This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
File: D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (raw, json)
Hash identifier: 4MlQH6rMQE2VUWCCluIZfVpmS2U68x9Foa3PPFzq69Q=
Subject key identifier: E9:82:4D:1B:8A:E4:37:DC:4D:47:E7:A8:BA:39:34:E9:67:45:32:F7
Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE
Certificate issuer: /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE
Certificate serial: 0D62
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
Manifest number: 0D56
Signing time: Sat 24 Jan 2026 15:25:22 +0000
Manifest this update: Sat 24 Jan 2026 15:25:22 +0000
Manifest next update: Sat 31 Jan 2026 15:25:22 +0000
Files and hashes: 1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl (hash: zCxkI94PrUvWf5cNpeVNf/vE13klPFur9wwU5QopZdE=)
2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (hash: 9uu0uxHIlYAtI54QHWC2LYrc4wDsOXjbCKyh/vuM2qk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl
rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3426 (0xd62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE
Validity
Not Before: Jan 24 15:25:22 2026 GMT
Not After : Jan 31 15:25:22 2026 GMT
Subject: CN=6974e462-64c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:84:64:d3:09:8d:e4:49:c9:02:6a:7c:0f:29:
81:77:77:c1:88:5c:f6:ea:6d:0e:85:3a:61:d1:ca:
9f:d0:3a:d3:8e:1e:df:bb:37:60:94:04:46:e4:31:
8c:08:cf:6f:a7:4a:7f:d0:c2:05:53:02:34:49:88:
b0:58:df:10:d1:19:d6:e9:48:0b:b5:3a:a4:93:bb:
c7:54:70:8d:c8:62:91:e4:a5:6a:b9:0b:8f:b1:a2:
3b:f9:6c:7b:cc:f3:75:de:af:7e:30:ac:a0:24:96:
34:04:d9:d4:96:b4:02:ad:89:f7:75:1c:3f:a0:dd:
be:53:80:26:f5:65:9e:e1:46:2a:d0:67:bf:8b:a9:
1f:33:8d:1f:30:52:89:45:e7:88:34:c3:6a:85:9a:
f6:3c:24:8e:d5:d6:b2:22:a8:8e:0e:a7:fc:df:5f:
9d:1c:10:64:f6:d9:56:d0:f4:38:23:10:e3:13:4e:
e3:82:10:fa:c5:90:d1:79:78:18:f9:94:f5:dd:ed:
bf:45:c4:7f:17:97:2b:15:fb:19:42:73:41:97:e1:
96:fa:06:33:a2:25:f3:98:46:16:23:55:89:a6:ea:
34:2b:6d:f8:2d:bb:77:de:b0:f7:74:bc:cb:2f:bc:
e9:40:de:4b:02:71:4f:6d:af:b1:eb:81:b2:3f:96:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:82:4D:1B:8A:E4:37:DC:4D:47:E7:A8:BA:39:34:E9:67:45:32:F7
X509v3 Authority Key Identifier:
keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:a0:70:b5:c1:7d:8f:ca:3f:64:3a:e9:c5:20:11:d4:00:cf:
a2:19:e3:e9:53:20:4e:a6:ab:1a:1a:30:9a:ff:04:e6:32:fb:
bf:59:62:86:4f:fb:1d:94:28:64:03:b5:81:8e:fe:2a:56:c7:
6b:c0:ac:0a:95:9d:32:78:0b:4d:e5:4a:87:d3:22:31:79:f8:
72:53:90:6a:be:60:75:99:ad:10:3a:e0:dc:d5:79:04:2d:93:
70:74:52:2b:68:5f:3e:ed:1d:3e:96:bd:2f:ff:8b:d8:df:cb:
25:31:4f:24:d3:df:3c:ed:5f:c1:06:76:7b:7f:2a:03:9d:94:
21:c1:e8:af:c7:18:31:fe:f7:62:64:82:34:38:b9:29:9c:4b:
f9:01:22:a8:9d:bd:8a:7a:69:90:75:ef:76:72:d2:95:46:7a:
2f:32:54:7a:35:29:ea:09:ae:49:aa:c6:78:ef:48:03:4b:0a:
73:5c:41:f5:96:02:18:8d:b1:61:31:a6:94:05:f9:08:25:aa:
dc:40:c7:17:da:4d:87:d9:6f:a8:1d:d6:7f:a5:54:3d:88:9f:
ed:2c:02:dd:fe:cc:df:f0:c8:0e:86:69:eb:f3:e5:42:1e:c8:
e7:02:af:81:f9:fc:3a:1c:3f:02:66:f9:63:3e:ef:b3:ce:b5:
0e:85:ce:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:34:46 2026 by rpki-client