This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: YWSbwj8Z1FUAnCUmhd/2Dl5UuXSVYeCZNkvxveIEl0k=
Subject key identifier: DC:14:AB:BA:DF:A5:1A:B9:81:80:96:98:77:15:C6:0B:87:66:15:D6
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 5878CD24BFAF0DEF4D48C666A8C86B443E961695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 0876
Signing time: Sun 25 Jan 2026 12:43:33 +0000
Manifest this update: Sun 25 Jan 2026 12:38:33 +0000
Manifest next update: Mon 26 Jan 2026 15:55:33 +0000
Files and hashes: 1: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: Ncgu1a2T21OhbN3oNHBmUzskub5uVy54SmGOJ7OwCMw=)
2: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UC4fcIxC57X0WQOWt1PA/l9hsi16QhPa9mORMeVjnmM=)
3: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: PsSv1RolF2tm8DgdKE008svzRqQgBB+FP6Gwr83IRII=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 15:55:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:78:cd:24:bf:af:0d:ef:4d:48:c6:66:a8:c8:6b:44:3e:96:16:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Jan 25 12:38:33 2026 GMT
Not After : Jan 26 15:55:33 2026 GMT
Subject: CN=DC14ABBADFA51AB9818096987715C60B876615D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c0:f1:7a:6e:90:39:ba:b3:cb:5b:d8:3c:a1:
9d:58:76:94:e4:c9:74:f2:10:b7:a5:84:dc:97:42:
e5:1b:7d:33:2c:bb:93:c9:6a:7a:51:27:40:34:09:
fa:7e:e9:b4:1d:ca:2c:98:8d:74:34:98:ee:58:1e:
0e:47:09:7d:99:a8:31:c6:6c:7a:25:ac:9a:b8:0f:
e8:9d:21:5a:04:5b:ad:c9:97:dd:ff:a4:00:13:fd:
61:f6:d5:be:a0:0d:96:1b:7c:ac:c0:18:3d:e5:2c:
a3:94:8d:d9:f0:6a:62:7a:65:18:47:3e:7c:ba:01:
f9:0a:17:ed:57:8b:ea:73:56:a6:30:d3:64:58:5b:
c4:cb:6e:51:68:b0:28:2f:48:af:0c:ad:00:20:50:
81:23:55:e1:26:db:1e:f4:92:f8:44:33:b9:c0:61:
45:73:75:35:92:2a:ae:90:07:8e:6c:a2:9a:c4:8c:
94:71:b5:89:4c:10:be:1e:cd:ca:f3:12:7e:1a:3e:
0d:d6:e4:45:cf:85:f0:02:40:be:42:42:3f:d5:ef:
24:d0:0c:ac:67:99:0b:c4:6b:b3:7f:0e:3b:e6:b9:
a0:4a:a3:59:f2:7f:4e:41:9e:a5:3c:b5:9e:7b:96:
a5:dc:ce:a4:65:59:c0:e9:f2:48:60:c7:f9:b9:1f:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:14:AB:BA:DF:A5:1A:B9:81:80:96:98:77:15:C6:0B:87:66:15:D6
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:00:95:db:9e:de:72:0f:23:23:77:1e:a0:37:f1:eb:16:33:
8b:6d:c1:db:14:38:49:11:39:d4:cf:01:2a:c7:29:1a:2b:34:
22:cb:f5:cf:cd:57:48:64:64:85:87:8d:aa:18:d3:c3:57:56:
df:49:84:6a:fe:d1:fc:08:30:88:76:a2:32:2e:e8:09:c5:6c:
69:0a:3b:0c:25:21:0c:a6:ac:2f:7c:de:92:2a:3b:ee:fe:2c:
d6:f3:96:82:6d:01:86:55:e8:5c:a0:e0:93:58:f5:c1:39:d8:
97:db:05:46:77:3e:1f:0a:62:00:33:ce:01:c7:5d:f6:e5:04:
72:28:6c:6b:6c:2a:81:75:8d:36:81:25:a7:c3:33:3f:36:3a:
ca:3f:30:b2:06:8a:c1:e0:df:bf:45:b9:8e:43:66:89:41:f6:
55:d4:05:83:bd:e5:31:68:5d:0a:fc:45:bc:68:82:72:fa:ef:
8e:9d:ce:bd:79:8d:60:48:0a:fb:aa:9b:76:86:59:17:ba:7a:
af:2c:9a:4c:4c:f8:cc:16:10:af:8f:65:b2:fc:f0:27:0c:a4:
29:66:3f:3a:9c:34:b9:01:a8:21:e8:61:15:14:61:43:aa:d2:
a2:a8:0e:d5:5d:75:cc:9b:5d:b4:56:7d:8e:5f:8b:b0:ed:02:
3b:03:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:53:25 2026 by rpki-client