This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
File: dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json)
Hash identifier: zfSEjTsWu+jdHQwfE4O+UsaQfMe5SR5vaz69CBDSz/k=
Subject key identifier: 21:C8:17:F4:91:77:B3:01:72:AA:A8:3C:54:7A:BF:7B:5D:D1:F9:00
Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
Certificate serial: 08CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
Manifest number: 08C3
Signing time: Sat 24 Jan 2026 19:51:02 +0000
Manifest this update: Sat 24 Jan 2026 19:51:02 +0000
Manifest next update: Sat 31 Jan 2026 19:51:02 +0000
Files and hashes: 1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: KyZeNy7uiqT8sDyRrlkNUy8ivxWC8SAchoqYJwlJVi8=)
2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: tYFsHgxAF9/ErgmR/KDg2eSuObnl9aWU/P2C3GZmtAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl
rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250 (0x8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBB48, serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
Validity
Not Before: Jan 24 19:51:02 2026 GMT
Not After : Jan 31 19:51:02 2026 GMT
Subject: CN=697522a6-a8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:95:c4:6b:c8:a2:35:3b:1d:25:1b:c7:d2:
36:23:95:9a:61:80:b8:f2:1c:fd:26:5a:11:2a:14:
f1:b8:6d:88:ba:bb:44:bc:bb:5c:c3:ad:d4:7b:08:
46:58:c7:72:72:dd:27:eb:34:59:26:af:d6:38:0c:
96:53:e6:64:aa:57:19:22:5b:91:e1:55:01:9e:20:
2d:e6:2b:3d:91:9c:0a:1d:66:1e:f7:07:6b:c7:1a:
2e:ce:db:d0:d0:ba:8f:95:75:23:e7:93:a9:e8:8b:
d8:98:f0:a9:8b:85:01:8a:e4:8f:a6:e2:47:02:ab:
fe:23:59:7b:be:53:79:14:3c:96:a4:14:eb:f3:4f:
3e:44:4a:96:1e:a9:40:6a:6c:ab:8d:f5:46:e9:ba:
83:ba:ec:7d:64:79:ed:0e:4f:bb:c9:55:bd:6f:6f:
34:c2:a2:f2:1e:a6:96:0d:58:26:f5:df:a0:de:4c:
e1:87:23:47:9e:ea:9c:6b:e7:58:de:70:7c:5c:6d:
7d:ba:8a:89:d9:e6:db:b0:ab:7b:6a:94:66:af:b9:
5f:17:fc:dc:97:12:e2:9c:0a:c3:f4:38:fc:96:0a:
2a:92:92:b3:31:f9:78:14:ca:1d:b6:00:50:c4:fb:
a2:46:69:44:f1:5f:83:94:bb:9d:62:db:f7:79:7c:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C8:17:F4:91:77:B3:01:72:AA:A8:3C:54:7A:BF:7B:5D:D1:F9:00
X509v3 Authority Key Identifier:
keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:5e:34:7d:b8:c5:65:ba:c5:93:95:8f:cc:92:fc:14:7d:fa:
68:f3:f0:6a:c0:1b:6f:bc:a3:bb:fd:97:1c:11:17:51:d2:94:
c1:5f:06:af:2c:46:eb:24:2f:8b:ab:8b:9c:94:06:ee:98:e1:
34:fe:1b:36:48:57:69:fd:32:d0:ed:2e:2b:35:9c:53:62:0e:
f5:8b:58:8b:bd:2c:8a:26:93:04:65:19:0b:db:47:ea:92:c2:
ba:3b:cb:7d:db:21:e1:78:91:c2:eb:e3:de:e6:b2:8d:96:a2:
92:0d:c7:59:d2:00:cc:d2:fb:9c:9e:dc:d9:17:2c:3e:7e:1d:
5b:0d:ec:da:79:a7:54:ef:6c:60:7d:38:e9:3d:d4:e0:b6:29:
48:8f:8c:fd:a4:ca:94:cd:4a:04:5d:70:01:52:36:49:79:cf:
45:ea:de:06:02:b5:8b:ff:1d:28:9e:95:e0:3e:4c:bf:e4:a2:
4d:75:95:2e:86:50:71:f7:cd:4d:5b:f0:8d:91:1f:ff:88:a2:
0e:84:21:23:ff:62:f6:c9:d7:8f:2e:11:58:98:5a:4f:e9:cc:
88:2d:db:7e:64:2a:fc:24:14:6e:a0:b2:cf:55:3e:84:0e:88:
f6:77:fa:15:36:54:c7:4a:fc:89:97:88:bf:7d:ec:bc:5f:17:
b2:10:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:14 2026 by rpki-client