This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
File: 0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json)
Hash identifier: JkrU5UqLxqr/aneAVxREZWNeieF8SdmkAZpxA9uq04k=
Subject key identifier: 1C:B5:BD:6F:76:81:8B:16:C7:8F:4A:89:1B:A4:68:59:09:BB:3E:85
Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
Certificate serial: 10E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
Manifest number: 10D4
Signing time: Sat 10 Jan 2026 17:01:09 +0000
Manifest this update: Sat 10 Jan 2026 17:01:09 +0000
Manifest next update: Sat 17 Jan 2026 17:01:09 +0000
Files and hashes: 1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: 004ysOF4vFFqoa+deiNcPIrcyydUKms67ENqKu/yMrE=)
2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: 2WzkstGBbGRj/Y7Ml4qowog4ksR3on7JJQYm4a6p25I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl
rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4320 (0x10e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913559B, serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
Validity
Not Before: Jan 10 17:01:09 2026 GMT
Not After : Jan 17 17:01:09 2026 GMT
Subject: CN=696285d5-8339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:a2:6c:77:03:e3:5f:88:93:d2:5b:a3:5e:
1e:cb:8b:37:05:5e:0b:b7:a2:aa:d3:13:7f:d2:bd:
ee:ca:83:ff:6d:7e:ba:f6:be:21:ee:7e:7f:0c:17:
6a:d5:1a:c6:32:f0:2a:14:66:e1:57:a6:5a:f5:75:
5d:b5:53:fa:b6:e1:22:64:e5:0c:f6:0a:dd:b2:b9:
8b:2e:e5:8c:49:52:ba:fb:47:83:e0:82:b6:6e:82:
71:56:1f:13:77:c2:d6:b3:b7:aa:de:45:bc:21:88:
6c:e1:69:cb:af:46:a9:38:45:4e:f1:78:1c:5c:a4:
f0:13:5a:29:f6:2e:71:79:eb:4d:b5:55:89:9f:e6:
68:ab:f7:e3:a8:11:4a:0d:5d:f0:95:65:4c:14:79:
6b:8c:cf:58:95:5c:9d:a5:1d:55:a5:59:2c:06:08:
b5:00:7a:66:20:80:6c:6f:4d:9b:3d:43:8a:67:bf:
be:38:1a:41:64:9f:40:d7:c9:0f:ac:02:8b:51:49:
4d:90:37:b1:0c:66:7c:7b:63:65:2b:0b:17:f7:fa:
37:81:43:30:ea:cf:a0:0c:b9:37:c0:29:c6:e2:b8:
fd:87:65:3d:08:80:4b:9a:b0:83:78:7d:c5:39:90:
b0:e2:a2:7b:62:fe:29:bd:28:33:18:f2:65:89:04:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B5:BD:6F:76:81:8B:16:C7:8F:4A:89:1B:A4:68:59:09:BB:3E:85
X509v3 Authority Key Identifier:
keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:7f:0a:2a:01:d2:ce:8b:93:05:c1:91:6d:b4:7f:36:4f:c9:
6f:ce:ac:7b:7b:f4:cd:c0:01:6a:40:03:62:06:85:46:e0:2d:
bc:64:f9:72:55:43:10:ae:bf:57:93:b7:96:11:65:34:26:21:
11:2e:e0:c8:d5:48:d7:fd:54:f6:9c:d1:92:88:37:cb:e1:8b:
b0:c6:7d:17:17:19:18:cc:cb:d9:a9:81:41:fc:61:2d:e0:02:
36:3c:f4:86:2b:38:4d:df:cb:0e:d2:75:d0:63:db:9a:65:81:
f1:72:9b:68:d3:c6:1e:b4:f8:24:17:1b:ff:d3:e8:1a:85:f8:
ea:49:25:1b:05:a1:e5:78:c5:12:b1:ba:60:51:7e:57:b7:8d:
9e:2d:ff:a8:c0:72:79:dd:d4:44:68:36:61:2e:fe:3d:33:48:
fd:fc:ef:08:33:fe:a1:f7:e6:b7:6e:3d:32:c4:30:a2:6c:1a:
cb:96:4d:4f:af:d1:c2:4f:03:d9:02:f0:cd:8d:12:1e:c1:fb:
79:6b:c8:51:8b:39:cf:c3:35:0a:c4:16:a7:ce:e0:8b:1b:83:
1e:1b:ec:da:55:41:59:da:b2:e8:57:9a:97:37:88:9c:1d:46:
e5:71:4b:8e:4c:67:10:b0:73:6e:50:9d:cf:3b:fc:f5:fa:b5:
8a:1e:59:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 11:28:18 2026 by rpki-client