This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
File: dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft (raw, json)
Hash identifier: eyVBkGvQC+SSxaS8uQ1xtE/Jt1U/7kJkPKKM6YXRAhk=
Subject key identifier: C0:6C:45:7E:B6:64:D1:DF:5D:2D:6F:D7:A1:12:44:0B:78:E1:D5:3F
Authority key identifier: 75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97
Certificate issuer: /CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997
Certificate serial: 05AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
Manifest number: 05AE
Signing time: Sat 24 Jan 2026 22:20:44 +0000
Manifest this update: Sat 24 Jan 2026 22:20:44 +0000
Manifest next update: Sat 31 Jan 2026 22:20:44 +0000
Files and hashes: 1: dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl (hash: gVZ4Q4PV/V5j6JH1IjeEHLYl86PxC6Zs6NNG4V6koWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl
rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1454 (0x5ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC705, serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997
Validity
Not Before: Jan 24 22:20:44 2026 GMT
Not After : Jan 31 22:20:44 2026 GMT
Subject: CN=697545bc-1015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:e3:df:a2:7d:43:c7:6e:55:f1:f7:3f:e4:
cb:a9:3c:9b:b9:95:b0:7d:d5:98:f1:46:c8:a2:ce:
fe:27:38:c5:fe:fb:d8:2c:e2:49:e7:ec:b4:d7:69:
19:4c:18:7d:17:56:b4:29:71:77:fb:c9:cb:81:fa:
b8:bc:fc:3f:09:d7:2b:ee:0e:b1:07:d2:24:7c:b5:
2e:37:17:84:63:2d:b4:9d:8b:fb:69:c4:b2:a1:58:
d8:b2:9f:e2:54:08:d2:b4:fd:80:37:14:13:89:36:
1c:07:76:f3:cf:3b:7a:1f:8e:39:67:21:60:5d:8e:
01:fc:79:6f:5a:ac:6e:4c:2b:45:da:f5:f2:ee:78:
cc:3f:59:f8:9c:16:09:af:49:80:d2:ec:6c:b1:f4:
ef:df:40:7a:50:89:47:3e:ca:23:47:12:09:54:19:
9a:55:b4:d7:31:b5:53:a8:c9:21:11:34:fc:c9:bf:
ce:b9:e2:d3:ca:6d:f8:fe:fa:1f:7e:20:4d:e7:8e:
53:e8:51:e7:d1:fe:b7:44:0e:96:c4:65:06:fc:e5:
ae:ef:a3:38:73:a3:5e:be:e1:6b:ea:f5:d7:84:2c:
27:63:26:e8:21:e7:27:64:ec:81:6e:33:5f:b2:08:
c7:e3:17:d1:c9:b1:01:89:47:a1:b1:45:b4:d2:83:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6C:45:7E:B6:64:D1:DF:5D:2D:6F:D7:A1:12:44:0B:78:E1:D5:3F
X509v3 Authority Key Identifier:
keyid:75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fa:0d:4d:df:3d:9c:c4:14:c8:ab:c7:4e:1b:fc:89:22:47:
79:1e:53:53:fc:03:d2:c9:b6:f9:09:ed:d6:34:e1:99:e3:7e:
94:12:cd:45:95:14:a1:c5:c1:22:df:d6:9a:8d:1f:11:1b:fd:
8e:7f:d4:13:d8:57:95:02:a6:ae:29:45:55:4d:a7:21:ed:04:
8e:84:d2:15:66:0d:54:cd:30:05:6b:5b:8a:a2:15:37:2e:bf:
46:12:d2:4b:cc:8a:c5:3e:23:85:f3:4a:04:46:77:60:95:eb:
d2:44:12:1f:55:1c:95:4a:0b:c5:2a:c6:32:7b:6d:04:4f:d2:
09:e6:3e:64:1a:67:5e:de:17:cf:b1:d2:37:53:76:a7:6b:7b:
a8:fe:09:03:ed:76:2d:4d:79:50:0a:ce:b5:68:59:0f:34:82:
2f:0b:1f:d2:83:df:74:bd:31:81:fd:dd:e6:f0:64:6e:d4:df:
7f:69:53:c2:4e:ad:7e:a8:98:dc:5a:10:0a:e8:21:03:4f:d6:
b7:36:e7:3f:e8:d9:5b:07:ff:59:a5:46:73:d9:7c:7d:43:c5:
89:45:65:7e:70:66:0c:f4:e0:ab:df:93:4c:53:b8:7c:da:a7:
88:9c:c3:fe:90:dc:e5:11:6e:c0:ac:4e:2e:8d:dc:cc:1c:01:
4d:37:68:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:27 2026 by rpki-client