c6:70:a9:34:d5:60:ec:55:e6:f4:3c:06:2d:46:
cd:09:ef:bd:f7:12:11:7c:6a:dd:95:7f:a4:38:c5:
1e:7d:49:12:d8:fb:44:c0:b3:0f:e4:91:e6:5b:c8:
99:40:bc:ea:97:37:cc:1e:02:2e:5f:0f:d3:38:6f:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1A:4A:B3:A8:55:B2:2A:CF:AC:C9:EE:54:ED:6A:1F:F8:EB:9B:07
X509v3 Authority Key Identifier:
keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:29:e7:44:86:03:61:a8:2d:3d:42:21:17:ce:2d:ee:05:50:
1f:e0:68:f6:50:50:5b:84:d9:79:60:d2:e0:b0:dd:41:f8:c2:
56:83:2a:13:5b:de:69:39:9c:31:3d:b4:b6:9c:eb:fc:6b:57:
3b:37:17:7f:70:b7:b7:2a:91:35:7e:ab:94:b4:22:35:0b:d0:
7e:61:2f:e8:7b:52:fc:15:87:0d:ad:7b:67:ee:fa:33:0c:c0:
16:4d:fe:e6:21:41:1d:db:73:2e:09:c5:3f:f7:28:d0:66:d3:
f6:b7:6d:4f:b6:de:80:14:0a:ba:ec:94:61:6c:6a:81:b6:ad:
be:0a:be:82:8e:4f:75:a2:f5:8d:45:ec:d8:11:e3:56:55:92:
ca:f0:59:1e:dc:04:10:e4:95:3f:ea:e2:a6:c1:55:53:4a:32:
c0:71:5d:40:4a:d3:11:3f:bb:d2:24:10:46:48:b2:d5:c2:2d:
a9:7d:78:8c:5b:3f:62:f8:2e:c1:36:18:94:05:e5:0b:bb:46:
7f:06:ca:be:2c:0d:7b:65:bc:d0:a5:7c:44:6a:7a:63:90:f5:
ac:a7:61:ab:24:e0:6d:0f:7e:6c:81:e4:51:df:30:6c:f7:7f:
61:3c:81:92:a1:62:f4:6d:62:f7:53:8d:ec:c1:eb:8e:df:22:
e3:84:fc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 08:29:59 2026 by rpki-client