This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json)
Hash identifier: iePwvD/AaOG3OmPb1tRKnaL8b2eP1TURQJ64zUvEKoc=
Subject key identifier: 9D:28:41:B5:A1:90:27:4C:50:6E:E5:58:5B:AC:64:4A:70:5D:BF:55
Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Certificate serial: 02F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
Manifest number: 02EA
Signing time: Sun 25 Jan 2026 00:29:32 +0000
Manifest this update: Sun 25 Jan 2026 00:29:32 +0000
Manifest next update: Sun 01 Feb 2026 00:29:32 +0000
Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: Boq+/dBzMCJhBQTYWQwT21d/EqRweVfIAW7L4OWgCRA=)
2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: 4fisicBAeKubIonB57hBazR6RO+LBjqN2TabpEOEpNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Validity
Not Before: Jan 25 00:29:32 2026 GMT
Not After : Feb 1 00:29:32 2026 GMT
Subject: CN=697563ec-14a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:9e:a3:e7:f5:ba:f1:74:dc:6a:82:e2:2b:
48:87:1e:62:fe:db:c7:8a:d6:6c:fd:71:8f:6a:15:
3f:38:40:16:49:a1:77:1b:02:0a:96:e8:8e:3a:70:
c8:23:54:12:d3:ee:5c:e8:05:91:5e:ae:9b:e1:30:
b8:62:77:a8:76:39:99:de:82:fc:e8:b4:dd:e9:87:
f1:df:9a:10:a2:20:e4:a0:8d:c3:e6:c6:7b:5d:ca:
46:84:79:a4:7e:83:9d:b2:c7:7d:f5:82:f1:6b:0f:
3e:0c:93:92:8f:57:4a:21:72:6f:3d:e8:05:e9:09:
cc:bf:63:a4:cc:5c:da:77:4d:2f:d2:b4:58:d4:30:
c8:9c:5d:9e:8c:bf:a2:61:e8:39:5b:e9:a8:dc:f3:
e4:d9:ec:74:a6:07:16:10:cd:01:32:bb:d2:12:ef:
d3:8c:38:11:3d:81:27:0f:6a:ce:da:61:e2:35:d8:
46:32:75:97:09:12:7d:ff:5a:80:e1:98:98:0b:b3:
6f:35:65:1f:f5:e9:07:65:58:84:b4:bd:9b:31:d7:
76:d3:a3:d4:c7:7d:8e:eb:4f:d2:68:8d:6d:57:a8:
27:f7:91:df:26:4a:31:28:30:dd:4c:9f:2b:53:34:
1e:0b:8e:be:3d:6b:51:6f:38:e6:c5:2e:3e:2d:60:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:28:41:B5:A1:90:27:4C:50:6E:E5:58:5B:AC:64:4A:70:5D:BF:55
X509v3 Authority Key Identifier:
keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:23:a7:45:a6:0f:8b:d7:bd:99:03:00:a9:b3:c9:06:9b:40:
32:01:1b:72:af:01:1a:2a:fd:1a:59:f7:ab:de:c7:1a:c4:bb:
f8:02:11:f1:6d:a3:fe:3c:b1:a1:73:98:a0:5f:48:4f:98:86:
d4:3a:83:df:a0:32:67:c8:e1:36:11:0b:f1:e3:a9:e9:f6:1e:
7d:74:2c:65:6e:d0:9d:97:49:c0:cd:af:a7:b9:3a:f0:55:b3:
d7:cb:10:d0:05:e7:65:65:43:db:e2:34:88:a2:44:e0:df:dc:
2e:fc:57:a8:a6:ef:bd:c3:e0:92:bf:28:3a:75:0a:26:83:7a:
11:22:f7:22:76:3b:c3:bd:ae:0f:3e:21:1e:fc:c5:e5:d5:cb:
55:29:5c:dc:43:a2:c1:20:3d:22:20:fd:37:49:b0:d4:13:ff:
4a:1f:e1:60:14:f7:30:9a:6d:24:e0:8f:96:4e:81:53:64:a5:
d0:35:70:36:8c:46:db:2a:d1:b3:6a:7a:81:b6:41:2d:7b:56:
d5:28:90:9d:c8:ba:1b:57:15:1d:c7:c7:a7:47:e6:82:9f:86:
54:e7:a8:39:5b:4e:6b:f0:cd:22:31:85:a0:c9:b3:29:b6:40:
6f:c3:0e:0d:85:8f:37:5b:81:6e:1c:9a:d8:85:e0:89:dc:ab:
62:47:97:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4
MTlENUVGMjMwHhcNMjYwMTI1MDAyOTMyWhcNMjYwMjAxMDAyOTMyWjAYMRYwFAYD
VQQDDA02OTc1NjNlYy0xNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxgSeo+f1uvF03GqC4itIhx5i/tvHitZs/XGPahU/OEAWSaF3GwIKluiOOnDI
I1QS0+5c6AWRXq6b4TC4YneodjmZ3oL86LTd6Yfx35oQoiDkoI3D5sZ7XcpGhHmk
foOdssd99YLxaw8+DJOSj1dKIXJvPegF6QnMv2OkzFzad00v0rRY1DDInF2ejL+i
Yeg5W+mo3PPk2ex0pgcWEM0BMrvSEu/TjDgRPYEnD2rO2mHiNdhGMnWXCRJ9/1qA
4ZiYC7NvNWUf9ekHZViEtL2bMdd206PUx32O60/SaI1tV6gn95HfJkoxKDDdTJ8r
UzQeC46+PWtRbzjmxS4+LWAQlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0oQbWh
kCdMUG7lWFusZEpwXb9VMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy
RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3
eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h
ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCxI6dFpg+L172ZAwCps8kGm0AyARtyrwEaKv0aWfer3scaxLv4AhHx
baP+PLGhc5igX0hPmIbUOoPfoDJnyOE2EQvx46np9h59dCxlbtCdl0nAza+nuTrw
VbPXyxDQBedlZUPb4jSIokTg39wu/Feopu+9w+CSvyg6dQomg3oRIvcidjvDva4P
PiEe/MXl1ctVKVzcQ6LBID0iIP03SbDUE/9KH+FgFPcwmm0k4I+WToFTZKXQNXA2
jEbbKtGzanqBtkEte1bVKJCdyLobVxUdx8enR+aCn4ZU56g5W05r8M0iMYWgybMp
tkBvww4NhY83W4FuHJrYheCJ3KtiR5d4
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:36 2026 by rpki-client