This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
File: dgeNNhm3wq-92jOrU2PuX-16hg0.mft (raw, json)
Hash identifier: qED7NVa2B5fR22j7vtj/XKCnyc24Q/fgW0gBrv+LBdM=
Subject key identifier: E8:F0:2B:0A:CE:C1:4A:B6:25:4E:72:78:0C:CB:69:5F:52:AB:F9:22
Authority key identifier: 76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D
Certificate issuer: /CN=A91C5E1C/serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
Manifest number: 49
Signing time: Fri 23 Jan 2026 06:19:42 +0000
Manifest this update: Fri 23 Jan 2026 06:19:42 +0000
Manifest next update: Fri 30 Jan 2026 06:19:42 +0000
Files and hashes: 1: dgeNNhm3wq-92jOrU2PuX-16hg0.crl (hash: Mc4glPZGHJ9zrr4mVL/qPcUZtFHLIXnxrgoUMPq/WSg=)
2: 2A3F7C6A879F11F09F9FAD48C4F9AE02.roa (hash: Axxx6+J8twN5fIfKmfOOFMg3aNjqRhz53eFIdguiEt0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl
rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5E1C, serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D
Validity
Not Before: Jan 23 06:19:42 2026 GMT
Not After : Jan 30 06:19:42 2026 GMT
Subject: CN=697312fe-1c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:54:8c:8f:c8:fc:e9:64:72:cc:68:22:23:
61:b8:b8:a7:dd:b9:93:09:ab:29:d2:8b:20:76:dd:
8e:55:a4:17:78:a9:11:fc:78:42:e6:09:4b:ad:99:
d7:cd:cb:db:96:01:d3:cb:4a:08:6c:7e:b4:a7:f0:
69:8a:d8:01:30:3b:df:a9:08:d1:7a:c1:97:0e:a5:
0e:d9:dd:ac:9f:76:e8:91:61:20:66:9e:1d:0b:d1:
80:3f:c9:77:ff:30:f6:a6:10:7a:08:aa:bd:b3:89:
42:60:34:02:d3:e3:77:70:26:fc:34:58:09:33:83:
95:b6:74:fe:27:fe:a5:1d:1e:ee:e9:5b:8a:50:a2:
fc:c1:42:2d:13:f3:a8:59:a8:3b:2f:cb:b5:c6:18:
87:36:f7:9b:0f:73:1e:7b:3e:7a:c1:ed:c5:10:7d:
27:e9:4d:d9:92:20:d1:29:fa:02:79:f4:ab:7a:9f:
90:7b:97:ce:13:97:17:bc:22:d5:d5:0f:a6:cd:a7:
4a:bc:65:e1:d2:ac:1f:e8:c1:00:e0:0f:92:64:ea:
14:13:49:cb:6a:b8:59:7e:df:a9:44:cd:c2:cd:2c:
20:f2:7c:da:0a:91:d0:eb:91:a1:17:e2:39:6a:dd:
d6:3a:c6:3b:76:ad:2f:03:80:92:d3:89:97:49:ad:
6e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F0:2B:0A:CE:C1:4A:B6:25:4E:72:78:0C:CB:69:5F:52:AB:F9:22
X509v3 Authority Key Identifier:
keyid:76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cf:59:5b:e5:11:a7:66:2a:17:6f:10:4e:4f:79:df:67:bc:
08:6f:f1:c7:04:83:46:2c:01:6a:b1:5c:8a:e3:41:af:2d:90:
bd:6a:36:d9:db:69:cd:3a:be:5e:b5:b2:5f:36:aa:1e:94:90:
5f:0a:4f:eb:02:aa:65:a6:8e:66:1f:7c:d8:80:8e:fb:73:96:
52:a8:7d:11:d1:d9:7f:89:6a:a6:13:3b:a7:42:1a:74:a7:2e:
65:28:39:6a:8e:3a:b9:ad:84:c8:f5:08:b3:57:08:fc:af:fc:
0d:02:72:8a:50:5d:71:99:ef:81:8b:d0:85:f2:81:3a:df:41:
5b:b7:8c:1b:db:5e:d4:fb:7b:7e:47:d7:1f:61:49:5b:96:a0:
46:47:fd:01:b8:3a:78:b4:23:a2:22:01:29:80:aa:71:bc:47:
c1:28:98:bd:cf:f1:87:a4:c3:12:0e:00:1f:9f:81:74:ba:e4:
66:92:c8:70:03:47:fd:d1:23:e2:04:0f:e5:25:91:6b:76:01:
36:fe:d0:de:57:7d:a8:a8:31:ad:24:e5:c7:d7:c2:71:9e:23:
5a:e1:a1:db:02:1a:12:2f:2c:dc:65:5c:4b:cd:cb:78:b3:dc:
e4:38:f6:ac:52:ba:8d:68:0c:3a:2b:3e:dd:d7:37:fc:f4:a1:
1e:8a:85:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:36 2026 by rpki-client