This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
File: d6E036eiOU7SRHU58T_kqNHgVsk.mft (raw, json)
Hash identifier: 8SvsPLe5Q8kEZgBDMUTRbaagMgF66qjTZbS/PvN85PI=
Subject key identifier: 59:29:DF:E8:44:08:DD:7A:88:66:B6:A1:D3:25:6F:57:59:54:67:25
Authority key identifier: 77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9
Certificate issuer: /CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
Certificate serial: 0AD0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
Manifest number: 0ACA
Signing time: Sat 24 Jan 2026 18:56:22 +0000
Manifest this update: Sat 24 Jan 2026 18:56:21 +0000
Manifest next update: Sat 31 Jan 2026 18:56:21 +0000
Files and hashes: 1: d6E036eiOU7SRHU58T_kqNHgVsk.crl (hash: R5/y7LLPpwNa7MU6XH6ISYcsdiiE69vJz4vJ2E8LErE=)
2: 4B2AAC20660211EA83A76342C4F9AE02.roa (hash: VubdDr6jpnctpYE2M5QsaGv87QGAE8y0LNTwoL81fa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl
rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2768 (0xad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A821, serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
Validity
Not Before: Jan 24 18:56:21 2026 GMT
Not After : Jan 31 18:56:21 2026 GMT
Subject: CN=697515d6-6277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:8c:9c:52:5c:e0:20:58:79:e3:b0:eb:84:
9b:9e:63:2c:0e:0d:75:43:66:04:0a:13:10:13:c1:
4f:7a:b5:d8:b7:c5:6c:bb:a7:3d:84:75:e3:bc:7d:
70:83:dd:25:56:1e:2d:1b:5e:53:37:63:0a:4b:c2:
51:e4:50:ce:4c:79:a8:96:7c:7b:8a:65:87:c8:30:
98:e1:f2:3a:c5:12:05:59:f0:ad:71:32:6d:5c:2c:
45:e0:73:40:00:c4:c7:f9:2d:9b:96:a3:c9:d3:9e:
bd:bc:4f:aa:f0:32:ca:ca:fd:72:cd:cb:c3:60:64:
3a:61:15:82:f4:9e:9f:13:13:b6:a4:cc:f1:ea:9e:
6a:37:88:2d:da:53:c4:e3:64:f2:b5:7a:7d:f9:ea:
74:38:7e:d3:d3:43:72:e5:27:9b:87:5b:3f:87:cc:
12:a5:3e:2c:f3:e8:89:6b:05:06:b5:5e:f0:4e:20:
3f:29:e4:79:7e:78:f1:ce:fb:51:51:e5:55:0f:ad:
65:df:f4:88:17:47:53:aa:91:44:bc:69:b9:00:38:
ae:ea:36:db:74:58:95:22:61:2e:dc:ad:62:bf:72:
fc:7c:74:a4:54:ed:ca:ba:ae:ab:6b:67:33:29:fe:
66:e6:4b:8e:cf:50:a4:eb:8c:03:d1:e8:48:a9:11:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:29:DF:E8:44:08:DD:7A:88:66:B6:A1:D3:25:6F:57:59:54:67:25
X509v3 Authority Key Identifier:
keyid:77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:36:f6:e7:52:c6:e5:e5:98:18:3b:a7:af:32:b5:c9:f9:40:
fe:3b:d1:2e:63:e3:06:a1:9f:9c:de:d1:3d:f5:b7:52:e3:15:
01:81:1f:e3:0c:e4:32:28:cf:7f:b5:7e:51:69:69:3f:0e:b2:
d6:21:e0:c7:c8:35:45:1c:24:12:20:78:2b:49:24:b1:43:01:
bd:52:23:0b:fc:af:be:a0:fa:00:c9:e1:f6:62:45:a3:e9:b9:
f7:fe:e8:36:d1:a5:52:84:f6:e9:f5:12:1f:1c:87:c2:50:f9:
ad:05:7c:ea:95:23:6c:a0:94:34:0d:aa:48:17:12:70:4b:d6:
18:f8:10:56:50:4b:1c:ee:5c:93:7c:08:d3:93:2c:29:ae:73:
5b:13:95:f4:21:dc:4b:7b:b7:70:bf:b6:be:95:70:0a:c0:5e:
7e:9a:86:7c:71:40:67:c9:4e:4d:b2:0d:5c:85:e5:ab:7f:9c:
04:9f:0e:36:ee:d6:c0:07:1f:05:65:7b:99:5e:dc:e1:2b:81:
37:b2:78:fa:d2:85:6f:ee:b1:34:79:ac:fc:d7:f2:32:2b:d2:
1c:45:ba:8c:ca:3a:51:40:c2:8e:08:68:f0:f4:09:cb:5e:94:
8f:56:fd:2b:28:ba:4f:81:fb:22:43:d6:a1:f9:69:71:a9:dd:
06:5b:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:30:45 2026 by rpki-client