This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
File: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft (raw, json)
Hash identifier: 0XHT+Ivq5/TBozKZOOjzO7g6EjfYFK4ojL9tjK/bBkY=
Subject key identifier: 65:E2:44:BE:8F:08:66:14:40:22:72:9A:CE:B4:2B:83:42:0A:C0:74
Authority key identifier: 75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52
Certificate issuer: /CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152
Certificate serial: 07AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
Manifest number: 099D
Signing time: Sat 24 Jan 2026 20:49:01 +0000
Manifest this update: Sat 24 Jan 2026 20:49:00 +0000
Manifest next update: Sat 31 Jan 2026 20:49:00 +0000
Files and hashes: 1: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl (hash: e46rQAUtG+B+ZAT3/hJbJKXxUBSeeqTpG3OZAwL5nNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl
rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1964 (0x7ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C654A, serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152
Validity
Not Before: Jan 24 20:49:00 2026 GMT
Not After : Jan 31 20:49:00 2026 GMT
Subject: CN=6975303d-e666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:95:60:e5:66:ae:ea:fa:0f:02:70:46:29:
05:0d:82:a4:ba:55:d9:dc:e8:d1:1d:ca:f3:48:8b:
09:2f:3d:7a:21:65:e5:9d:11:f8:e0:d9:7d:03:f3:
92:23:70:15:9c:7c:24:dc:04:2d:26:dd:18:c6:9b:
0a:aa:8a:bd:59:bb:e0:21:3b:9a:b1:38:c5:cb:0b:
bc:94:10:fe:8d:00:f6:3b:88:a4:80:87:c1:25:40:
dd:23:8d:a5:2d:34:55:72:bf:be:69:b2:42:1c:cf:
f4:81:c1:72:86:e8:db:94:e3:a4:75:13:ba:a6:9d:
f4:13:9e:28:ee:4d:e6:f3:ae:f4:76:97:d7:5a:64:
be:24:6f:42:b6:b1:3b:07:4d:e1:ee:e0:d5:ff:8c:
b2:cd:f8:48:96:0c:15:06:fd:33:50:5d:e7:17:e6:
45:68:ed:86:db:e8:f7:d1:47:60:41:07:48:52:48:
fd:e5:fb:57:eb:d5:8d:aa:75:ca:41:2b:b2:6a:09:
9d:ed:8d:2c:ee:ef:6b:58:ac:eb:ae:15:16:c9:1d:
62:b1:a3:3a:b2:e9:69:7f:dd:95:9c:69:3b:95:4a:
18:e5:2d:14:06:71:37:ce:ab:d1:0a:63:de:28:29:
d1:dd:20:37:70:6a:5a:44:3a:b8:94:67:fb:28:ae:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:44:BE:8F:08:66:14:40:22:72:9A:CE:B4:2B:83:42:0A:C0:74
X509v3 Authority Key Identifier:
keyid:75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:b6:6a:bf:89:cb:5f:f8:fd:52:22:6b:2b:81:51:f5:fb:36:
ce:f2:d8:e1:11:1b:3c:e4:d9:87:78:c6:7b:cd:fe:7c:84:7a:
f6:c9:0e:c5:2f:d5:da:a8:88:54:f1:4a:a1:85:7b:60:89:d0:
d1:54:8b:7f:63:a4:eb:01:d0:05:47:b4:09:a5:3d:64:58:66:
1f:6a:0e:ea:41:f4:4c:02:18:2b:87:df:ed:93:ab:5a:81:27:
fc:dd:a1:9b:f8:a3:2f:87:16:5a:5e:9e:e9:95:a4:c6:9d:41:
dc:7e:7a:63:b1:eb:99:d1:74:77:ba:b5:12:06:78:10:8f:e3:
d9:7a:bf:0a:d2:80:aa:1f:c7:ec:32:e7:3d:22:23:0a:8b:6f:
5c:00:00:f1:44:bb:40:ff:32:0a:24:04:dc:92:b4:89:b1:4b:
46:99:a0:a1:1f:47:09:14:0f:23:f7:62:40:ae:f3:af:eb:26:
6d:91:3a:7c:e0:6f:b9:98:93:c1:1c:4c:ab:98:79:ca:a8:35:
ed:52:da:9d:e3:af:0f:73:00:ef:b5:df:b4:b7:5e:c6:7b:8f:
cb:de:78:db:d0:7b:28:d3:8d:aa:9a:f1:26:64:ed:dc:b4:89:
e4:d4:8d:50:20:e9:80:27:db:82:ac:3f:d6:4c:98:70:bd:bb:
26:4a:24:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:06:29 2026 by rpki-client