This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
File: JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft (raw, json)
Hash identifier: HJK9/na9cF0Dhi4dPFqO8+Ayxvj2ODMTvUiPVuVEmT8=
Subject key identifier: 1E:8B:C4:DF:3D:56:27:C4:78:64:CE:12:1E:C6:88:36:9F:FB:7F:80
Authority key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
Certificate issuer: /CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
Certificate serial: 0E8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
Manifest number: 0E83
Signing time: Sat 24 Jan 2026 17:24:01 +0000
Manifest this update: Sat 24 Jan 2026 17:24:00 +0000
Manifest next update: Sat 31 Jan 2026 17:24:00 +0000
Files and hashes: 1: JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl (hash: Z11p4J+qPQmaS2c6o0KngKbgbB576yl/380CFujOOkQ=)
2: 72D9F434AD2411E98D9E935AC4F9AE02.roa (hash: rlbUkizJchfjScyVk37k5t3G3OCFfrwrry+snEiXSDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl
rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3727 (0xe8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91523C5, serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
Validity
Not Before: Jan 24 17:24:00 2026 GMT
Not After : Jan 31 17:24:00 2026 GMT
Subject: CN=69750031-888f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:92:0e:7b:74:f9:99:29:6e:83:d2:98:e8:
30:ed:d4:fc:18:6c:b0:a4:8c:17:4d:87:71:c8:0f:
c9:63:20:e8:22:1b:84:ae:64:55:26:0b:c8:75:e7:
7a:4a:83:af:da:01:41:ca:2f:2e:97:d7:ee:c2:a1:
75:87:c4:71:bc:d1:39:c0:4e:e6:3c:a3:8c:65:3b:
c4:7f:6f:90:70:a7:c1:c2:4d:99:78:99:1f:00:67:
57:50:72:d4:e1:3a:69:c1:d9:a2:aa:a7:11:30:cd:
be:5d:db:fe:1c:4f:73:f9:15:1c:1f:2d:b2:d8:47:
cb:d1:77:9b:3b:a4:dd:7f:12:45:db:0d:bd:6b:c4:
40:ac:60:20:94:80:47:7e:b1:80:43:d0:e2:76:78:
a4:0c:fd:5d:17:73:10:93:9e:1d:17:27:59:96:40:
e9:54:68:52:47:0d:4f:4c:78:ad:b9:0e:10:58:12:
36:64:9c:d1:2f:7b:97:18:d6:1e:fe:f2:56:6c:66:
e5:df:96:08:cf:ff:13:d9:86:d8:87:c9:80:96:1a:
a4:d3:56:98:53:a6:6a:f6:3b:c0:0e:88:61:c4:da:
07:7f:79:3e:ca:63:7b:2a:f9:d8:29:94:41:c2:a6:
c1:61:c4:98:47:d2:93:52:48:e9:e7:eb:ab:66:3e:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8B:C4:DF:3D:56:27:C4:78:64:CE:12:1E:C6:88:36:9F:FB:7F:80
X509v3 Authority Key Identifier:
keyid:24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:33:fb:8f:ba:64:2f:29:25:2e:10:65:45:0b:1b:86:4e:7a:
78:19:98:e3:4e:f6:64:ac:50:7d:95:3c:6d:52:57:4a:8b:06:
15:50:21:8c:ce:e3:1d:50:ee:e6:d0:7a:1e:86:28:1c:f4:1b:
e1:e7:31:3e:46:49:7f:70:62:58:96:83:f1:f4:23:ee:b9:3d:
fa:ac:5e:a6:ce:12:3c:be:95:fc:9c:e4:24:37:cd:0e:7e:ca:
39:01:98:5b:12:dc:40:a2:8f:f8:65:4a:d0:c8:bc:01:ef:42:
7f:29:2b:09:62:b0:2f:ad:d6:54:05:f2:39:f6:92:f3:61:dc:
3d:cc:9c:13:bf:a4:37:2d:1e:67:aa:4d:d0:6e:93:71:bd:89:
a9:da:ee:b2:32:93:36:80:9f:21:f3:6e:86:0f:34:0a:95:ed:
3d:67:fc:d3:a0:7d:36:a4:07:21:52:2f:8e:57:7d:a0:a9:70:
28:31:c9:a5:b4:b7:8d:14:1f:e2:8b:a8:e8:07:67:92:53:bf:
91:9b:f1:88:3d:63:95:d0:00:8b:b4:8d:fe:14:0d:1f:bb:ba:
c8:68:8e:6d:53:16:30:e9:cf:9a:c8:fc:66:e2:dd:a6:22:27:
0f:fd:9d:4b:8a:11:4d:3e:ec:f2:bb:36:58:52:01:ce:d9:63:
4d:69:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:48 2026 by rpki-client