This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
File: DvuCEhc42eyGnjyjzwUA-RKOF6g.mft (raw, json)
Hash identifier: frMqrZSUSzib2BtGxtz9ds9ULvJJz56bz2Kpt44vqbU=
Subject key identifier: 2E:5B:34:B4:48:F8:FC:65:EF:05:62:9C:C8:83:44:02:EC:B3:55:3B
Authority key identifier: 0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8
Certificate issuer: /CN=A91DEDFD/serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
Manifest number: 27
Signing time: Sat 24 Jan 2026 19:42:29 +0000
Manifest this update: Sat 24 Jan 2026 19:42:28 +0000
Manifest next update: Sat 31 Jan 2026 19:42:28 +0000
Files and hashes: 1: DvuCEhc42eyGnjyjzwUA-RKOF6g.crl (hash: IRGHUSMw9ShoSaqiIQ0VDcB/fyvwxH4G+gDub3IVlvE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:42:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8
Validity
Not Before: Jan 24 19:42:28 2026 GMT
Not After : Jan 31 19:42:28 2026 GMT
Subject: CN=697520a4-de7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:25:e3:27:0b:c8:ee:38:2b:f3:f2:47:54:
67:e3:64:fb:2d:61:ce:9d:1e:0f:96:ad:74:fb:13:
4b:a8:32:12:9e:c1:be:75:d7:1f:a5:0a:4d:a1:6e:
30:7f:e2:0c:e4:9e:7f:16:93:29:09:d3:72:f4:8c:
e5:1d:5c:5f:79:71:fe:7b:3d:8e:f7:98:d3:90:d6:
a2:7d:22:0c:06:a2:a5:7f:8b:6e:33:c1:b1:6a:4b:
63:2d:7c:67:f4:d9:70:36:71:aa:9d:80:29:64:4b:
b4:57:4d:e5:96:83:0f:70:d3:73:14:bb:0c:fc:fa:
04:f0:88:1e:41:2b:74:1e:c3:0b:b3:45:b4:9a:52:
31:a9:d9:6c:39:1a:43:17:ad:12:09:40:9c:66:ca:
f1:85:58:ab:62:65:27:8c:37:d8:bf:06:61:17:6f:
92:c3:45:79:45:c1:f9:50:f7:c2:7f:f4:da:0b:c8:
e6:38:12:cd:b6:00:59:b9:b7:4a:31:7d:0d:63:bf:
77:8d:39:14:a0:30:84:1d:74:fb:b0:f6:f2:89:2f:
89:5b:5c:44:84:2e:1f:41:c5:fd:47:8f:cc:a3:b1:
a3:db:25:d8:57:09:07:85:aa:61:27:9b:4e:ee:c0:
54:f0:28:6f:07:7b:13:1c:54:9f:5d:2c:41:7e:1f:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5B:34:B4:48:F8:FC:65:EF:05:62:9C:C8:83:44:02:EC:B3:55:3B
X509v3 Authority Key Identifier:
keyid:0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:64:37:96:3b:ef:e5:7a:8a:1c:4c:4e:a6:8d:fe:30:db:5a:
14:0d:b7:3d:62:e0:8a:fd:1b:30:0a:0e:0d:7d:ec:d9:a9:6d:
68:38:f0:95:82:7a:75:66:cb:ec:27:05:7a:4c:ae:2c:2b:a9:
91:d1:a2:df:b8:25:a2:98:40:59:bf:11:4a:7d:a2:50:56:9f:
fa:dd:ee:86:eb:00:fe:12:48:cf:93:43:cd:de:6d:82:ef:d2:
d3:52:7c:bb:dc:ef:e3:5c:87:59:83:72:86:ff:46:98:ca:d6:
c8:b9:48:c7:40:c1:d6:9e:78:7d:44:0a:a9:de:b3:c1:d2:52:
ef:3e:fc:d5:dc:db:ef:19:0b:d4:a3:bf:ba:b0:3b:6e:8b:f4:
36:70:99:b6:31:5f:ac:c4:6c:26:c7:3a:c4:cf:9c:5b:eb:b3:
b7:ea:05:f1:2a:a3:af:bb:00:4c:a0:b8:7c:4e:d3:12:35:ad:
8b:f4:f4:d6:9a:66:c9:fe:5b:25:3f:c7:73:38:2b:48:29:65:
a9:24:0c:82:70:60:56:11:41:89:03:89:3e:8e:4e:cd:2a:aa:
39:c8:02:7b:72:2c:c7:82:8a:d1:b4:08:35:14:10:66:c4:17:
cc:24:59:1e:72:89:d9:2f:24:da:75:ce:50:4f:ba:74:be:ef:
4c:45:92:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:05 2026 by rpki-client