This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json)
Hash identifier: 4e8WL9ujMC/UxFyVS6y2cRkZhYFNpTdnP8pggBqXSTQ=
Subject key identifier: 74:2B:3B:15:B7:1B:13:85:AD:1A:AE:7D:D9:88:50:9F:BC:8E:45:93
Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
Manifest number: 023F
Signing time: Sun 25 Jan 2026 01:12:16 +0000
Manifest this update: Sun 25 Jan 2026 01:12:15 +0000
Manifest next update: Sun 01 Feb 2026 01:12:15 +0000
Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: 7PZS8Ih3Kxr93t7M/4fWJJlG2f/B8xcKaAWitNKTpJw=)
2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: 4u5QNoJcEGBkXy8XRMZ846SeZinFB+3AOCkdTLg5xUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl
rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Validity
Not Before: Jan 25 01:12:15 2026 GMT
Not After : Feb 1 01:12:15 2026 GMT
Subject: CN=69756df0-7834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:c7:02:95:00:be:02:7f:6b:45:e4:fd:d7:
ee:7c:63:59:d3:e7:9d:c3:01:0c:b6:08:2a:05:60:
f9:e9:13:5b:48:71:f8:20:11:23:24:df:2a:ae:d8:
cf:58:a4:c8:38:3a:25:8d:c7:36:27:7b:f2:a5:6b:
f6:c8:88:a4:4b:63:44:ee:93:20:ef:c3:8e:03:8e:
75:59:d4:93:84:13:b4:b3:4c:13:fb:66:a7:45:26:
cd:15:52:aa:09:d9:3f:bd:e2:e4:04:af:51:8c:8b:
23:fb:66:8a:98:87:6b:8c:4b:08:91:49:d7:34:cf:
59:01:ed:8d:dc:6a:78:83:3b:56:94:e7:03:c2:23:
dd:81:55:a4:72:c0:9e:bf:56:b4:5c:6c:8d:fc:15:
a5:f1:22:0c:d4:4e:b6:8b:0f:54:57:cf:da:a0:fe:
c2:7e:e6:4a:86:62:20:8e:53:ce:6a:0d:73:30:70:
05:14:63:9f:e9:ea:06:74:ce:3c:c6:a6:bc:c1:89:
91:ae:19:99:ee:4e:38:65:d6:0d:8e:97:f3:e6:d2:
49:ba:49:3c:d3:c9:56:46:3e:dc:b1:0f:4b:8d:d4:
63:67:74:ec:9f:b3:5d:5d:e0:31:8e:c0:d4:c1:c2:
9b:b9:93:e4:40:17:1e:12:ca:2d:70:3b:ec:65:90:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2B:3B:15:B7:1B:13:85:AD:1A:AE:7D:D9:88:50:9F:BC:8E:45:93
X509v3 Authority Key Identifier:
keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:c7:8d:7e:32:7a:4c:06:7c:c3:24:90:e2:44:1a:9d:81:0e:
e6:4c:1c:44:f1:e5:86:06:1e:d6:b6:3e:e7:37:9d:19:34:d9:
1d:6c:90:12:57:38:15:85:41:f8:b0:91:29:f6:2d:ca:03:2a:
8c:f3:09:91:81:c1:38:60:ec:01:4e:d6:81:e9:50:56:dc:14:
d6:38:bc:88:4b:5d:a3:5f:dc:0c:2b:32:ac:9a:ad:b7:54:3e:
7d:30:61:39:02:c1:38:de:a9:46:cd:73:76:2f:15:23:23:64:
84:e0:6b:7a:06:a9:48:7f:eb:b3:f1:fe:86:c8:b3:35:ef:21:
62:7e:3b:fc:a8:0c:3b:87:f0:e4:97:24:3d:54:6b:74:1e:28:
bb:c4:57:e5:c9:b4:e6:b5:c3:2d:36:fa:dc:a0:50:7a:f4:f3:
de:36:65:24:f0:0e:a7:53:b4:ba:9a:71:de:b8:14:da:22:31:
ea:56:96:0a:31:95:51:81:02:74:0b:6b:39:1c:c2:fa:33:7c:
c8:bc:db:13:05:d2:ce:a5:d7:ec:98:49:b7:f4:7c:f3:fa:f8:
56:34:48:16:0f:b7:c6:0b:b5:50:11:29:1a:53:17:c3:8d:48:
e6:94:67:dc:27:09:76:3c:ba:f0:d0:26:a2:d2:4e:6a:fc:1e:
5f:4c:a4:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG
NEE4OTVDRTkwHhcNMjYwMTI1MDExMjE1WhcNMjYwMjAxMDExMjE1WjAYMRYwFAYD
VQQDDA02OTc1NmRmMC03ODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnDrHApUAvgJ/a0Xk/dfufGNZ0+edwwEMtggqBWD56RNbSHH4IBEjJN8qrtjP
WKTIODoljcc2J3vypWv2yIikS2NE7pMg78OOA451WdSThBO0s0wT+2anRSbNFVKq
Cdk/veLkBK9RjIsj+2aKmIdrjEsIkUnXNM9ZAe2N3Gp4gztWlOcDwiPdgVWkcsCe
v1a0XGyN/BWl8SIM1E62iw9UV8/aoP7CfuZKhmIgjlPOag1zMHAFFGOf6eoGdM48
xqa8wYmRrhmZ7k44ZdYNjpfz5tJJukk808lWRj7csQ9LjdRjZ3Tsn7NdXeAxjsDU
wcKbuZPkQBceEsotcDvsZZDCAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQrOxW3
GxOFrRqufdmIUJ+8jkWTMB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD
MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE
eUtlSHZwUi14ZGIwcUpYT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADx41+MnpMBnzDJJDiRBqdgQ7mTBxE8eWGBh7Wtj7nN50ZNNkdbJAS
VzgVhUH4sJEp9i3KAyqM8wmRgcE4YOwBTtaB6VBW3BTWOLyIS12jX9wMKzKsmq23
VD59MGE5AsE43qlGzXN2LxUjI2SE4Gt6BqlIf+uz8f6GyLM17yFifjv8qAw7h/Dk
lyQ9VGt0Hii7xFflybTmtcMtNvrcoFB69PPeNmUk8A6nU7S6mnHeuBTaIjHqVpYK
MZVRgQJ0C2s5HML6M3zIvNsTBdLOpdfsmEm39Hzz+vhWNEgWD7fGC7VQESkaUxfD
jUjmlGfcJwl2PLrw0Cai0k5q/B5fTKTC
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:14:42 2026 by rpki-client