This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
File: dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json)
Hash identifier: xU1PfiQNNlYO4gcj3YJo6ApzuBBRXDh2xRLwevEA6Cg=
Subject key identifier: DF:6A:C5:80:83:17:07:28:69:EA:A9:E5:A5:61:7D:73:54:79:5A:3B
Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
Certificate issuer: /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
Manifest number: 63
Signing time: Sat 17 Jan 2026 06:06:19 +0000
Manifest this update: Sat 17 Jan 2026 06:06:19 +0000
Manifest next update: Sat 24 Jan 2026 06:06:19 +0000
Files and hashes: 1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: QQfn6wlNQtyyU5nv3rjFUfVuV+2ZjXpwi1rDtDEhdEI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl
rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Validity
Not Before: Jan 17 06:06:19 2026 GMT
Not After : Jan 24 06:06:19 2026 GMT
Subject: CN=696b26db-5fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:89:8d:b7:82:2c:eb:38:8a:c3:90:d6:26:
c8:d7:1d:45:45:7b:a2:bf:32:5c:b9:da:df:bc:bd:
f2:f0:23:08:cb:7b:10:fd:19:93:c7:cf:cb:18:1f:
e1:31:6b:69:e5:07:8b:b8:b6:64:76:86:b6:ef:86:
72:fd:77:22:2c:3b:c6:e1:f0:8c:8f:85:68:af:b2:
ce:78:12:87:a9:79:f8:cc:2c:b9:6d:d5:93:73:ba:
be:cd:77:d5:39:68:a7:3b:88:6d:1e:71:43:b9:2f:
78:ea:81:64:86:eb:bb:86:b8:cd:f3:b0:96:79:a5:
4b:40:19:79:44:7e:ac:77:59:41:39:7d:97:1d:b0:
5c:6f:b1:32:0c:72:fe:b1:78:7e:da:b3:53:9b:b5:
18:68:87:0e:38:98:fe:31:17:c2:df:c3:da:a4:b3:
cb:1b:ec:d1:ae:f8:28:13:d6:3d:22:72:4f:7d:c5:
40:b9:fc:bb:88:52:09:63:ef:40:fe:b1:07:a7:9b:
9d:73:8f:97:b8:64:ae:19:6c:51:8f:d0:ed:c8:86:
b3:8d:c9:73:7e:a9:8f:71:e6:b1:b0:45:b2:63:e6:
e9:cd:06:f6:ae:bd:76:ce:2c:df:12:2f:ac:dd:e2:
d6:b9:7b:3f:da:5c:6b:06:a7:2a:04:8a:3c:f2:42:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6A:C5:80:83:17:07:28:69:EA:A9:E5:A5:61:7D:73:54:79:5A:3B
X509v3 Authority Key Identifier:
keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:47:2e:fd:e3:a1:95:b2:10:a4:b6:d2:b9:44:70:2d:5d:25:
6d:ad:93:4d:56:51:c4:50:43:df:4f:ff:40:ea:3b:09:81:62:
02:cf:30:06:d4:fe:e2:f7:2f:97:d2:11:ae:78:88:f5:e2:e0:
60:c8:79:b0:58:2b:ab:28:a2:8a:7f:26:92:28:ce:35:85:b7:
40:bb:bc:62:3e:6a:01:40:15:f5:d0:22:3a:8f:9d:0f:99:e9:
96:59:90:fb:9e:bf:fd:9d:59:da:5f:f2:96:05:b7:39:5a:da:
c0:02:87:58:d4:85:ef:9b:1a:ea:2b:ce:f1:cc:cc:ad:0a:e1:
56:71:ab:da:5a:fc:20:cb:11:9f:27:df:4f:eb:a1:d2:d1:aa:
2a:82:65:73:af:a0:83:90:33:3d:68:39:c7:9e:f4:d9:ca:c0:
22:f6:bf:b9:c4:a6:8e:93:82:ad:17:5d:52:9c:0c:d1:39:32:
e5:f4:11:13:b1:2e:92:8c:0d:52:8b:56:4a:1f:e6:c3:7f:bf:
8c:2a:82:38:4b:e7:de:28:4c:2c:8d:7d:3e:30:ae:22:0f:26:
e9:8a:50:6f:ea:39:a3:b8:81:36:c5:ba:f1:69:ba:c1:54:2c:
54:b8:bf:1d:75:af:14:7e:86:bf:94:ff:04:da:b8:28:ab:a5:
10:22:36:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:13 2026 by rpki-client