This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
File: DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft (raw, json)
Hash identifier: IfYwFHmy/XQux4GtqOkvUnu6iOfOddkzlKvs2AcY9AM=
Subject key identifier: AC:A7:CB:5B:E7:6B:9B:61:04:A0:42:94:AB:B8:62:16:FD:29:05:83
Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
Manifest number: 58
Signing time: Tue 03 Feb 2026 07:04:37 +0000
Manifest this update: Tue 03 Feb 2026 07:04:37 +0000
Manifest next update: Tue 10 Feb 2026 07:04:37 +0000
Files and hashes: 1: DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl (hash: rympT7eFa8iZXGo53rZGiDMUnLCVSNAiA8vwt0GyeJE=)
2: 08B79AD09C4111F0A9483031C4F9AE02.roa (hash: pfN97xtI/DeRbJop2c9X92MygEUcxnLoB0XTR1dIrkw=)
3: 8EAC217CCA5611F089E70D44C4F9AE02.roa (hash: IiWhGRsjXczChP0MmoTW9Pkoc+QqwLTQPacvlkuiXu8=)
4: ABF8D808CA6D11F084F59728C4F9AE02.roa (hash: 4kagDiDwOK9DDKuYrOZLBx4t6wG2YIBPDsR0s/PYy+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Feb 2026 07:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Validity
Not Before: Feb 3 07:04:37 2026 GMT
Not After : Feb 10 07:04:37 2026 GMT
Subject: CN=69819e05-8940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:c9:04:5a:eb:db:27:11:4d:5d:19:dd:5b:
46:d8:5d:ed:a7:9e:6e:08:83:f7:86:9c:56:6a:f4:
cc:9c:89:04:18:c2:90:de:67:d1:af:4c:1a:e2:d8:
12:d2:cc:31:52:6d:46:37:ab:2c:40:5c:d5:d8:b0:
c2:f5:88:7b:6e:b3:eb:2a:53:85:33:32:a3:39:76:
df:3c:91:3d:dc:92:35:2e:e6:97:2b:b2:a8:6b:8a:
c6:09:c7:37:96:ab:74:49:70:e4:ff:c3:4c:72:a0:
3d:ec:a4:41:82:87:53:92:d8:77:d2:b9:f7:86:c4:
57:ff:cc:95:24:08:20:c4:6c:c6:2e:ec:87:53:ef:
3d:6e:f5:2f:70:a6:a0:3d:ae:0c:ee:2f:a9:d8:57:
ad:a7:20:1c:c9:8e:1d:97:31:b6:cb:66:ce:34:7e:
46:f1:08:ed:e0:0c:0c:e1:26:11:d2:35:35:80:ac:
b9:c9:8e:ee:50:32:26:06:20:4a:be:03:8d:5f:44:
57:f2:f9:2b:e6:12:4d:cd:72:2e:31:3f:24:fd:4c:
8e:ef:17:c6:66:1c:9e:c2:1c:22:a9:29:ca:01:de:
77:89:1d:2b:c0:5e:99:7b:15:56:fc:df:23:9c:c9:
9a:a7:45:6b:8c:5f:2e:11:60:20:72:eb:b8:a5:cc:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A7:CB:5B:E7:6B:9B:61:04:A0:42:94:AB:B8:62:16:FD:29:05:83
X509v3 Authority Key Identifier:
keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a0:e3:b2:0c:31:d2:5d:28:08:fa:8f:9d:a4:fd:c2:bf:61:
c1:46:fa:3f:d3:76:eb:f5:94:2b:ba:dd:15:19:d2:f7:a4:5d:
01:07:57:76:95:da:b4:58:62:90:23:f4:03:2d:23:ed:c2:cb:
22:b1:61:86:2b:5b:0e:5e:4f:7f:da:d3:55:4c:da:9f:cf:93:
51:62:7e:d4:86:b3:06:08:65:d9:4b:1c:b7:f7:7a:33:34:a7:
bc:f2:75:ce:0d:d4:9c:80:aa:e5:e7:7c:b1:ce:34:1b:c8:e1:
79:db:5e:5b:94:28:80:8e:2e:89:6b:d2:6c:73:6a:58:76:7a:
2f:eb:34:39:6b:ec:f3:34:04:de:f4:c4:84:bb:ea:6f:47:73:
2b:18:30:14:84:00:25:e3:4c:7e:e7:77:59:a7:13:45:15:c0:
85:b3:28:51:6e:da:51:f6:d1:a5:7d:05:a4:57:3b:fd:a1:e1:
a3:a5:a3:65:80:31:8e:90:6b:4d:75:e0:5d:be:cb:45:3b:fb:
d1:ba:71:c6:40:70:ff:69:21:66:b0:9a:31:51:88:be:3f:f1:
4f:22:d3:c3:4d:3e:7c:74:b6:e0:45:03:bb:ca:83:73:51:21:
a6:11:ab:08:dd:be:74:ba:60:72:10:a7:2d:66:e3:dd:b2:79:
a2:a1:32:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 14:22:22 2026 by rpki-client