This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
File: DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json)
Hash identifier: gMyvAOrfy2Gr3iMhbE+xHZ2vSFKcLVDqlvAYToJz1xs=
Subject key identifier: 64:21:1D:C2:CD:51:1B:59:75:3E:54:E9:4A:63:75:0F:96:24:04:9C
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Certificate issuer: /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
Manifest number: 0174
Signing time: Tue 27 Jan 2026 03:08:55 +0000
Manifest this update: Tue 27 Jan 2026 03:08:55 +0000
Manifest next update: Tue 03 Feb 2026 03:08:55 +0000
Files and hashes: 1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: qF4SoijyoCzE8iUc7mgCnaS3vevRouOkfqGAw203P6w=)
2: 79F7221E892911EF896D1145C4F9AE02.roa (hash: hGdMrY8+O6zApibMjg/vy58aibxku7iV/ch2aVDa82w=)
3: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: 1Q/6I9YvTdRroG4PgU/vX7AvoYDmVeBiDmXzSwZyFRo=)
4: F278C026892911EFB08D7746C4F9AE02.roa (hash: Vz6AnYUqxQMrtm1fqPuY9YKct5u+kfmwLL8MJ80Qjc4=)
5: F8B24A3C127911F09BCB8B7AC4F9AE02.roa (hash: v+1b4BSfVaZyzyzYkzqzeT7Ee1I3/7A+8jt9kQpxCPc=)
6: 9B6126AEE1D811EF881A2765C4F9AE02.roa (hash: A9dIkj8J76tWHGXSX/3Ud9jZf1nkfnJcE726ptgm7cw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 03:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Validity
Not Before: Jan 27 03:08:55 2026 GMT
Not After : Feb 3 03:08:55 2026 GMT
Subject: CN=69782c47-bc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:0c:ed:dc:7f:20:e8:16:65:ae:55:bf:7a:
95:f2:ef:ad:a7:22:22:34:6d:cc:29:ca:2f:0e:1f:
de:46:23:8c:c8:6e:4c:45:d3:6c:82:95:3f:1a:45:
69:72:36:35:c1:97:e3:89:59:a5:83:14:7b:b1:2c:
34:a1:e1:5c:40:8a:80:1b:d6:41:c1:ba:cb:83:61:
4a:fc:6b:af:a5:14:f9:8b:d8:b9:eb:40:c0:60:b2:
2e:cc:40:aa:f5:b0:46:0f:8f:0e:e6:1d:6b:b7:2a:
54:ec:58:c5:a2:23:e2:8f:bf:7d:cc:c2:f3:e5:38:
a9:5c:47:a7:fc:58:c9:ac:c9:69:ed:a9:c7:cb:d7:
60:82:a3:ba:8a:f7:8a:0c:61:69:41:b5:8c:be:08:
42:8c:39:2f:9e:b5:39:c9:12:4a:c1:06:df:7c:7b:
5b:7b:34:60:01:4d:98:41:96:e9:ab:85:06:95:7e:
40:a6:0f:c4:a7:9a:1c:5c:ac:b0:b0:88:66:ea:28:
04:1b:a3:50:1f:4f:87:55:20:12:ee:74:93:0a:50:
9b:d3:4b:8b:3f:4b:6e:e1:46:e1:17:22:ad:e6:36:
31:ce:ee:08:84:b3:6a:34:bf:54:dd:94:29:10:2c:
b9:72:61:3a:73:b2:ac:5d:16:6c:6e:f2:74:4f:7a:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:21:1D:C2:CD:51:1B:59:75:3E:54:E9:4A:63:75:0F:96:24:04:9C
X509v3 Authority Key Identifier:
keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:55:d8:6d:e3:5d:10:a5:98:79:77:b8:00:f4:1a:24:c4:01:
e6:13:48:04:ff:af:e3:ac:84:a0:3d:db:10:c4:17:e7:bc:53:
ef:17:81:bb:4d:86:68:8c:2c:a4:62:59:52:94:d2:97:2b:03:
15:e1:5f:de:b1:7b:f8:22:e6:67:77:28:fa:1e:e0:0b:bc:e6:
40:fc:70:bc:1f:cf:f3:87:42:d3:42:8a:49:1e:bc:5e:b7:04:
4a:ce:3e:37:00:b0:ed:8a:29:31:93:2c:60:e0:69:f4:e0:92:
95:49:3f:8f:59:84:a2:4e:52:7f:a9:08:8b:99:87:f9:cc:a0:
ed:a9:18:97:c5:bd:75:6e:50:48:35:01:68:86:a8:16:d1:f3:
6a:7b:f7:03:52:94:c1:94:d9:64:91:60:01:10:21:07:b1:a1:
5a:9f:61:42:ce:96:28:09:65:43:79:4a:a0:43:01:ad:ee:80:
42:3f:62:ee:92:85:14:5f:37:c0:ec:a6:69:74:4b:ec:3b:e7:
8d:9e:66:e9:d2:23:73:12:5c:3f:98:7e:b2:ba:00:35:30:77:
39:c0:38:71:38:79:ce:33:76:89:b1:32:80:08:06:e7:cd:42:
92:e9:8b:f4:42:3c:f8:96:ed:09:91:10:a9:74:19:84:f2:3c:
c6:a1:cc:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ4QzkxMTAvBgNVBAUTKDBDNzYyQjJDOTAyNEIzNEM5ODg0ODJGMUQ3MUQ3NDlB
RTdEQzRBRUIwHhcNMjYwMTI3MDMwODU1WhcNMjYwMjAzMDMwODU1WjAYMRYwFAYD
VQQDDA02OTc4MmM0Ny1iYzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3IIM7dx/IOgWZa5Vv3qV8u+tpyIiNG3MKcovDh/eRiOMyG5MRdNsgpU/GkVp
cjY1wZfjiVmlgxR7sSw0oeFcQIqAG9ZBwbrLg2FK/GuvpRT5i9i560DAYLIuzECq
9bBGD48O5h1rtypU7FjFoiPij799zMLz5TipXEen/FjJrMlp7anHy9dggqO6iveK
DGFpQbWMvghCjDkvnrU5yRJKwQbffHtbezRgAU2YQZbpq4UGlX5Apg/Ep5ocXKyw
sIhm6igEG6NQH0+HVSAS7nSTClCb00uLP0tu4UbhFyKt5jYxzu4IhLNqNL9U3ZQp
ECy5cmE6c7KsXRZsbvJ0T3pi/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQhHcLN
URtZdT5U6UpjdQ+WJAScMB8GA1UdIwQYMBaAFAx2KyyQJLNMmISC8dcddJrn3Err
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhDOS9DRkMxMEUwQUNF
OTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3MweVloSUx4MXgxMG11ZmNT
dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RIWXJMSkFrczB5WWhJTHgxeDEwbXVmY1N1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDhDOS9DRkMxMEUwQUNFOTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3Mw
eVloSUx4MXgxMG11ZmNTdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDVdht410QpZh5d7gA9BokxAHmE0gE/6/jrISgPdsQxBfnvFPvF4G7
TYZojCykYllSlNKXKwMV4V/esXv4IuZndyj6HuALvOZA/HC8H8/zh0LTQopJHrxe
twRKzj43ALDtiikxkyxg4Gn04JKVST+PWYSiTlJ/qQiLmYf5zKDtqRiXxb11blBI
NQFohqgW0fNqe/cDUpTBlNlkkWABECEHsaFan2FCzpYoCWVDeUqgQwGt7oBCP2Lu
koUUXzfA7KZpdEvsO+eNnmbp0iNzElw/mH6yugA1MHc5wDhxOHnOM3aJsTKACAbn
zUKS6Yv0Qjz4lu0JkRCpdBmE8jzGocyG
-----END CERTIFICATE-----
Generated at Tue Jan 27 08:37:46 2026 by rpki-client