This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
File: d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json)
Hash identifier: glp0o6s0xQDqXc9G2cXHQ2JxKBFO71iszmNmgf0PL7c=
Subject key identifier: 68:7B:9A:2C:A8:71:2C:E0:43:D1:8C:9D:EF:A2:7E:97:51:A1:22:89
Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14
Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14
Certificate serial: 142B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
Manifest number: 140A
Signing time: Sat 24 Jan 2026 16:40:15 +0000
Manifest this update: Sat 24 Jan 2026 16:40:14 +0000
Manifest next update: Sat 31 Jan 2026 16:40:14 +0000
Files and hashes: 1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: Bgw9cJLRJoutE0X30wRJC+CINmG4zRb9BUHbfEsaQgg=)
2: 43A759B0C82811F0B893BE0BC4F9AE02.roa (hash: rbeldU58m4YF2/4dOPbk3su/ZdQtCAeI5lgK94z/0hc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl
rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:40:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5163 (0x142b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14
Validity
Not Before: Jan 24 16:40:14 2026 GMT
Not After : Jan 31 16:40:14 2026 GMT
Subject: CN=6974f5ee-36cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d6:81:02:ba:b6:b9:38:1f:05:fe:49:0f:38:
76:ab:4a:0e:3c:2d:3a:01:6c:24:2e:64:b3:7e:25:
bc:ba:b7:f0:58:98:60:81:70:08:a0:5e:7d:5b:12:
d9:df:66:48:c9:b4:00:4e:2d:cc:d1:78:a9:ce:9f:
b8:ad:2b:b0:33:ef:db:e0:63:4d:d7:21:94:cc:39:
af:db:87:40:d4:6f:8a:1b:ac:fc:0d:af:28:c1:23:
5e:62:bc:51:40:35:83:bf:36:be:b0:e5:50:8a:15:
79:bf:a0:e3:a1:00:a1:01:66:8b:a3:50:3a:6c:4c:
f7:c0:8a:6d:91:a3:51:b0:b5:61:76:fa:99:0f:3d:
84:38:d5:9e:47:7b:26:dc:9c:e7:67:bf:1b:52:a1:
8f:8a:63:7d:1e:31:bb:23:90:cf:6c:8f:ba:4d:6b:
47:22:0f:77:e5:10:98:34:12:da:df:a7:73:61:5d:
5c:fe:90:a8:7c:2c:b3:bd:ac:89:c6:95:8d:0a:02:
80:ad:44:cc:75:e9:73:bf:cf:bc:c9:d0:38:2c:b3:
4b:49:f8:b5:1d:21:09:a9:43:3b:67:02:ef:d2:0e:
45:d1:e9:2a:99:ca:22:c4:48:53:39:76:e6:0a:79:
85:2d:db:ad:09:e3:d9:06:bd:d7:7a:c3:d7:ec:21:
75:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7B:9A:2C:A8:71:2C:E0:43:D1:8C:9D:EF:A2:7E:97:51:A1:22:89
X509v3 Authority Key Identifier:
keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e1:f9:47:d7:06:97:fa:0b:93:02:fa:38:4b:a1:93:b1:5d:
4c:49:40:b9:4b:4a:26:9a:09:c7:ff:e3:bf:78:3d:ca:eb:5c:
05:43:9f:37:b8:8c:2f:51:9c:ea:26:fa:d7:3e:a6:66:24:17:
ee:5c:3d:48:09:86:9a:77:65:26:32:8d:37:d4:f9:91:22:c3:
b1:4d:5d:2a:39:ba:32:b8:91:4f:49:31:7a:18:c2:c4:a4:d0:
fb:ca:f5:41:08:11:94:df:e5:da:51:8b:3b:fe:9e:8e:97:4c:
17:58:6d:59:c4:f2:93:1f:96:54:14:7d:8f:f7:eb:de:32:d3:
05:ba:8e:06:d2:3c:50:e5:9b:f4:35:70:fe:e2:7b:e7:95:01:
d4:81:f6:05:94:aa:7a:24:31:7e:31:15:50:bf:91:2d:ee:01:
8f:8d:22:00:d3:b1:91:61:79:f1:f0:48:75:6e:a5:4f:f7:26:
94:e4:64:27:fd:b3:06:c4:4d:a3:36:54:7f:9a:93:9f:64:c8:
a4:d8:66:31:c2:97:88:78:c4:01:6d:46:bd:2b:cc:66:23:f4:
f4:ad:5b:32:bd:df:42:f8:16:2e:9c:1b:fd:61:0d:05:30:e8:
32:63:f4:b7:48:b7:a3:57:be:0f:46:8e:73:74:fe:55:24:4b:
4f:15:db:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5N0RFNUY3RDhB
NTE0MkRGMTQwHhcNMjYwMTI0MTY0MDE0WhcNMjYwMTMxMTY0MDE0WjAYMRYwFAYD
VQQDDA02OTc0ZjVlZS0zNmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3taBArq2uTgfBf5JDzh2q0oOPC06AWwkLmSzfiW8urfwWJhggXAIoF59WxLZ
32ZIybQATi3M0Xipzp+4rSuwM+/b4GNN1yGUzDmv24dA1G+KG6z8Da8owSNeYrxR
QDWDvza+sOVQihV5v6DjoQChAWaLo1A6bEz3wIptkaNRsLVhdvqZDz2EONWeR3sm
3JznZ78bUqGPimN9HjG7I5DPbI+6TWtHIg935RCYNBLa36dzYV1c/pCofCyzvayJ
xpWNCgKArUTMdelzv8+8ydA4LLNLSfi1HSEJqUM7ZwLv0g5F0ekqmcoixEhTOXbm
CnmFLdutCePZBr3XesPX7CF1KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGh7miyo
cSzgQ9GMne+ifpdRoSKJMB8GA1UdIwQYMBaAFHdiqoJ3Ag0LtcdZl95ffYpRQt8U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFDMy83Qjg2OEMwODlE
RjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RRdTF4MW1YM2w5OWlsRkMz
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QyS3FnbmNDRFF1MXgxbVgzbDk5aWxGQzN4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RkFDMy83Qjg2OEMwODlERjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RR
dTF4MW1YM2w5OWlsRkMzeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC04flH1waX+guTAvo4S6GTsV1MSUC5S0ommgnH/+O/eD3K61wFQ583
uIwvUZzqJvrXPqZmJBfuXD1ICYaad2UmMo031PmRIsOxTV0qOboyuJFPSTF6GMLE
pND7yvVBCBGU3+XaUYs7/p6Ol0wXWG1ZxPKTH5ZUFH2P9+veMtMFuo4G0jxQ5Zv0
NXD+4nvnlQHUgfYFlKp6JDF+MRVQv5Et7gGPjSIA07GRYXnx8Eh1bqVP9yaU5GQn
/bMGxE2jNlR/mpOfZMik2GYxwpeIeMQBbUa9K8xmI/T0rVsyvd9C+BYunBv9YQ0F
MOgyY/S3SLejV74PRo5zdP5VJEtPFdsX
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:22:47 2026 by rpki-client