This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
File: PyDCnh1-UV3z49hapE51H4Fycxo.mft (raw, json)
Hash identifier: ZyrEVvg8/Mk9Wx5W57Ix0pLSmeWJuTEwKpeegSTa1vM=
Subject key identifier: 27:BE:73:DC:9C:47:14:B5:00:E4:85:9D:08:2C:FC:50:A8:34:73:AB
Authority key identifier: 3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A
Certificate issuer: /CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
Manifest number: 01AB
Signing time: Sun 25 Jan 2026 02:32:39 +0000
Manifest this update: Sun 25 Jan 2026 02:32:39 +0000
Manifest next update: Sun 01 Feb 2026 02:32:39 +0000
Files and hashes: 1: PyDCnh1-UV3z49hapE51H4Fycxo.crl (hash: qQPxcNliwLD0rLXZBJ9f706FsAowPFPtosYQOz73Acw=)
2: 503E43126E5E11EEB39D9E48C4F9AE02.roa (hash: L+aSJH2lWC1anAfV1QDeoFg2+6ljff+C6eVKVad/Lj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl
rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91210E0, serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A
Validity
Not Before: Jan 25 02:32:39 2026 GMT
Not After : Feb 1 02:32:39 2026 GMT
Subject: CN=697580c7-44ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5f:8f:25:83:90:6f:40:27:94:6d:a7:bc:61:
98:08:0b:af:a2:ce:b5:66:59:1a:14:5e:f8:48:91:
3e:02:be:34:86:46:5f:37:ec:d2:c5:34:61:99:6d:
fa:d0:f5:c8:26:cc:f5:e2:5d:49:b0:d4:a3:45:09:
6d:87:ab:b8:89:bc:d0:65:11:45:ee:e9:ec:53:83:
bc:4f:27:a6:1d:53:e1:2a:74:fb:18:c5:6a:02:b8:
aa:3b:4a:3b:57:05:60:ad:87:62:4e:37:da:9c:5b:
c1:85:cd:a9:da:55:6a:3e:ec:7d:c4:8a:68:1f:e7:
59:73:9c:fa:7a:c9:11:1e:15:d9:d6:08:f0:30:11:
06:7f:7f:79:17:bb:f2:05:2e:2c:30:98:0f:23:21:
23:92:04:f5:24:73:8a:41:f4:68:18:7a:d7:b2:9b:
29:b1:dd:43:69:d8:b6:ea:8a:61:1d:72:63:0c:91:
bf:64:69:ad:6a:25:eb:a8:94:f8:2f:47:18:e1:84:
be:fb:f9:6a:43:4a:73:32:91:2e:f6:ad:90:c0:60:
bf:fc:1a:41:7f:d3:a3:19:f4:01:32:30:69:10:da:
60:3e:3f:5f:ff:6f:92:51:11:13:dc:cb:da:1d:e5:
6b:97:6f:4c:c1:58:f9:5f:ac:ce:11:eb:89:40:eb:
bb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BE:73:DC:9C:47:14:B5:00:E4:85:9D:08:2C:FC:50:A8:34:73:AB
X509v3 Authority Key Identifier:
keyid:3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:3c:ce:3b:02:46:ff:3c:1e:5d:4c:c2:f0:95:9d:33:96:70:
39:37:e8:e6:6d:55:2e:d5:23:5f:23:07:13:c9:19:42:17:5a:
42:d0:e0:6c:77:a7:23:a6:f0:ee:31:21:96:44:4c:c3:7c:9a:
9a:06:54:78:02:15:fa:8a:6b:e9:38:28:ce:36:ba:f1:0c:8b:
e3:6d:34:0a:7d:a3:03:30:60:ab:9e:82:84:6a:52:f6:b4:98:
60:36:7c:07:86:19:b6:1a:34:54:bd:3f:24:70:c2:25:2f:4d:
43:c2:b3:5f:2d:5d:90:bd:ab:a1:af:18:52:92:80:d7:cd:c0:
a3:ee:01:92:fb:d5:e6:a4:ec:de:9b:b7:95:c7:af:e1:1d:28:
b9:ac:ba:3a:37:6d:da:f5:22:f9:91:0a:42:77:0e:85:29:04:
ca:1c:24:ea:ca:f2:c7:2c:aa:71:16:0e:89:86:e3:2e:0b:4b:
44:b1:63:d6:59:fc:84:6a:56:e9:73:3a:8f:d3:f9:5b:9b:dd:
a0:fe:c6:b3:60:1b:3b:fd:5d:8b:35:c3:3a:b1:2c:66:29:85:
b9:de:a5:43:c7:44:76:3f:4c:19:f9:6d:ec:ff:36:b4:1c:0a:
a0:11:95:f7:92:e2:61:e4:6e:b9:8c:09:5a:ed:18:e8:fa:74:
ff:e3:18:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:19:24 2026 by rpki-client