This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft
File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json)
Hash identifier: oqfax10iCTCwCE9T6uO2U3zb/TOD32ObJ4ABlKKEsTo=
Subject key identifier: 1C:90:C6:3D:94:05:9D:8C:E5:AF:C1:64:E6:DA:CD:50:79:64:2D:45
Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32
Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32
Certificate serial: 04E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft
Manifest number: 04D3
Signing time: Sat 24 Jan 2026 23:06:45 +0000
Manifest this update: Sat 24 Jan 2026 23:06:45 +0000
Manifest next update: Sat 31 Jan 2026 23:06:45 +0000
Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: n4uBy3h7KSoILON+kmS0xDkpS47BOKR+scTIAZ3kr7M=)
2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: naYHhlwgJToIdxwYRVcDTwuzPaQ2WtmkFGMwkiEal6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl
rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7BDC, serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32
Validity
Not Before: Jan 24 23:06:45 2026 GMT
Not After : Jan 31 23:06:45 2026 GMT
Subject: CN=69755085-d1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:12:37:3f:1b:50:a5:95:de:c1:5b:27:ad:
59:cc:80:67:23:14:be:1e:e3:2d:e9:0c:62:30:8a:
63:b1:34:a7:be:d6:9f:85:00:6d:1a:20:6e:c2:96:
2e:30:a3:41:17:f4:ff:b7:e3:ce:25:e4:37:cf:a8:
45:15:7f:ee:cc:a5:34:45:5c:a4:87:19:20:e8:49:
ae:97:68:c9:b3:32:a0:ec:ad:6b:50:40:95:86:55:
de:42:f1:c6:c3:8a:32:46:0d:98:e9:95:dc:a6:6c:
4a:7e:ee:d1:69:50:04:20:b3:52:26:08:fc:bd:86:
59:e6:84:c1:8d:31:ad:fd:50:af:e0:bf:d2:37:50:
31:df:76:4e:d1:18:f4:14:dd:ee:d4:37:5a:1d:9f:
03:fc:50:db:59:cf:31:29:d7:ef:ee:76:24:84:2e:
2e:bb:cc:f6:4b:ae:32:68:28:76:f9:f7:a7:b7:e6:
04:da:3a:c7:c3:3c:c4:b7:cd:e2:6c:44:3a:14:2f:
c4:c9:1f:4d:c8:2b:3c:02:bf:d5:bf:82:13:1c:d6:
0a:7c:a7:08:02:19:5c:42:c8:67:68:1a:b8:a9:25:
a9:81:15:20:8f:fb:ef:d6:e8:4c:60:29:12:1d:5f:
dd:16:ec:75:8c:83:71:c7:52:d2:e2:32:e7:ac:25:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:90:C6:3D:94:05:9D:8C:E5:AF:C1:64:E6:DA:CD:50:79:64:2D:45
X509v3 Authority Key Identifier:
keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9e:16:ee:ff:10:cb:cb:49:6c:03:87:b4:01:32:00:dd:47:
30:60:77:f2:f0:21:93:09:4d:75:85:ce:c9:e1:80:a7:c4:79:
1d:e8:44:92:7d:e1:f0:7b:ac:ec:01:9b:c5:74:de:a6:54:37:
80:7b:95:8e:8f:ce:4f:e2:16:e1:f0:d1:81:81:65:52:bc:f7:
fe:fe:4d:40:93:58:af:ae:85:6b:08:ba:5a:dd:13:ec:ed:79:
bb:82:3d:67:91:c8:ad:81:28:d9:27:74:94:b9:28:8d:1a:ec:
0e:28:3f:2b:9b:42:c6:58:de:1c:6f:5a:ba:b8:77:e4:c9:13:
d2:f2:d4:c9:06:43:ce:e0:9e:2f:c8:9d:57:e2:a8:47:ae:a3:
3d:37:30:c6:b4:0a:ae:cf:78:e1:ef:88:c6:9d:5d:db:ae:06:
41:71:a6:84:a7:78:63:39:ee:eb:27:39:0c:41:b7:6d:68:02:
96:49:9a:f4:75:c1:53:fb:5b:33:4b:38:f9:fa:f1:e8:f3:fc:
fa:d8:a6:97:02:2e:46:76:24:22:31:30:47:08:c3:8c:2a:07:
d5:26:79:d0:66:96:1a:af:b7:a6:53:5c:1a:4c:06:c0:47:13:
5a:e7:76:d6:95:44:87:6b:fc:a8:12:48:47:2d:fb:f3:19:97:
84:72:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:39 2026 by rpki-client