This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
File: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json)
Hash identifier: 21qR9/LzbAEtAuWU4x4AYnUBp/tC+jsvODHDoeIEjos=
Subject key identifier: C6:76:62:1D:0A:4F:35:35:CE:93:9D:66:FD:BB:18:B3:56:32:B9:BA
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
Manifest number: 48
Signing time: Fri 23 Jan 2026 06:23:18 +0000
Manifest this update: Fri 23 Jan 2026 06:23:17 +0000
Manifest next update: Fri 30 Jan 2026 06:23:17 +0000
Files and hashes: 1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: Qc7R95vT3GlD7j1Nnh6+Ift7bNuTaSFennHQSXI7TmU=)
2: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: CNeskz25yAbEaxsLMjegHDJiYGePQTzaDUtY7werUEc=)
3: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: C895awW0iPQoVfIXjTm3Yt6AECnG0w/x1R5StsObe2s=)
4: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: j+lAAPB9v9s39rB3XeTq/mQabzWIrT+uwwVzKJaE2Fw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Validity
Not Before: Jan 23 06:23:17 2026 GMT
Not After : Jan 30 06:23:17 2026 GMT
Subject: CN=697313d6-1a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:88:75:8e:b3:83:17:4b:1f:19:31:75:23:
64:3e:d2:71:84:8d:09:ca:5c:a8:c1:1e:11:70:ce:
50:5b:40:bc:8a:ff:e5:82:3d:73:23:0a:6d:dc:ae:
5f:96:f0:ac:f2:65:ab:d6:a5:52:02:4b:ee:ea:d4:
45:f8:7c:62:57:cc:69:34:f5:f9:94:13:ea:28:01:
5c:e8:64:0d:08:29:83:d4:a6:0c:cc:55:4a:db:8d:
91:d2:5c:9d:0f:8f:c6:34:c0:63:e8:86:fc:90:4b:
72:ce:e5:d1:41:bc:a5:4c:37:59:34:41:0e:fc:0a:
39:35:61:2b:2f:40:04:64:03:ef:8b:15:d1:96:ba:
ac:92:c5:38:a6:b3:d8:34:a0:92:65:74:71:0f:d9:
d9:d2:83:8a:98:f7:e5:63:49:51:31:5b:33:90:5a:
56:fe:bf:4c:0b:77:20:44:50:93:99:56:62:cd:a2:
b3:96:d8:4b:e2:10:b4:69:4a:7c:3f:c9:f0:5b:ba:
f2:a0:62:81:29:d6:d8:06:f1:83:fb:5b:36:32:95:
5a:f4:77:63:89:2f:67:71:05:50:32:96:bc:4a:4f:
68:54:72:7c:89:f0:5f:2f:8a:2a:37:ed:f5:10:de:
77:20:04:03:c5:d8:c6:af:cc:6d:94:34:e5:c8:e9:
a9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:76:62:1D:0A:4F:35:35:CE:93:9D:66:FD:BB:18:B3:56:32:B9:BA
X509v3 Authority Key Identifier:
keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:13:45:46:56:d5:fe:00:87:e4:04:e7:08:b1:e8:93:d2:a9:
eb:0c:1e:d5:a2:79:c5:0c:c0:94:53:10:3a:cb:1d:e4:ef:b8:
bb:a9:02:e5:84:f7:37:8c:43:39:f7:82:3f:d2:57:ba:fd:27:
14:18:28:c8:82:89:0c:36:e8:27:3c:b5:72:00:50:61:f6:c1:
ce:4d:c3:cc:97:dd:1c:a1:90:16:1a:11:f7:1f:bd:de:ad:b2:
a9:8e:14:91:26:26:51:e0:ff:d0:b6:ff:08:56:ef:7e:3a:57:
3b:5f:e5:be:ae:31:12:67:cc:48:b8:96:2a:6b:53:05:fe:fd:
e2:e3:63:6a:c2:ab:3a:02:4c:75:f8:c1:9d:b3:14:af:73:7f:
bf:47:f0:2a:54:7d:35:86:ef:e4:25:dd:2f:7c:74:53:63:b2:
0e:32:5a:1c:72:10:4b:17:ba:18:2e:b8:9b:7c:e6:6d:75:e0:
7e:59:a8:73:07:0d:b3:24:0e:65:c8:34:18:4c:b4:75:80:03:
02:36:35:03:fa:e5:82:41:d1:91:5f:4d:8c:80:4b:88:12:ec:
ce:6a:17:55:a7:a1:0b:a2:26:c6:62:5a:e3:87:c2:f1:c4:b8:
88:f5:35:9d:7e:73:f6:04:cc:70:c1:58:5d:d5:8b:c6:9e:98:
7f:a3:ae:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:50 2026 by rpki-client