This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
File: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft (raw, json)
Hash identifier: SscK17tTyaGAtnQYeo1yPv+cWq706ezyu7qtoB8Zvwg=
Subject key identifier: 69:CA:74:F3:C4:D7:88:6F:6E:BC:68:34:EA:87:5B:04:5A:49:BE:10
Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
Certificate issuer: /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Certificate serial: 0735
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
Manifest number: 0718
Signing time: Sat 24 Jan 2026 21:12:09 +0000
Manifest this update: Sat 24 Jan 2026 21:12:09 +0000
Manifest next update: Sat 31 Jan 2026 21:12:09 +0000
Files and hashes: 1: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl (hash: 4WWw+wzoyEcvLa7uSgICuka6RaGL8w+FtJnPDeZI67I=)
2: DD3C61621DCD11EF88E9EE3DC4F9AE02.roa (hash: qv769QTOuxRY2vZMEitP1PhQNGQQJL1+VWV0CsKcicw=)
3: 178E201EA51911EDB711B90AC4F9AE02.roa (hash: Fk3FD4AcHMukexgYcFy6H4xmHyHDGU1VOrgDQ2JaHQ0=)
4: 3B03239684CE11EF9D90A966C4F9AE02.roa (hash: 0+CvQqBA1GWK9uAje6YI9ltQjscAcIJ8/LtX4JAvJgQ=)
5: 6A8A22841DCE11EF85CAC83EC4F9AE02.roa (hash: BifS2RiKJAeyaao2xahiTEJyhWsX4uSdQw3ik4lZCoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1845 (0x735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D26C6, serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Validity
Not Before: Jan 24 21:12:09 2026 GMT
Not After : Jan 31 21:12:09 2026 GMT
Subject: CN=697535a9-a0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:55:6c:10:2f:1c:98:46:54:49:a9:63:de:c4:
24:f6:d0:5d:b7:e0:3f:8f:62:cb:f4:12:e0:99:19:
d7:00:a0:a7:c5:ed:95:3f:4d:58:fa:56:b6:f8:00:
ed:b6:a7:86:c2:8c:e1:b8:18:fb:7d:45:26:75:ce:
ad:c3:86:41:6b:30:69:f3:05:da:af:93:ae:ef:f1:
d3:07:58:21:13:20:b5:ec:f2:2e:97:62:8a:fe:05:
f4:82:38:3b:d5:cd:fe:8a:d7:31:a6:d6:99:29:c0:
60:91:30:28:fe:67:94:86:64:cd:92:41:f4:5d:21:
99:e7:1c:0b:8d:a1:f0:c0:5d:cc:24:a6:17:d1:d2:
1a:21:e0:cd:ad:d6:0a:9a:f7:53:6a:3e:df:4f:6f:
29:8d:c2:6e:0d:3b:11:a7:c3:28:af:23:32:52:ce:
f5:33:e9:8a:07:93:7e:02:2a:34:54:57:d4:3c:80:
82:90:7d:f8:73:85:32:9e:ba:bd:70:80:0a:5e:ee:
87:f6:e2:5a:61:7e:c1:96:11:ab:39:a9:6f:6a:2f:
4f:1d:cd:46:2e:3b:24:20:43:9f:26:70:42:ab:db:
eb:bb:17:cc:82:be:a1:3a:23:5f:20:aa:bb:35:4b:
06:d8:d4:b3:df:f8:7a:ea:6f:33:09:ba:c0:9c:5a:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CA:74:F3:C4:D7:88:6F:6E:BC:68:34:EA:87:5B:04:5A:49:BE:10
X509v3 Authority Key Identifier:
keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:96:fe:a5:72:fa:97:87:58:dd:d8:e0:c5:09:f3:9b:a0:5f:
6e:69:4b:23:39:b5:cf:19:ba:24:ab:b8:a4:86:27:99:68:66:
57:2b:4d:66:70:cb:24:f9:6b:c8:bc:a8:68:2c:c0:e3:13:3d:
f3:15:c2:ce:35:64:bb:3d:39:d9:dc:e3:b8:3d:cc:40:4d:55:
22:f2:af:37:ba:1f:31:98:da:3f:91:6a:9c:77:1e:a3:8c:71:
00:e5:cd:89:f7:82:4f:44:e8:38:48:33:87:dc:98:10:68:90:
fd:be:fb:fa:4a:1e:93:7d:c5:f8:44:b7:02:64:10:5e:8d:f5:
4d:7c:61:7a:32:49:c5:f2:ef:0c:47:44:fc:fe:f8:69:9a:91:
33:a0:4b:e3:84:7a:42:27:69:c8:01:1e:70:a3:02:2e:5b:6e:
f6:ec:f5:bf:d4:a6:86:fa:78:33:fe:b9:b0:89:0c:ce:fd:45:
f2:a8:9a:97:9c:04:c1:91:99:1c:1d:53:85:a7:d0:84:df:02:
73:29:59:76:02:71:4c:27:01:25:c7:e0:44:dd:c3:fe:5d:86:
bc:fc:08:f1:e7:c7:d8:53:9a:1e:fb:63:51:17:d0:8f:12:13:
47:99:e7:ea:4f:07:d6:59:a6:2b:b0:cb:ba:2f:b4:9a:07:b5:
0a:7b:2f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:47 2026 by rpki-client