This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json)
Hash identifier: FA3HdQiXUqNxplWNOTASWd2ZIw9cbYOqYmo+KE3xq6A=
Subject key identifier: C5:2F:1E:30:60:9B:C4:44:A8:03:68:66:23:25:3D:A7:CE:06:75:54
Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Certificate serial: 6B4E9B5C501024D44EAF6A42AB8AB00C322C591F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
Manifest number: 022B
Signing time: Thu 29 Jan 2026 06:37:00 +0000
Manifest this update: Thu 29 Jan 2026 06:32:00 +0000
Manifest next update: Fri 30 Jan 2026 08:59:00 +0000
Files and hashes: 1: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=)
2: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: POeaLZ7jyGbDhNwka17vD8hm5iiL/jnjTj3d8a5jHPw=)
3: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: fSo775FhEkpS0wEAMYqZ/KEJ9a7+jPgFVCFu0VdJJ8A=)
4: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: 2pHYFNhpresl2Qe+bmQCdeuqTmZNLu6JpjLmSUgR1DM=)
5: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: LfF8fU+QkX6d5K08nkQmulF4/9qGZmobs40531E0EuE=)
6: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: ookmbsWFbg+9xHZ1MlZYR8C8SeTg9Fi1QoqMLsxk6Xs=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 08:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:4e:9b:5c:50:10:24:d4:4e:af:6a:42:ab:8a:b0:0c:32:2c:59:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Validity
Not Before: Jan 29 06:32:00 2026 GMT
Not After : Jan 30 08:59:00 2026 GMT
Subject: CN=C52F1E30609BC444A803686623253DA7CE067554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:ff:8e:1f:32:c1:0d:96:0e:0a:b9:2a:c9:
b0:aa:31:6a:ff:7e:c0:eb:81:ea:df:5f:35:8b:0a:
2b:f9:04:9d:46:13:11:88:cd:0c:88:2a:5a:02:0f:
89:7a:e0:3b:f6:24:a7:e2:d7:f2:20:70:0e:79:a8:
79:50:7b:9b:bc:4b:56:8d:ed:e8:b4:86:d7:f9:44:
7a:0e:ed:e9:9c:c2:d6:5c:56:32:94:90:bb:03:6e:
da:ae:f2:1f:e6:a5:e4:b8:61:03:08:d3:1d:cb:1f:
c8:8f:9e:b8:4f:a6:8b:66:69:4a:1f:e9:a5:9d:54:
63:dd:36:9f:73:89:25:e3:26:a9:42:a6:e6:77:03:
3a:40:b2:23:e6:15:54:ca:00:62:ae:13:be:f8:14:
54:17:07:d1:81:1e:d6:2f:b7:46:a6:01:75:4a:af:
17:ee:4b:60:fe:c6:6f:eb:4f:df:9f:dd:2a:95:65:
9c:f1:d4:72:ea:71:48:07:71:d0:d8:76:3d:51:85:
60:7e:ef:86:18:e5:e7:f1:42:4d:f0:d8:4f:cb:c8:
03:ba:bf:9f:ec:81:cb:10:34:8a:6e:29:a9:15:d4:
73:6e:6f:fe:94:29:c9:ec:47:99:f1:a4:fd:b3:ab:
1b:ec:fb:86:b9:c9:e7:ef:70:4a:20:32:08:80:d2:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2F:1E:30:60:9B:C4:44:A8:03:68:66:23:25:3D:A7:CE:06:75:54
X509v3 Authority Key Identifier:
keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f7:fd:17:94:6b:37:d7:59:d1:01:80:53:79:3c:36:e4:59:
10:74:0f:1e:e2:e4:67:1d:51:f6:ae:cf:61:14:29:c3:31:3d:
8e:c7:bf:67:8f:b4:16:1c:14:37:8f:94:50:b1:98:31:5b:f3:
6d:19:d3:ea:55:73:89:37:10:71:80:7c:70:e1:ff:16:d8:5e:
95:82:fe:19:0e:a1:ce:69:be:3d:ea:60:58:fd:f9:0d:84:4a:
76:b2:95:0c:d9:f0:7e:e0:03:0a:be:95:6c:24:77:eb:17:f4:
b3:44:fa:58:be:ed:e1:c2:0f:4b:9c:ad:23:95:4b:67:eb:67:
8c:cd:f8:0f:db:b6:d5:33:e9:a9:de:44:52:d4:20:d3:0e:f9:
88:0c:c2:46:e2:d2:41:1a:60:8d:33:63:37:7b:1b:4f:60:d7:
b0:78:93:29:1a:0b:e8:32:9f:e9:66:01:0f:93:54:6e:68:71:
37:c1:ea:9d:1d:b7:64:ad:2d:7c:1c:a0:ce:d0:0f:d6:3f:9f:
50:d5:4e:a6:cf:c7:5f:02:6f:2f:fe:24:f7:ce:b7:80:2e:0e:
a8:d0:06:ea:ee:01:8a:06:78:bb:7f:d8:11:0d:f8:6f:31:42:
0e:de:02:5a:90:38:19:e7:50:12:cc:dc:c0:c7:68:2b:20:16:
39:e7:99:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 19:24:23 2026 by rpki-client