This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
File: DqjhgHgwQyFWBjSjtPJuxux2ISY.mft (raw, json)
Hash identifier: 0KaVO3RgLz+oR7zF5KfVuFcDmGV1W6f24fQqKLJisYc=
Subject key identifier: 8F:A4:D3:19:9E:2E:AC:0B:B5:3D:7E:F1:79:E2:C5:B4:C9:B7:A1:4B
Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
Certificate issuer: /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
Manifest number: 40
Signing time: Fri 23 Jan 2026 06:26:34 +0000
Manifest this update: Fri 23 Jan 2026 06:26:33 +0000
Manifest next update: Fri 30 Jan 2026 06:26:33 +0000
Files and hashes: 1: DqjhgHgwQyFWBjSjtPJuxux2ISY.crl (hash: EmY3zTmIqWQiXLD0wtF2El2oafuHbJisRWbs26cncHk=)
2: E0C97CB098BB11F0B5530B6CC4F9AE02.roa (hash: Xq+V2dhbaDK8xNC15SN+JABvncsJM2uUz84UdZHMyf8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Validity
Not Before: Jan 23 06:26:33 2026 GMT
Not After : Jan 30 06:26:33 2026 GMT
Subject: CN=6973149a-9bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:4c:7e:b1:de:d9:f4:31:e5:ec:d2:a8:4c:
54:f3:80:75:c8:c9:f7:f8:a5:d9:5a:db:1a:c0:8e:
40:cf:bd:25:76:80:2e:95:91:05:60:e9:17:83:a9:
09:b2:0f:46:85:a2:9d:a0:5b:42:31:bb:71:77:c4:
2b:c9:89:4d:e7:9a:74:5d:86:2f:ea:12:30:60:c4:
73:44:db:03:91:13:a9:ee:de:ba:5f:bc:be:08:03:
92:cb:b4:ae:e1:d4:f2:87:ca:0e:88:99:7c:e7:9b:
7b:71:bb:80:ad:fb:66:b4:cf:dd:c0:a3:dc:46:87:
05:71:fe:f0:5c:e0:6d:3d:a0:7e:58:4c:72:a1:1e:
5d:ec:1b:a0:f4:b3:00:10:99:59:3c:75:02:6f:cb:
d0:66:ee:9c:68:24:1c:fb:74:f6:5e:df:97:23:e9:
3d:37:b2:85:63:b0:e2:c3:6a:64:af:b6:da:d9:f3:
2d:b3:4a:0e:44:92:7a:6d:0a:76:3e:4e:2f:87:ae:
4c:3e:03:8d:ac:4b:3c:01:e1:fb:35:59:fc:c5:b0:
24:35:36:81:47:8a:0f:39:bd:07:a2:74:9d:01:8d:
d6:94:fa:5d:b0:8d:40:d5:91:aa:7f:23:f4:d3:1d:
22:42:03:e1:22:cb:2e:1d:60:2e:72:e4:19:11:39:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A4:D3:19:9E:2E:AC:0B:B5:3D:7E:F1:79:E2:C5:B4:C9:B7:A1:4B
X509v3 Authority Key Identifier:
keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:b2:48:4c:4a:6e:c1:93:e0:a6:2a:39:d3:a5:b6:9c:b3:80:
71:42:2d:83:85:34:4c:30:a1:91:99:70:67:c3:c0:38:24:b6:
88:97:e4:65:93:89:bc:ea:cb:c4:b3:74:4b:cf:22:1d:c7:58:
f4:a4:29:68:6e:36:1b:8d:6d:b3:45:cb:4d:f1:1d:42:28:6a:
f3:7b:49:08:57:1c:28:23:17:fd:31:00:ec:06:a4:4d:69:73:
cd:0d:77:74:96:8b:67:cd:96:a4:0a:af:29:25:de:c3:00:2c:
92:41:d5:39:75:b9:a5:a3:b0:94:0f:02:25:9f:03:33:57:cf:
27:ee:0f:8c:19:cb:c4:c7:31:27:4b:75:01:8e:d9:ee:22:fd:
4e:64:f5:5c:74:49:41:a6:f8:39:a3:73:66:28:7c:ff:91:01:
24:37:3d:ec:46:bf:2c:1d:a6:8a:0f:99:b6:fc:85:05:83:f1:
16:4c:32:28:48:43:cd:08:d2:88:05:f6:a7:38:27:d5:e4:0e:
d8:c0:cd:7c:9e:05:6d:d8:a4:4f:c6:17:60:27:9c:6e:74:19:
dd:04:e2:eb:5f:88:47:51:9b:5f:ff:ea:02:94:42:3b:cf:b2:
11:c9:5a:a8:5e:97:03:57:b2:17:eb:3b:06:a9:c9:cc:b3:93:
7c:e1:d8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:02:22 2026 by rpki-client