This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json)
Hash identifier: IkCFyMjtDDrJJ58ZqjHjm2v2PfKtmNaw3YLl6pMIGDA=
Subject key identifier: 27:86:D5:5A:7E:06:C1:F6:62:C4:5C:71:21:66:E6:BF:77:08:E0:74
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
Manifest number: 010F
Signing time: Sun 25 Jan 2026 04:18:12 +0000
Manifest this update: Sun 25 Jan 2026 04:18:11 +0000
Manifest next update: Sun 01 Feb 2026 04:18:11 +0000
Files and hashes: 1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: d77lxyVKAmRS9GT8azjixgEZYjDUjtxQ3bMRxYEXtCA=)
2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: wnPWBmIvERZidNx6EbW5pekeL8Z2zXnUdVzGtoi292M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Validity
Not Before: Jan 25 04:18:11 2026 GMT
Not After : Feb 1 04:18:11 2026 GMT
Subject: CN=69759983-0fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:b0:22:30:f6:7f:81:15:5d:85:fc:a7:67:
0e:af:bb:c7:6b:08:2e:26:9d:72:71:82:2d:33:07:
0e:0b:f4:0b:1b:04:43:19:92:2b:d7:2b:35:fc:1e:
aa:d2:5a:bb:ba:1e:8a:60:fa:a6:24:db:fc:fa:fe:
bf:d9:12:4c:46:2a:08:5c:77:e4:a9:15:27:d6:bb:
1a:08:25:9c:d7:50:e5:1d:9e:93:da:57:9c:81:e4:
29:da:51:c7:c3:88:39:b6:4c:4d:cc:07:66:9d:1d:
c0:15:f5:4b:bf:40:81:17:0d:3a:84:b0:96:15:67:
7b:2e:7d:7f:88:6e:a1:ec:9c:c5:2e:df:c7:8f:b4:
1a:6e:39:17:77:2d:9c:46:45:1f:45:e9:24:fc:62:
ec:06:48:fa:c6:d2:43:3b:89:a2:00:54:49:6f:0b:
51:07:62:e0:50:1c:35:8a:93:72:e2:be:6d:bd:93:
a6:36:83:2f:dc:ed:cf:ec:ca:7b:35:ad:8c:73:28:
18:ac:53:46:39:ef:fc:be:9a:61:26:5c:23:42:81:
42:8e:0a:2d:44:b7:dc:28:a7:e1:43:9e:c7:15:bc:
41:88:0b:89:dd:ab:22:e9:f9:a6:7b:77:ed:e4:be:
9b:4d:c2:43:87:6e:6a:87:b0:c7:b8:4d:54:45:af:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:86:D5:5A:7E:06:C1:F6:62:C4:5C:71:21:66:E6:BF:77:08:E0:74
X509v3 Authority Key Identifier:
keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:cc:c3:50:ac:7b:01:9f:67:71:ed:00:66:43:cf:8e:7c:9a:
c1:7c:a1:bb:b1:71:39:8d:c9:e3:3b:73:13:d0:e6:71:f9:92:
6d:11:53:36:8c:4c:a7:4f:24:75:43:b0:46:a2:eb:e1:a4:46:
37:24:40:a3:b1:d3:55:80:1c:9d:9d:d7:42:64:e4:0c:57:55:
de:2c:6e:b5:17:4b:65:ba:26:a1:5c:59:06:9c:2a:df:f9:27:
c1:c7:0b:9c:f2:5e:0d:af:e1:ad:08:8f:ca:84:b6:e4:79:df:
d5:34:2a:26:17:d7:83:8e:ef:5c:e6:a7:d3:a5:b4:ba:8d:ea:
22:ec:98:02:92:f9:c5:38:2b:23:5b:63:63:5f:98:08:b6:bd:
92:6e:b8:f0:15:93:03:6f:e0:47:75:3a:f3:14:cf:c0:aa:ef:
e1:b4:ec:d2:72:f2:03:2e:e7:fd:69:75:5d:f4:55:16:99:04:
3a:38:9d:a5:18:a0:e6:24:0f:91:f6:fb:eb:69:81:22:00:ec:
06:6d:cc:29:a0:9d:b0:99:27:52:c9:2c:bf:3c:71:cb:af:aa:
c7:8e:60:25:0f:bb:ae:6f:b9:13:11:56:a6:1a:35:cb:4f:d5:
78:44:02:b4:00:a1:c4:6e:91:b9:e7:1c:e3:6b:a1:18:19:9f:
bc:58:f1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:25:57 2026 by rpki-client