This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
File: dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft (raw, json)
Hash identifier: TgObyarbVevkbUyzjkRSnBoOp0edqAlbMifjhABRZlk=
Subject key identifier: F5:F5:0B:8F:2E:5D:BA:B8:28:7B:78:85:CA:B6:6F:17:76:FD:3B:29
Authority key identifier: 74:D9:FE:1D:61:6A:73:C8:FD:9D:00:A7:4A:0E:62:C0:5A:91:E0:9A
Certificate issuer: /CN=A91CCDAE/serialNumber=74D9FE1D616A73C8FD9D00A74A0E62C05A91E09A
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
Manifest number: 23
Signing time: Fri 23 Jan 2026 06:47:53 +0000
Manifest this update: Fri 23 Jan 2026 06:47:53 +0000
Manifest next update: Fri 30 Jan 2026 06:47:53 +0000
Files and hashes: 1: dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl (hash: ML8e7aNkvalxKnOLjNsZvCk5JanQ1UdPKmu8FvaWh+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl
rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDAE, serialNumber=74D9FE1D616A73C8FD9D00A74A0E62C05A91E09A
Validity
Not Before: Jan 23 06:47:53 2026 GMT
Not After : Jan 30 06:47:53 2026 GMT
Subject: CN=69731999-7ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:dd:75:61:9d:90:7a:27:fa:db:76:bc:2a:
f8:07:97:45:d1:60:63:8f:27:0a:51:90:ce:f2:f9:
21:34:0d:0a:de:86:28:d0:b0:30:f7:d4:3f:03:21:
53:36:ec:50:68:89:b5:e5:d1:1d:01:96:60:76:14:
80:f1:e7:1a:40:88:88:c0:e9:f6:ba:a6:98:3d:95:
a0:20:97:3a:66:09:1c:4a:6e:1c:0f:3c:45:bd:22:
28:98:33:20:60:47:e9:3b:c0:47:02:13:d4:dd:10:
9e:ba:12:3d:27:56:ab:7c:a2:73:1b:fb:9a:cd:7e:
24:68:8f:e1:e7:c6:e8:71:8e:15:8d:e8:5f:10:4b:
95:6c:a2:5c:d7:82:49:81:db:9a:ac:60:1b:dd:e2:
9a:bc:34:09:42:e3:d4:36:0d:9c:28:aa:3d:66:d7:
c2:36:c6:3f:41:10:f0:e4:b4:04:44:b1:6d:9b:ed:
59:aa:69:48:c5:42:a1:b9:b8:28:9a:f8:e7:66:7c:
4b:5d:db:43:12:7a:82:76:10:3c:ac:7c:ed:44:56:
33:80:81:7d:d8:7d:73:d8:d2:f9:c0:6c:60:99:53:
bf:64:51:c4:9a:af:ec:46:85:88:84:ec:ae:22:76:
4d:a8:19:0c:01:bf:37:d9:da:06:72:42:46:b4:70:
e5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F5:0B:8F:2E:5D:BA:B8:28:7B:78:85:CA:B6:6F:17:76:FD:3B:29
X509v3 Authority Key Identifier:
keyid:74:D9:FE:1D:61:6A:73:C8:FD:9D:00:A7:4A:0E:62:C0:5A:91:E0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:f6:7e:eb:30:4b:f9:f0:cc:ab:91:a6:28:5a:56:3e:42:48:
b6:fc:82:43:78:f5:2b:0d:16:18:ae:2f:65:55:62:65:ea:cd:
b0:9e:d0:08:5e:9d:58:8c:50:a8:6a:4c:35:45:d5:92:88:2c:
92:cf:d6:cb:d5:15:6a:5b:2a:9d:5f:fc:55:c9:bb:1c:72:61:
c0:5e:81:b2:08:0a:f5:fd:12:53:d2:54:2c:11:47:90:62:24:
3f:b1:64:7d:94:3f:e9:6e:6d:70:3e:4e:37:bd:f1:6c:be:c6:
43:91:17:71:ca:90:4d:f3:df:77:95:b1:5f:1c:28:13:92:47:
7d:bf:3b:6a:a6:96:94:94:d4:a9:e3:a6:1a:01:76:ba:0b:40:
17:5f:24:dc:b5:a1:f4:b7:ff:e9:d7:2d:dc:d5:4c:f6:00:f3:
90:2b:32:99:c7:b7:f7:83:38:7d:1b:a7:16:d7:fe:57:25:2d:
4d:cb:43:1b:42:47:20:ba:fe:9b:a0:57:01:7d:a0:95:b7:44:
b3:ea:5d:11:c2:f7:da:b8:61:c4:71:c4:f8:2d:33:32:60:9c:
05:79:5c:6a:07:c7:27:d2:25:9b:c6:9c:ba:d3:3c:ed:2f:d9:
58:56:3d:47:89:2f:d5:35:5c:2e:1e:37:31:bb:76:fd:3a:91:
9a:8c:67:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:00 2026 by rpki-client