This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
File: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft (raw, json)
Hash identifier: EvSWnOieAobRUk9FzLrFekuzi9P3eNBqdYWaIM3PF3M=
Subject key identifier: C4:04:4E:4D:29:2B:C6:CD:1C:00:23:F7:90:B3:E0:F9:38:45:C3:08
Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7
Certificate issuer: /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
Manifest number: 0119
Signing time: Sat 24 Jan 2026 16:06:58 +0000
Manifest this update: Sat 24 Jan 2026 16:06:57 +0000
Manifest next update: Sat 31 Jan 2026 16:06:57 +0000
Files and hashes: 1: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl (hash: 6m/rRU3U2VWA5BfEspUlVnMUisI2GYY0We04rrgqNrQ=)
2: 626CA672591911EFAF1F1D23C4F9AE02.roa (hash: 6GbekInjca9Aq9cE7WNeTESe36RL55OnHAPU5HMbtxc=)
3: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (hash: JMbPewXmvsjUnAdQz322CY8L97yt7N2HMn/pCZCh18Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl
rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
Validity
Not Before: Jan 24 16:06:57 2026 GMT
Not After : Jan 31 16:06:57 2026 GMT
Subject: CN=6974ee22-c9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:6b:51:3f:5c:75:ea:f8:be:60:f7:ad:57:
f2:ee:fc:a0:9c:60:b3:1a:68:de:b8:36:78:e4:72:
a7:11:6e:74:d8:ec:89:48:56:0e:2d:7a:f2:13:7c:
91:ba:57:55:88:ce:18:98:32:ae:0c:c3:53:ad:5a:
7e:6f:6d:60:1d:a1:d7:04:05:56:0e:2a:f6:b9:01:
28:77:8e:38:d2:22:51:04:1e:43:a7:5c:cf:bb:90:
79:a4:51:ef:42:ae:5a:d0:ee:37:d8:8f:d1:e8:e0:
cc:6e:69:e7:70:1a:0e:5a:01:32:a7:a9:56:b6:92:
92:8f:2c:a5:e8:79:95:3a:3c:52:aa:d9:76:b5:08:
bd:06:55:5b:cc:57:61:a9:1f:3e:28:2e:24:05:77:
90:ad:2d:66:df:46:56:05:e3:60:e8:d5:e1:5c:ae:
bd:bc:70:78:5a:b8:fe:48:66:82:18:42:8d:a2:ec:
13:27:ab:0b:33:ff:95:44:90:9b:02:f5:4e:e4:20:
09:10:52:3d:49:9c:1c:c7:bc:a6:3e:a3:a7:44:38:
bc:ff:87:d4:89:42:59:4d:3f:81:e3:f7:e2:b8:ba:
40:6e:c3:79:89:39:b3:03:74:86:1e:1c:21:c2:4a:
2d:d3:3b:5d:11:91:b1:16:bb:dc:c5:d1:b5:3c:37:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:04:4E:4D:29:2B:C6:CD:1C:00:23:F7:90:B3:E0:F9:38:45:C3:08
X509v3 Authority Key Identifier:
keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:47:5f:6e:58:fb:a8:13:73:3f:c6:90:7a:8a:bb:15:33:8d:
7d:83:95:b7:04:31:9e:3c:7d:f8:c6:68:b9:02:c8:34:0b:4f:
6a:3b:46:51:9b:bb:3b:f9:ed:9c:65:07:d0:c3:a2:01:94:74:
59:11:b4:c1:0c:43:fb:77:41:76:ff:e0:3a:87:f5:32:f8:a8:
cd:fb:b1:77:fb:79:84:e6:2e:ac:4e:4d:df:cb:17:9a:71:e5:
3f:9a:b1:6f:93:0d:76:06:b9:86:75:ac:7d:d2:03:bb:49:ff:
39:db:57:bf:33:18:c9:0a:6f:99:82:25:2b:e2:a1:b0:01:90:
02:95:5d:9b:50:7b:7c:69:5b:c3:8b:00:3e:60:22:44:16:71:
c9:34:2f:b7:c2:42:b6:2b:6d:a3:2b:ed:35:33:50:88:19:04:
19:58:04:2c:21:4e:8c:92:44:82:9a:83:2c:ad:fc:91:07:c0:
ec:91:f4:a0:bc:88:c9:1b:6b:76:12:ab:33:c7:16:d7:5d:c4:
31:2f:0b:4d:1c:39:9b:76:14:38:96:a5:19:73:53:ba:00:ce:
c9:24:3c:7f:0e:1d:85:3f:ff:de:73:5f:b2:89:84:27:1f:1c:
e5:9f:7a:10:df:2a:52:fa:76:c0:e5:51:1d:c2:0f:00:5c:24:
dc:f3:b0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:38:52 2026 by rpki-client