This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
File: DPzMWYD1fmvITfEbTFcZNdJdrMo.mft (raw, json)
Hash identifier: 6s3DQqjzRf3JG/GUSID3d4gen9xpba5yAF1oe16aBfw=
Subject key identifier: AD:FD:6D:6F:DB:EC:BA:F3:50:1C:E3:56:A8:D8:14:03:FF:4D:4A:89
Authority key identifier: 0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA
Certificate issuer: /CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
Manifest number: 14B7
Signing time: Sat 24 Jan 2026 18:54:39 +0000
Manifest this update: Sat 24 Jan 2026 18:54:38 +0000
Manifest next update: Sat 31 Jan 2026 18:54:38 +0000
Files and hashes: 1: DPzMWYD1fmvITfEbTFcZNdJdrMo.crl (hash: KxDzWf4xG82w2Gx0gh8Nm+RTd++93zr+7nU47R7xV/k=)
2: CB04F4409BE611EF8AFF947CC4F9AE02.roa (hash: /dfKSmCCPzovaQnLyJDXl3OjPhb/TsvQWem8YYEiMIo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl
rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91415AA, serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA
Validity
Not Before: Jan 24 18:54:38 2026 GMT
Not After : Jan 31 18:54:38 2026 GMT
Subject: CN=6975156f-5bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:20:16:63:3e:23:95:b7:1b:a9:5f:76:63:
e3:e3:9b:15:83:2d:f9:c1:e0:2c:a5:03:54:73:07:
58:54:97:4d:1c:d5:95:11:72:79:7e:07:14:5e:f8:
bd:97:65:9c:13:85:d9:49:21:3f:49:cb:fb:d2:89:
ac:68:ef:a0:76:2c:9e:43:8f:bb:74:84:5d:85:14:
14:83:8d:a0:4f:9e:12:95:de:54:54:1a:84:92:59:
61:2a:92:b1:0f:cc:bf:68:12:f1:c8:df:09:a2:03:
b8:42:f0:e9:50:b5:f1:8c:aa:2c:6e:45:cc:e2:8c:
06:67:94:e2:f4:5a:5a:5e:30:45:fa:e7:c0:91:cc:
d5:b5:29:a6:86:4d:b8:30:97:b2:2f:6e:32:b5:68:
9e:b7:0f:47:d9:90:42:5f:37:7a:fd:eb:c4:9a:1f:
0d:c4:f3:e3:3b:1e:10:ea:62:db:77:89:a0:c4:f9:
ab:4b:e9:cc:cd:d1:8e:27:dd:51:9b:c7:03:9f:2a:
f4:fd:b4:16:22:73:96:ac:d6:0a:51:aa:87:c2:a1:
18:e2:2b:b4:42:77:0c:ec:63:1c:3f:f6:2f:a8:f5:
44:61:d3:bb:96:91:d5:f9:be:9f:f2:1d:31:99:bd:
41:de:15:69:27:73:c4:48:56:3e:b5:6f:13:8e:05:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FD:6D:6F:DB:EC:BA:F3:50:1C:E3:56:A8:D8:14:03:FF:4D:4A:89
X509v3 Authority Key Identifier:
keyid:0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:a4:5e:45:cc:b8:fa:32:8b:06:e9:fd:e3:56:87:8f:66:aa:
98:3a:6a:c8:d4:5c:bd:79:59:ef:ca:3f:c9:73:82:ed:7b:5e:
86:d6:b2:35:18:cd:b4:cc:e0:7b:a9:42:9b:17:06:67:20:9c:
0d:d1:7b:d1:9e:ab:51:3c:03:9e:cc:70:bb:94:bf:34:97:0f:
ea:b2:56:57:7f:0a:7b:91:ad:64:d5:cc:07:df:75:12:6d:58:
9b:cc:0e:5c:20:21:8d:70:ae:a1:c9:d7:c7:d2:e6:b5:57:08:
a0:27:94:f0:00:5c:f1:91:83:61:f8:fa:02:80:91:11:0c:b4:
43:2b:c3:32:91:d9:95:ac:35:d9:db:e3:b6:a4:a4:e4:32:d6:
b6:07:6a:84:0f:8f:50:6f:81:71:a5:31:74:0d:2e:28:80:a9:
ba:8a:8c:2f:7a:55:a8:ff:7d:8b:4a:24:05:f7:16:c1:7d:e5:
0d:d2:12:f7:c2:59:bc:6c:0d:91:8e:6e:95:60:fa:de:ee:27:
42:cf:18:a4:1f:5d:52:f4:2a:5f:f6:2d:b5:a7:7e:e5:20:fb:
fc:36:ba:77:bf:ab:18:70:a9:f4:65:02:c3:13:a6:64:cd:47:
2d:bf:9e:4a:c0:2b:ff:f2:20:1c:8f:c2:8d:5c:76:b4:90:37:
9f:42:79:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE1QUExMTAvBgNVBAUTKDBDRkNDQzU5ODBGNTdFNkJDODRERjExQjRDNTcxOTM1
RDI1REFDQ0EwHhcNMjYwMTI0MTg1NDM4WhcNMjYwMTMxMTg1NDM4WjAYMRYwFAYD
VQQDDA02OTc1MTU2Zi01YmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqQ8gFmM+I5W3G6lfdmPj45sVgy35weAspQNUcwdYVJdNHNWVEXJ5fgcUXvi9
l2WcE4XZSSE/Scv70omsaO+gdiyeQ4+7dIRdhRQUg42gT54Sld5UVBqEkllhKpKx
D8y/aBLxyN8JogO4QvDpULXxjKosbkXM4owGZ5Ti9FpaXjBF+ufAkczVtSmmhk24
MJeyL24ytWietw9H2ZBCXzd6/evEmh8NxPPjOx4Q6mLbd4mgxPmrS+nMzdGOJ91R
m8cDnyr0/bQWInOWrNYKUaqHwqEY4iu0QncM7GMcP/YvqPVEYdO7lpHV+b6f8h0x
mb1B3hVpJ3PESFY+tW8TjgWYSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK39bW/b
7LrzUBzjVqjYFAP/TUqJMB8GA1UdIwQYMBaAFAz8zFmA9X5ryE3xG0xXGTXSXazK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy
RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9EUHpNV1lEMWZtdklUZkViVEZjWk5kSmRy
TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RQek1XWUQxZm12SVRmRWJURmNaTmRKZHJNby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9EUHpNV1lEMWZt
dklUZkViVEZjWk5kSmRyTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQpF5FzLj6MosG6f3jVoePZqqYOmrI1Fy9eVnvyj/Jc4Lte16G1rI1
GM20zOB7qUKbFwZnIJwN0XvRnqtRPAOezHC7lL80lw/qslZXfwp7ka1k1cwH33US
bVibzA5cICGNcK6hydfH0ua1VwigJ5TwAFzxkYNh+PoCgJERDLRDK8MykdmVrDXZ
2+O2pKTkMta2B2qED49Qb4FxpTF0DS4ogKm6iowvelWo/32LSiQF9xbBfeUN0hL3
wlm8bA2Rjm6VYPre7idCzxikH11S9Cpf9i21p37lIPv8Nrp3v6sYcKn0ZQLDE6Zk
zUctv55KwCv/8iAcj8KNXHa0kDefQnlJ
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:45 2026 by rpki-client