This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
File: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft (raw, json)
Hash identifier: 1+2/1h7E54vnwlW46rUxt9hqaG86mzRDJl/wQyRxIt8=
Subject key identifier: E8:1F:08:E6:D8:E4:44:79:B5:1E:89:FC:7D:DB:4C:6C:5D:B3:38:D6
Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E
Certificate issuer: /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
Certificate serial: 06D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
Manifest number: 06C9
Signing time: Sat 24 Jan 2026 21:32:32 +0000
Manifest this update: Sat 24 Jan 2026 21:32:32 +0000
Manifest next update: Sat 31 Jan 2026 21:32:32 +0000
Files and hashes: 1: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl (hash: hYvYXFa+3Ud3tWJgV9M89Fk8AcOVQ+9K7q0gGO5/0BA=)
2: 98D205F01A4611ECAD279D86C4F9AE02.roa (hash: kTnNlxGzV54r4KPZAQuINu1i12sln6cK8TaYfF0XXkI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl
rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1749 (0x6d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6BBA, serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
Validity
Not Before: Jan 24 21:32:32 2026 GMT
Not After : Jan 31 21:32:32 2026 GMT
Subject: CN=69753a70-5fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:f1:4b:06:8b:2e:59:70:5e:0e:5c:f4:37:
a1:99:7e:77:df:f0:cd:5e:a6:f6:7f:11:d4:88:80:
fa:a4:71:a3:20:fb:14:17:28:af:85:eb:5c:f9:d0:
28:5d:5e:18:23:ee:ab:1b:25:8a:28:e2:e6:2f:de:
b3:31:8d:c4:9f:d2:71:52:0c:75:b0:44:0f:c7:3c:
8b:9f:a0:d4:1e:2d:50:f7:ec:1f:07:e8:7a:4b:e4:
d0:cc:cd:a4:e0:c3:f5:21:91:92:bf:06:c4:57:43:
54:86:e5:9c:3f:ea:5a:ca:95:21:1b:ed:58:7e:4a:
ba:eb:a6:49:d1:d3:c4:ab:31:26:59:39:6c:3f:d0:
c7:18:b2:1d:4e:9d:05:9f:e5:06:d1:3d:8c:ce:00:
59:be:66:3f:e6:10:a3:21:d2:13:ca:65:23:14:da:
34:78:14:2b:40:ec:a0:83:92:41:12:f7:2d:df:8a:
84:9e:9a:36:a5:05:7f:11:9d:04:df:62:62:1e:e8:
5c:09:a3:23:c5:96:c4:28:0e:e5:8c:76:dc:d3:12:
57:70:c3:a9:c1:60:d8:c0:b5:65:85:a7:ea:96:c2:
50:f5:3d:ce:c6:f4:97:53:3c:91:a3:2a:dd:55:c3:
b2:56:a8:28:4e:f3:96:04:ce:6d:1b:83:bc:9e:d1:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1F:08:E6:D8:E4:44:79:B5:1E:89:FC:7D:DB:4C:6C:5D:B3:38:D6
X509v3 Authority Key Identifier:
keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:56:2a:eb:e8:8c:6a:5a:11:8a:f2:77:15:81:b7:c6:75:ff:
50:fb:c2:04:c3:54:5b:9e:9a:b7:41:57:86:07:30:13:3b:2c:
35:ef:f8:6b:f1:98:b5:83:d0:6f:d6:26:8a:9a:78:89:97:9f:
b0:de:f0:87:a0:dd:56:c9:c7:b8:bf:90:6a:51:a2:97:0e:31:
ad:b7:ba:f6:28:70:ec:76:13:05:8d:06:2a:59:03:3f:55:6b:
84:02:f9:29:a5:9a:0c:0a:b3:45:0b:fe:31:ff:3f:2a:07:ee:
a7:29:76:7c:8c:1e:17:19:a4:42:37:37:86:f9:31:d1:7c:ff:
90:d4:89:57:ca:4a:0c:21:66:f9:dc:0f:10:5e:63:41:df:17:
6d:82:0a:a1:e7:09:f8:54:2d:d1:03:07:4a:62:2f:0e:bd:d0:
9e:2a:bd:39:f4:d7:60:50:d2:c1:9b:66:5c:5c:fc:9d:06:03:
51:97:79:d8:43:b2:61:9d:a2:ad:e1:a2:74:1d:ac:14:e8:89:
19:6c:2b:6f:d1:7f:85:2b:4c:47:95:86:ff:60:23:65:54:11:
df:2c:b8:16:6c:2a:3b:f5:6a:ac:cc:69:dd:88:15:a0:3f:32:
eb:e4:ce:48:94:ed:0c:5d:df:c7:89:0b:65:23:8a:e5:6c:25:
70:7c:89:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:16 2026 by rpki-client