This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json)
Hash identifier: yTZcxBzJVR3OKd7EK8RFkluSXJte8OCuKsDlQW8PqRM=
Subject key identifier: 02:A6:6F:1A:E6:AC:92:05:01:8E:2D:FC:DE:DD:65:D4:EE:BC:41:58
Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37
Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537
Certificate serial: 0CF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
Manifest number: 0CE9
Signing time: Sat 24 Jan 2026 17:46:43 +0000
Manifest this update: Sat 24 Jan 2026 17:46:43 +0000
Manifest next update: Sat 31 Jan 2026 17:46:43 +0000
Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: /vicN/mIOw8ZqnrOjQZH/QhFvPtxu2x3X7Jx3UoNoEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl
rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3314 (0xcf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537
Validity
Not Before: Jan 24 17:46:43 2026 GMT
Not After : Jan 31 17:46:43 2026 GMT
Subject: CN=69750583-3aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:1c:45:e3:4a:f6:6b:d7:0c:15:96:eb:a7:
b5:5a:32:12:5d:27:db:33:47:aa:cc:fe:00:42:46:
c2:70:d5:be:67:18:aa:4c:d0:4b:52:55:42:d3:c6:
2e:ac:03:eb:9f:e6:77:8d:23:0d:ef:fe:8d:41:6b:
68:76:9d:a9:6d:1b:2f:32:a2:a8:99:49:3c:34:26:
00:9a:13:74:9d:06:63:4d:4e:0b:4f:c1:65:94:22:
91:c8:7c:57:78:c4:4e:81:9c:21:31:45:aa:6c:4c:
67:9a:e3:85:d4:f2:39:0c:26:c2:1c:54:c8:7a:21:
16:ad:b4:7d:ba:c9:4a:1f:cd:18:2d:35:48:1b:d1:
fe:54:0f:8d:cf:39:a4:89:cb:61:e9:bc:d1:4c:80:
c7:47:5d:d9:2d:fb:88:f9:3a:85:32:6c:42:f2:bb:
49:2a:f9:85:d6:e3:3d:cc:c4:21:d5:4f:38:5a:45:
cb:10:7e:96:d8:ab:7e:d3:37:77:a0:a3:6b:6e:cd:
69:bc:1c:04:4d:7e:14:31:82:19:a4:f3:32:2c:07:
0b:5a:f3:70:5f:0f:ab:48:ee:ce:24:de:0f:19:b4:
d7:b5:ca:83:f8:58:c3:6e:70:74:f1:da:8b:99:62:
79:18:cb:90:18:21:8a:1d:8e:ec:fc:cc:01:73:6e:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A6:6F:1A:E6:AC:92:05:01:8E:2D:FC:DE:DD:65:D4:EE:BC:41:58
X509v3 Authority Key Identifier:
keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8d:36:44:5e:7f:ce:2f:77:e7:29:ac:28:a0:0e:88:2b:11:
b9:c2:70:df:e7:4c:88:fb:a2:ae:dd:0f:0e:98:0c:93:67:49:
ad:54:a0:17:a1:2f:a9:53:e0:cf:b2:3d:9f:30:46:55:5c:91:
e9:6c:b3:83:19:66:14:2a:af:de:c1:01:91:ae:7f:d1:59:62:
ac:40:6c:77:2f:b5:50:83:5b:f4:a9:21:46:8c:a7:cc:6e:f2:
c8:56:25:26:aa:6f:b1:c0:e1:77:85:e9:65:b0:5c:79:7e:c6:
9f:29:4c:b8:01:76:f2:35:08:66:57:50:f1:a4:f7:06:e2:c3:
bd:3a:d3:df:ae:c5:80:c8:dc:38:d4:a0:2e:75:47:00:9c:1e:
a7:e1:94:39:4e:df:5a:27:12:4a:0e:1b:92:36:55:76:30:f9:
6f:b0:24:96:b0:66:b5:8b:40:3f:8f:8d:b2:07:56:bb:de:15:
4a:0f:4b:ff:70:5e:fb:9b:9d:b6:5e:7c:82:5a:0c:1e:2f:82:
ce:c6:98:56:d3:77:4a:27:b9:6a:9f:5a:a9:9a:4a:e7:67:c3:
96:44:87:d1:11:55:f8:7d:bc:fd:f5:e3:b8:ac:01:d6:9c:6d:
15:be:f1:e6:ab:e2:64:5e:f8:cf:38:d4:d9:c0:c5:20:9f:e0:
c5:41:b5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:36 2026 by rpki-client