This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
File: dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft (raw, json)
Hash identifier: PHdDVAmWs4vNF63QkqzK66JWqUCCh20xl4XeDwtXahc=
Subject key identifier: 6C:28:6D:0A:FA:98:58:3C:F4:A5:5F:BA:37:6F:8A:00:DA:C7:AA:FE
Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
Certificate issuer: /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
Manifest number: 022B
Signing time: Sun 25 Jan 2026 01:19:44 +0000
Manifest this update: Sun 25 Jan 2026 01:19:43 +0000
Manifest next update: Sun 01 Feb 2026 01:19:43 +0000
Files and hashes: 1: dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl (hash: e1BEJ6WgmaiX1hRUH7SzgY96q1GdFvQcADHfNQYQl2U=)
2: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (hash: DPyqPkT0neP2hvNy+hn6VREMN9M60vGzkrQgZGHU27c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Validity
Not Before: Jan 25 01:19:43 2026 GMT
Not After : Feb 1 01:19:43 2026 GMT
Subject: CN=69756fb0-f63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:15:35:5d:ba:bc:7a:4b:97:b0:2a:d9:2e:
2b:ed:91:31:28:48:45:5f:40:a5:cd:e8:a7:32:e1:
32:34:bd:6f:51:0f:7c:f4:c3:3b:51:50:e0:b4:31:
39:50:d5:d9:e7:16:94:ed:d8:ec:51:bf:2f:3a:4d:
94:f5:73:20:06:25:ed:37:62:ba:02:08:2d:90:d3:
e0:5e:31:07:8a:a0:29:54:27:be:21:7c:03:d2:a2:
80:34:d5:e1:82:5a:bc:59:f4:a5:ab:52:73:38:a7:
5e:48:a7:bd:07:02:30:9a:c9:47:58:28:2b:99:76:
66:e4:90:42:96:2f:d6:e2:10:cb:06:c0:c1:51:c7:
10:93:5e:da:e3:83:37:3d:d1:cc:bd:81:bd:0c:26:
0a:fa:4e:fa:b5:e6:1f:3d:76:42:29:ee:a6:85:7a:
28:b7:58:92:74:12:0b:bf:d8:52:14:16:48:a0:ba:
b9:b7:58:74:dc:5e:88:40:16:30:dc:29:df:1a:6f:
fb:50:00:fd:83:9d:16:fb:3c:94:46:c4:59:4a:98:
c3:9a:0a:cb:e6:11:af:b2:35:27:7e:fd:97:29:d0:
0a:4a:60:78:1f:4d:f2:33:54:15:6e:68:c6:b7:a5:
06:de:07:42:93:98:77:2d:e0:15:94:61:51:b0:19:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:28:6D:0A:FA:98:58:3C:F4:A5:5F:BA:37:6F:8A:00:DA:C7:AA:FE
X509v3 Authority Key Identifier:
keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:f6:c4:95:5c:39:9b:c0:3e:0b:43:38:39:c8:4e:c8:c4:0e:
ec:2e:2c:c8:82:5d:9e:7c:2d:5c:9b:11:76:a3:59:6d:93:08:
d0:fe:3e:57:2d:dd:61:92:bb:57:24:6d:c2:59:62:62:a3:8f:
a6:81:ee:52:0d:ba:80:c3:17:cf:24:f0:25:5d:98:ad:ea:86:
86:8c:9e:6b:47:19:32:af:39:4e:10:27:5c:11:4e:9a:0f:89:
26:09:e3:01:c8:c1:c5:40:e3:98:70:99:42:a0:41:a9:ed:44:
0f:75:79:d0:27:52:19:63:cd:08:ee:e9:37:24:fe:32:e4:8b:
1c:d1:ad:8b:3b:13:17:8e:e9:32:3b:ca:50:9c:66:85:b7:44:
30:20:49:28:f7:09:4f:b8:4e:23:1b:5f:08:b4:32:4f:78:c9:
6d:11:5e:8a:e7:19:34:73:97:c5:ac:19:d2:70:16:73:6d:9e:
47:b5:ce:40:af:37:7f:f2:45:25:74:6c:55:90:85:e3:a4:19:
4b:b8:00:91:74:29:db:54:d6:48:5c:da:e5:68:af:a7:cf:8d:
3b:2b:24:5b:ee:84:e2:02:c4:03:a1:c0:b9:c5:6b:38:85:7d:
ba:14:87:d5:f5:61:e6:bb:fe:08:ea:a0:2e:21:09:31:c4:ac:
bb:77:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:33 2026 by rpki-client