This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
File: diAma5iRohjA5fLvKI94LVcX8rw.mft (raw, json)
Hash identifier: nRubIDMvlJgq8SGDAtPrt7G6C+9t5Sc/3Y2+/SjTScs=
Subject key identifier: EC:60:88:BA:22:C5:2C:2C:C0:F1:9C:A3:BA:33:B4:1E:A7:D1:DE:22
Authority key identifier: 76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
Certificate issuer: /CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
Manifest number: C1
Signing time: Sun 25 Jan 2026 05:07:00 +0000
Manifest this update: Sun 25 Jan 2026 05:07:00 +0000
Manifest next update: Sun 01 Feb 2026 05:07:00 +0000
Files and hashes: 1: diAma5iRohjA5fLvKI94LVcX8rw.crl (hash: kUsON/u3iWBnL0gaoiAHDvZJ2D0xnfgXFytkj65lxeQ=)
2: 4ECE44B0D24311EF919B6D12C4F9AE02.roa (hash: HTX8AzlBVBkYFaGVRN5GWHgC9HxdFLqil4uBj/GLN6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E660, serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Validity
Not Before: Jan 25 05:07:00 2026 GMT
Not After : Feb 1 05:07:00 2026 GMT
Subject: CN=6975a4f4-19c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:6d:92:3b:99:56:41:56:26:5b:70:e1:13:
25:69:92:42:ae:2f:0f:1d:2e:08:99:85:69:37:03:
e8:4b:24:44:6f:d8:52:2c:d3:0a:43:7e:0f:a2:03:
c3:11:cb:18:2a:99:19:3c:a6:b7:e1:7a:67:03:91:
7b:a3:66:62:0b:7e:2d:a4:0e:98:ec:8f:eb:d4:ef:
fb:36:a1:5a:ec:93:52:b6:52:65:c9:e3:0b:8d:c9:
51:6b:20:94:96:24:6d:bd:50:ce:c2:65:10:2a:e9:
17:d6:73:8e:30:72:24:fc:3a:c0:29:4a:ad:72:b0:
1c:05:5d:89:21:d4:f1:4d:be:8d:b3:d4:39:65:ad:
d9:a0:45:a5:45:11:0e:b4:cc:68:f7:9a:2d:c0:cc:
14:c7:cb:d4:d8:55:5e:f3:45:10:1a:5b:c6:63:0c:
6a:c9:f8:ef:3d:ba:0e:d0:0c:06:be:b5:d7:2c:3c:
c2:4e:45:3b:a4:9b:4e:9d:5a:f0:54:ee:fd:83:6b:
13:71:70:e7:dd:ef:68:62:12:98:d4:83:ab:e1:94:
83:68:8b:c3:54:d1:e6:7a:b8:70:2a:21:8d:eb:da:
0a:5e:a9:4d:f7:fa:a4:4f:58:69:2d:0c:08:a1:cd:
6f:e0:26:7d:c1:b0:69:ff:04:e2:c1:47:8c:9d:a5:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:60:88:BA:22:C5:2C:2C:C0:F1:9C:A3:BA:33:B4:1E:A7:D1:DE:22
X509v3 Authority Key Identifier:
keyid:76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:42:eb:03:e1:48:bb:cf:47:f0:d5:74:83:6d:c4:2d:be:cf:
d8:7b:76:79:17:09:5e:7c:d7:ba:d3:c7:b1:b4:d6:1e:4f:5b:
35:92:b3:e3:95:cd:36:50:eb:5e:7c:93:dc:fd:58:62:b8:4a:
21:bb:cc:79:0b:e3:65:d9:08:4b:8c:f4:f5:ae:a0:15:99:06:
be:2b:9f:86:c8:38:80:b8:ed:b2:a9:ca:ee:9c:3f:cd:66:f7:
5e:2d:5e:b8:0b:f6:e2:e2:bd:dd:07:fd:34:2d:36:a8:fc:65:
70:30:28:d5:06:c3:db:06:86:29:14:6c:fa:97:aa:2c:b1:b8:
04:48:46:64:22:b9:ae:ec:ff:c6:b5:50:0d:b8:4a:76:be:c2:
77:db:b8:93:60:d6:25:1b:b8:26:05:9f:ed:9f:12:06:2d:03:
6a:1f:a0:bc:9e:e4:5b:eb:40:1f:c7:6f:e3:a2:6f:d2:dc:a3:
2c:bf:05:f7:28:e0:8c:a1:a1:03:4c:ea:03:ae:a3:37:3b:e8:
c7:7a:0c:4e:02:a8:0e:b5:c0:df:9d:87:b2:11:fd:a2:1e:1c:
d4:07:5e:82:e2:05:e8:cc:a1:0d:4f:2e:1a:61:34:bd:60:ae:
d0:db:4c:d3:79:9a:f2:67:c9:c7:7d:cc:6b:7b:65:10:70:a3:
f1:e7:06:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:01:50 2026 by rpki-client