This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
File: dF1Xf1uOfU-NtJqNuayxP8JaojM.mft (raw, json)
Hash identifier: D9mbQfn1eei3hL8659FxSXjkkDgTEFKbUfTjUhfQYT0=
Subject key identifier: E8:31:11:26:B7:3F:7A:10:9C:F4:E9:BB:7D:9D:5D:C5:1C:F1:49:9F
Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
Certificate issuer: /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
Manifest number: 35
Signing time: Sun 25 Jan 2026 06:41:06 +0000
Manifest this update: Sun 25 Jan 2026 06:41:06 +0000
Manifest next update: Sun 01 Feb 2026 06:41:06 +0000
Files and hashes: 1: dF1Xf1uOfU-NtJqNuayxP8JaojM.crl (hash: lqBLYi2PFEfFII4ULqibZ9vvrGKxeYdOpf9226cXutA=)
2: FADF73B4C42811F0B219BB6AC4F9AE02.roa (hash: SdFwkFKVKGQJMPSxRwUazujF8EdEIyRb2qsEHEvHujY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Validity
Not Before: Jan 25 06:41:06 2026 GMT
Not After : Feb 1 06:41:06 2026 GMT
Subject: CN=6975bb02-1294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:0f:ff:a0:b3:3d:92:2a:11:6e:ca:88:56:
f7:45:0d:8e:04:5a:3a:bc:a1:ae:42:3c:f9:f2:48:
77:47:f9:6a:2e:1f:04:bf:60:ff:e8:4c:1d:36:10:
dd:41:64:70:ad:e0:f2:57:67:23:33:c8:53:e0:1b:
49:95:88:64:de:ca:d3:8c:27:f7:1b:ae:be:63:0a:
b7:3a:e8:62:4f:ce:7a:00:85:65:dd:17:52:27:ff:
a8:24:4a:45:7f:6d:55:9a:d5:7d:22:7d:74:3f:7b:
4e:8d:3f:40:43:e3:6a:9d:e8:48:3c:45:3a:e7:1a:
28:80:eb:b8:93:d5:0d:41:0c:8d:5f:3d:2a:43:29:
23:8f:ca:35:1d:89:e6:03:a9:2f:77:8f:6c:5b:12:
6a:f3:97:3f:a2:1b:fd:44:e7:3b:b0:33:40:92:51:
90:6c:af:4c:09:85:6f:59:d8:59:1e:e2:c0:50:f4:
70:3f:eb:db:24:52:2f:0c:0d:f2:f8:cb:f2:75:17:
1a:26:6a:dc:85:f5:a4:00:ae:b8:31:de:f0:5a:a3:
e9:ea:65:a9:bb:43:b9:39:e8:c3:88:b3:8d:db:7a:
7e:c5:7c:b7:1a:76:64:f4:5e:53:b5:de:c5:be:11:
79:63:e2:84:75:96:17:9e:c7:16:a1:dc:3e:da:de:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:31:11:26:B7:3F:7A:10:9C:F4:E9:BB:7D:9D:5D:C5:1C:F1:49:9F
X509v3 Authority Key Identifier:
keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a9:12:3e:3d:a5:54:b7:09:78:57:ff:64:66:fe:64:dc:12:
23:6a:ca:d1:a9:e6:d6:c8:cb:9b:22:36:23:49:1d:51:a8:84:
28:df:23:61:0a:45:72:c0:c7:a4:d2:54:69:00:19:52:b2:91:
8b:24:36:c3:d6:3c:df:a1:51:8f:b8:bf:e3:a6:d4:89:98:0c:
f4:75:30:0b:67:68:2a:f1:f3:59:bf:d4:9c:b4:60:d4:01:49:
44:c2:ea:f1:43:07:f7:c7:a6:9e:54:51:41:04:ce:38:4d:9c:
9d:aa:8f:78:2c:14:79:5e:b8:63:a1:e0:41:41:34:98:7f:00:
15:e5:fb:95:a1:43:3c:ec:d3:4c:14:e3:cf:63:1b:3b:db:e7:
fe:de:38:e3:f6:4c:60:56:96:44:5b:ae:ae:9f:d5:21:57:47:
2d:37:e3:28:93:f8:28:69:40:e8:f5:c9:fa:92:86:74:4d:61:
2a:03:d4:1e:82:8c:84:0b:cf:8a:14:9c:af:d4:6c:f5:b9:4a:
d5:a6:32:b5:da:41:80:ef:29:6d:42:34:fc:a3:bd:95:01:d5:
89:66:73:65:45:3d:49:7f:95:e5:23:b4:d3:f7:85:51:fc:a6:
95:eb:1d:73:b8:3c:ed:29:91:a0:0b:33:11:f6:54:37:57:85:
d9:71:93:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:37 2026 by rpki-client