This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
File: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft (raw, json)
Hash identifier: QytUutaDq4CEXqX6tRh70lCqq0klIqApERqFCHrx2BY=
Subject key identifier: 27:02:DE:80:15:0F:3E:89:3B:FC:DA:66:B6:1B:75:BD:B7:25:1E:5A
Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7
Certificate issuer: /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
Manifest number: 0117
Signing time: Tue 20 Jan 2026 16:07:39 +0000
Manifest this update: Tue 20 Jan 2026 16:07:38 +0000
Manifest next update: Tue 27 Jan 2026 16:07:38 +0000
Files and hashes: 1: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl (hash: /z8g5imc0X5daDm9WYyOdh6/B6T8VBDze/2/txenDso=)
2: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (hash: JMbPewXmvsjUnAdQz322CY8L97yt7N2HMn/pCZCh18Y=)
3: 626CA672591911EFAF1F1D23C4F9AE02.roa (hash: 6GbekInjca9Aq9cE7WNeTESe36RL55OnHAPU5HMbtxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl
rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 16:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
Validity
Not Before: Jan 20 16:07:38 2026 GMT
Not After : Jan 27 16:07:38 2026 GMT
Subject: CN=696fa84b-44f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:ae:4e:d2:94:cf:bc:de:76:b4:8f:a0:12:
b1:6e:d0:4f:4d:e0:eb:d3:88:09:65:e5:bf:83:0c:
24:71:60:ef:7a:a1:a5:14:82:8d:c7:b3:4a:fa:f9:
af:7c:42:7b:13:16:31:3b:e0:b8:be:b1:ab:35:b1:
bb:1e:71:94:24:08:da:29:09:dc:ae:f8:a4:5c:30:
64:0a:76:cd:b9:57:2f:50:2a:8b:5f:01:5c:b5:54:
56:ae:a8:c5:0b:6b:b2:a7:c8:20:10:f5:c0:48:e0:
37:1b:92:f7:ff:16:35:c7:de:67:39:7b:06:51:46:
94:50:9e:4a:9a:11:10:50:1a:fc:ad:b8:74:0e:53:
3b:7d:ff:ec:a4:c6:30:8e:db:dc:af:03:56:59:a3:
86:7e:bf:8a:53:ed:ae:37:ff:a4:76:00:7c:c8:f1:
2b:1d:99:aa:b4:bd:28:72:8a:7b:1e:17:16:5a:35:
dc:25:e8:ce:24:53:a2:b4:fa:85:04:aa:d1:7d:06:
21:10:01:10:e9:d5:b2:41:a4:ce:3b:72:d7:e0:86:
1d:22:72:80:e2:1c:00:ef:4a:49:c4:8f:0d:7b:76:
13:41:7d:e5:b5:d1:6e:7e:ce:7e:15:11:55:46:3e:
df:25:2a:cd:9d:b8:09:1e:fb:47:97:7b:02:49:c1:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:02:DE:80:15:0F:3E:89:3B:FC:DA:66:B6:1B:75:BD:B7:25:1E:5A
X509v3 Authority Key Identifier:
keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:76:f1:db:cc:69:7c:eb:8c:22:4e:4a:c4:5d:c9:52:5c:17:
fa:e7:2f:21:4c:ae:6e:49:03:30:d7:dd:57:cd:17:b7:3e:21:
69:9b:2d:ca:24:92:e5:29:67:1a:e3:a8:15:da:3b:71:ed:8a:
26:bd:83:82:b7:3c:8b:c5:34:3d:65:c3:45:ec:aa:1c:e8:11:
5b:e5:38:4f:cc:0e:16:ec:c9:71:b5:3e:00:35:ee:a9:71:bb:
42:31:8b:b5:da:41:cf:57:2c:44:df:7a:9d:00:45:c5:17:d6:
e4:e1:04:0b:44:10:0d:3f:a9:33:be:b7:a1:c9:6b:3f:1e:ba:
5e:e3:8c:92:8b:24:7d:f6:c6:15:67:03:48:4e:98:ab:53:c6:
11:a4:23:66:8b:50:a5:13:21:78:4c:37:83:47:87:d1:26:8f:
68:a7:6f:5d:18:c9:f8:57:49:a1:aa:ed:4e:02:f1:89:fe:1d:
cb:b7:7a:c7:cd:cd:18:c8:0e:90:4a:dc:81:57:14:c8:94:71:
c2:c8:bc:65:d0:90:03:b2:1b:7f:16:f2:8e:ec:4a:9c:b1:20:
1a:15:9f:2b:60:40:6f:1e:32:80:bd:00:94:5b:6b:de:52:62:
57:10:f9:02:ad:30:66:fa:8d:c8:26:2e:5f:81:ee:10:05:f4:
07:82:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:32:05 2026 by rpki-client