This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft
File: tDpaYNRoBqaf_vfGdiGexLqLo20.mft (raw, json)
Hash identifier: j3dKtpIt6gSQ7MQeflEZ76unKKo/j9EYTZNNDk/gZJY=
Subject key identifier: F2:E4:95:04:52:48:88:EE:F8:91:D1:DB:46:25:78:DA:F2:4F:9D:BC
Authority key identifier: B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D
Certificate issuer: /CN=A91E2AE5/serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D
Certificate serial: 2C0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft
Manifest number: 2BE6
Signing time: Sat 24 Jan 2026 15:24:04 +0000
Manifest this update: Sat 24 Jan 2026 15:24:04 +0000
Manifest next update: Sat 31 Jan 2026 15:24:04 +0000
Files and hashes: 1: tDpaYNRoBqaf_vfGdiGexLqLo20.crl (hash: 5LTUho2Pqp+clJqOdrUcYVjZ8u5bv45bOvGoybbKMbc=)
2: 2815E7D4BF4211E9A93A3957C4F9AE02.roa (hash: q2QK7nleDfVKJdydH1BhBELt50ggXZGsQHTMsb+GgzQ=)
3: 43487B18BF1811E9A2C00E63C4F9AE02.roa (hash: R7GiqDFWTFG5/KzmRDTnU8CgA9M5hlMTeWah7zEstzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl
rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11274 (0x2c0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2AE5, serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D
Validity
Not Before: Jan 24 15:24:04 2026 GMT
Not After : Jan 31 15:24:04 2026 GMT
Subject: CN=6974e414-a72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:df:7f:5b:f9:c2:0b:6c:65:1f:e2:ec:3d:
06:8e:b1:53:2a:2e:99:96:f6:23:de:05:7d:36:60:
c1:b0:cc:0c:6a:51:32:9e:c9:4e:06:e5:ba:57:34:
37:96:b6:a7:da:64:5a:40:76:a3:fc:b0:89:4f:78:
60:79:cf:70:bf:b5:f7:f9:fb:b9:aa:f4:42:17:6e:
e3:ea:7f:47:87:52:f2:86:54:e5:27:be:27:a7:63:
49:2b:0b:69:a9:e6:63:1a:65:88:2c:9a:d4:20:0d:
52:ad:ef:95:f4:c2:91:e0:77:16:8d:9c:4b:e5:10:
18:4a:ae:31:b5:f2:51:dd:49:ce:ab:68:05:14:3d:
9c:97:83:ad:2d:65:c0:53:c6:10:94:89:b1:31:58:
1c:96:a4:ac:c9:dd:59:bc:8d:10:75:87:4d:a9:8d:
ba:9a:b4:83:3e:75:22:7e:e3:35:4d:e7:f9:f2:21:
2d:35:c1:b9:e3:31:3e:4f:9b:bc:44:3a:26:e5:42:
5e:80:af:a5:e6:f1:ae:c2:08:19:07:03:46:e3:f2:
44:92:6f:d7:91:2b:14:ea:f2:76:79:60:7b:0d:98:
fe:f4:40:40:f2:86:35:2e:33:ce:54:4f:6d:7a:83:
ad:ba:2a:30:1f:04:b6:e7:20:f1:c2:cb:a4:77:b6:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E4:95:04:52:48:88:EE:F8:91:D1:DB:46:25:78:DA:F2:4F:9D:BC
X509v3 Authority Key Identifier:
keyid:B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e0:d1:7f:c1:8e:56:14:10:89:19:1f:c2:33:96:8f:49:19:
ca:1b:26:ca:c7:22:0e:fe:da:53:b5:42:d6:f3:f2:f5:e4:74:
de:78:b7:05:e1:0f:f2:b1:b5:7a:48:d9:c0:d0:b4:b5:01:7c:
db:89:8b:e7:82:35:59:5a:2b:b5:d6:d1:e3:01:fe:05:24:44:
66:50:ad:54:fc:4c:01:47:dd:42:5d:10:16:1d:cb:cf:07:dd:
b8:b4:89:0b:3f:a2:b9:22:69:3c:94:46:77:96:38:e1:14:88:
bf:b0:98:da:bc:11:2c:02:2a:64:18:13:2c:04:89:29:57:2e:
3d:69:36:3d:cc:ef:85:34:cb:56:b6:38:07:a8:c1:b9:6d:60:
97:f4:9c:79:64:45:bf:f6:68:66:c1:19:5b:c0:61:b6:4e:85:
3c:8e:d8:cc:d2:93:4a:11:8a:51:0a:16:c8:1d:b8:0b:32:42:
5a:1a:89:8c:a4:09:cf:4b:cb:24:42:9b:df:7b:3d:b7:6e:66:
34:78:d8:79:fa:85:fc:ea:78:58:76:6e:5e:24:10:05:96:e7:
99:b9:32:40:f2:6e:99:4d:0f:51:51:23:0c:bd:14:d6:88:a9:
1c:4d:55:e0:59:40:f7:f6:85:0e:e9:c5:55:4d:65:2c:6c:9e:
91:a2:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:06:09 2026 by rpki-client