This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json)
Hash identifier: XaqWlrlsoS38y0hEcNUxoTcwwLoIxj6GYJmZEULZLbY=
Subject key identifier: 64:51:41:11:A3:47:7D:B3:64:6C:F8:F7:74:92:5B:B0:11:07:BD:5A
Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
Manifest number: 01FE
Signing time: Sun 25 Jan 2026 01:44:57 +0000
Manifest this update: Sun 25 Jan 2026 01:44:57 +0000
Manifest next update: Sun 01 Feb 2026 01:44:57 +0000
Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: 2gMto/pCej/deG8g8CL4E9K7T8jNlJ8bsemQL/A7VOo=)
2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: H97m0xGfwTSK15tOF7js1ABWMy5iF+l3/IsWtR98xbw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Validity
Not Before: Jan 25 01:44:57 2026 GMT
Not After : Feb 1 01:44:57 2026 GMT
Subject: CN=69757599-c7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:18:71:5f:00:61:44:e1:07:42:d7:85:1d:
06:58:9f:90:37:e1:20:19:77:c4:d2:11:62:30:5a:
c8:25:77:1c:28:48:d5:62:7c:69:f7:87:a0:ab:74:
84:f8:45:d0:be:55:29:6d:50:2c:02:2a:b5:7d:e3:
ec:1d:0f:36:c6:77:9f:a3:04:e9:1e:4e:0c:4c:51:
ea:4a:ba:86:bb:b4:33:7b:82:a4:e6:15:6d:38:fa:
a2:52:16:c1:d2:e9:6a:5f:3c:df:c9:0f:b3:49:21:
8f:75:78:b6:27:fe:32:93:22:c6:5a:fb:90:1b:ed:
a7:31:78:8d:2f:63:c3:79:06:bb:ec:76:c7:e0:4b:
53:25:df:77:51:f1:cd:ad:4f:0e:4c:1e:b3:e1:d3:
db:d9:e5:f5:b1:c5:57:fe:c9:03:fc:c1:1e:53:61:
36:cc:da:6f:4c:73:bf:a6:5a:c2:d8:d7:ef:16:d6:
f0:5d:fa:c4:24:ae:e4:d9:c0:48:40:91:05:ba:af:
e6:67:b6:a4:5f:2c:51:b8:66:e0:f7:cd:b5:8b:e9:
49:aa:7b:bf:27:e3:92:fe:4a:9e:3c:8c:6f:57:2a:
53:14:6f:10:20:9b:23:ad:be:4e:00:76:9f:ef:0f:
b5:a9:2d:ef:3f:72:59:c6:90:20:5d:a2:37:e6:6a:
27:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:51:41:11:A3:47:7D:B3:64:6C:F8:F7:74:92:5B:B0:11:07:BD:5A
X509v3 Authority Key Identifier:
keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:f9:0b:a6:e4:e5:9e:7c:a2:c4:66:ad:1e:f2:b8:79:93:92:
08:5c:5e:50:5d:01:d5:a9:6a:cf:9b:a5:d2:b5:0a:74:55:82:
30:c2:a2:f7:a5:aa:25:c4:0a:fe:18:39:d1:54:51:ba:c9:41:
e1:e2:f4:ab:d6:5d:96:61:1b:f9:95:a0:06:a5:50:51:99:53:
1c:f3:47:c0:76:db:e5:ff:c9:93:35:a5:5d:8f:d3:69:d3:b8:
e1:53:c0:a8:49:68:98:98:f5:38:70:5c:27:1a:91:31:98:cc:
32:da:82:ec:72:f0:50:b4:02:53:2a:6a:92:ba:a3:89:dc:5c:
ef:c1:fe:75:2b:e7:a4:fc:3e:d8:e5:ea:5b:ee:98:de:1c:17:
aa:57:b3:d7:6d:79:0a:fc:67:f5:77:c1:4f:32:cd:34:cb:75:
c9:68:33:db:ad:5d:3f:9b:d6:58:e0:f0:9e:1b:10:4a:76:0d:
84:81:38:77:97:f5:62:80:fa:c0:f1:3e:28:22:b0:6e:3d:d3:
89:fc:5e:7f:88:3a:8a:41:e7:2d:f2:f0:fc:a1:4d:23:03:94:
9a:03:0d:c7:86:2d:6c:9c:5c:a0:42:fd:1c:3f:ca:66:a4:f9:
cd:81:df:b3:97:06:86:cd:66:79:a2:80:e9:8d:5e:0c:59:1b:
96:40:80:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:20 2026 by rpki-client