This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json)
Hash identifier: J6aS5c0xjaMpif6x2UcmHkrQnZPBIS+BndWmFOlc2/8=
Subject key identifier: B3:0B:36:C8:38:8B:32:C1:C3:38:A2:FC:F1:EB:BB:4E:23:59:6E:D2
Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Certificate serial: 0454
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
Manifest number: 044F
Signing time: Sat 24 Jan 2026 23:25:11 +0000
Manifest this update: Sat 24 Jan 2026 23:25:11 +0000
Manifest next update: Sat 31 Jan 2026 23:25:11 +0000
Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: l/Fo+jxbbYRKuKfa0TYVQTX8XHjOikYRTKzHIXbTD1g=)
2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: Fy3h+0Jig5gyarM0XV9CmyA2opChklQXx18/ouvlrQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl
rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1108 (0x454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Validity
Not Before: Jan 24 23:25:11 2026 GMT
Not After : Jan 31 23:25:11 2026 GMT
Subject: CN=697554d7-be63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:45:0b:15:c5:5f:18:82:cb:b3:23:b4:5f:
f6:7f:19:86:22:3d:56:de:9d:6d:77:08:23:9f:5f:
9d:7a:aa:4b:95:7f:77:3c:40:76:8b:6d:bb:7f:fe:
78:63:a7:36:0b:4e:ad:c5:d3:e7:ed:12:15:e5:f1:
70:ee:df:69:1e:b0:30:78:dd:b4:a5:23:49:d5:aa:
6f:ff:e6:83:28:a7:05:80:78:41:98:6d:8e:3e:d5:
d5:04:83:78:14:43:54:55:32:72:20:6e:78:bb:58:
3c:5a:cd:2e:5f:c6:3e:ed:0a:18:73:f7:b2:3a:6e:
48:99:32:2b:d8:88:3a:be:77:56:bd:20:41:a0:07:
6e:9f:4f:75:20:94:3e:7b:f8:8d:76:2d:26:7e:39:
90:b8:36:e2:95:8d:d7:f8:03:cd:ad:f1:93:9f:d2:
4e:bb:ed:f8:4a:9c:54:7a:1c:8d:b4:6f:55:7f:2c:
cf:c4:ee:5b:45:91:01:cb:56:51:e0:21:9d:14:25:
7e:52:e9:ca:3c:ff:59:b8:9a:89:2e:ee:bb:31:31:
80:96:e6:e0:fc:5c:68:a6:d3:ca:29:bc:90:13:78:
74:2f:5e:b4:67:1c:04:e2:d5:32:5c:a1:4f:85:a7:
e8:7a:5e:ae:af:82:3c:6d:42:cb:4c:b1:b7:f8:d4:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0B:36:C8:38:8B:32:C1:C3:38:A2:FC:F1:EB:BB:4E:23:59:6E:D2
X509v3 Authority Key Identifier:
keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a9:f0:77:d9:c8:d6:3d:6f:ec:41:08:b4:b0:76:a0:38:4c:
84:cb:d7:bb:1d:c8:67:cf:e8:36:05:0d:3a:6d:a9:64:96:e8:
47:0d:77:10:65:30:b1:dd:36:e3:11:13:fe:a8:47:b2:64:99:
51:61:89:2f:cf:b3:5d:68:35:e0:55:40:14:83:ac:18:85:17:
8b:8b:5f:2c:12:da:5b:2e:5a:89:93:1c:e8:8c:c7:1c:3d:e2:
4e:32:78:68:74:1a:42:a4:96:34:93:89:be:c6:06:eb:a5:9f:
32:b9:f1:a2:39:d8:8e:3c:b6:27:9c:34:b4:86:6f:ad:63:7a:
5f:6c:56:29:93:a0:ab:1a:d2:95:ef:1a:6a:47:25:3b:30:07:
c9:e2:63:90:2a:84:77:7e:10:db:e3:15:70:33:eb:d3:78:45:
42:80:38:bb:59:fd:2d:3d:fd:ae:7f:3e:5c:83:4e:36:81:a4:
22:32:b7:9f:84:28:c3:95:de:ee:05:28:8f:c3:35:fc:03:0d:
d5:21:10:66:79:67:ed:ed:05:05:e6:f3:c3:a1:ce:fb:c4:6d:
15:0b:89:08:02:52:3a:d5:36:e5:cd:9d:21:87:8a:45:ac:56:
11:d6:12:4a:a8:b4:c4:be:69:21:47:92:3b:b8:46:97:be:e8:
38:c1:74:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:48 2026 by rpki-client