This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json)
Hash identifier: 3u/jxsIfBSSQe/hh9M0oZpjCs1oihxq0cOEP7N70yCw=
Subject key identifier: E4:A5:BC:78:8E:F0:AA:BB:FE:7B:3A:D3:E7:1B:20:DA:6F:4B:51:E5
Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
Manifest number: 034B
Signing time: Sun 25 Jan 2026 01:24:46 +0000
Manifest this update: Sun 25 Jan 2026 01:24:46 +0000
Manifest next update: Sun 01 Feb 2026 01:24:46 +0000
Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: aSqQu4OvF62KdTlqXl8EoiI3goYsdz2Zav0DPawkDRg=)
2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: d1kPy/eiI5YE+DwwaFZQ8lzq73y437eEPrtNiOguvKA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Validity
Not Before: Jan 25 01:24:46 2026 GMT
Not After : Feb 1 01:24:46 2026 GMT
Subject: CN=697570de-a954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:7d:49:42:4f:e5:48:ce:40:2f:d5:3d:da:
d0:ba:fb:67:9a:30:12:fd:e9:7d:3e:fc:2c:9c:7e:
06:42:b8:1a:16:df:2d:49:ac:30:7f:9f:70:d1:d0:
1b:06:d3:68:dc:88:11:14:6e:6c:85:09:01:f7:69:
f5:09:3f:e3:4e:63:9a:01:83:a6:47:1d:3f:15:f3:
4a:ba:21:fc:32:e0:2a:b5:ed:64:8f:e4:95:36:99:
bf:d3:de:35:87:27:82:92:90:24:35:d6:7c:8c:3d:
55:24:73:16:ac:75:f8:d7:2f:ce:35:7c:aa:25:c8:
62:02:5c:e9:10:5c:4b:07:34:d3:ff:7e:bf:7c:eb:
85:01:f5:f6:93:5b:ac:42:b6:7d:90:58:5f:82:93:
9d:1d:86:49:e5:9a:56:02:b0:6f:9c:d8:9b:09:20:
c9:e7:f7:c0:aa:a3:63:8a:ea:c3:c3:07:36:c9:9f:
d2:71:17:67:dd:22:59:b7:58:8d:d1:83:a7:45:d3:
ba:cb:82:ed:e0:2d:e0:78:48:0e:35:22:52:64:95:
84:07:ce:04:61:8d:b5:66:cf:0d:c0:33:eb:06:8d:
4b:36:f3:dd:42:9d:14:ca:56:60:20:7e:e4:44:c6:
cb:b4:de:e0:fb:14:ac:31:f3:75:3d:a7:d2:40:16:
7e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A5:BC:78:8E:F0:AA:BB:FE:7B:3A:D3:E7:1B:20:DA:6F:4B:51:E5
X509v3 Authority Key Identifier:
keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:01:06:fa:e6:ed:db:2d:30:24:41:3f:19:df:b1:90:67:
52:0f:5f:b6:af:f3:d5:33:82:74:5c:20:ba:ea:92:ca:e7:44:
ad:3e:44:af:44:8e:1e:2f:a4:8e:ed:e3:27:f9:d1:2c:31:1b:
51:ed:56:00:e1:7f:69:b3:4f:43:49:71:c5:1a:84:9a:d0:45:
d0:ad:1e:45:f8:04:93:36:d0:7a:b5:f3:4a:02:84:53:64:cd:
35:b6:ab:4d:43:70:0a:f5:6b:32:69:8a:0f:92:44:3f:21:88:
15:da:a7:c5:be:e2:f0:74:8f:67:88:d2:fb:be:f7:76:b9:5a:
c7:a1:86:fc:2b:d5:2f:27:d5:56:15:29:39:b5:36:df:9a:b1:
7f:75:ee:d2:7a:7d:34:de:bb:c3:36:93:1a:3c:3e:e7:77:a3:
d1:b1:61:ba:dc:88:90:97:32:14:21:2d:9d:7a:c4:13:00:57:
ae:e4:4c:86:99:55:06:8c:64:2f:2c:f4:52:a5:e8:39:88:45:
87:56:b3:17:e2:1d:8d:7e:17:86:4e:5c:55:94:4f:40:43:99:
1c:1a:17:e1:ed:02:28:31:9f:cc:5b:5f:d7:2e:40:5e:92:44:
47:97:75:87:e8:64:59:47:8a:05:33:e4:ae:ed:b2:4a:60:45:
8d:8b:2d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:07 2026 by rpki-client