This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft
File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json)
Hash identifier: KjCqRmWDvSXcXjZhMy55TYgOscZ7G6MfXFnHKSK+ofg=
Subject key identifier: 85:63:BA:76:C7:2F:7E:75:0B:22:A5:D9:16:BD:BA:C2:4B:FB:8F:50
Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF
Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF
Certificate serial: 2077
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft
Manifest number: 18F6
Signing time: Mon 12 Jan 2026 16:55:39 +0000
Manifest this update: Mon 12 Jan 2026 16:55:38 +0000
Manifest next update: Mon 19 Jan 2026 16:55:38 +0000
Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: rbu9/7f6j8CL5J9wsF0vPZuVdmOnHdpSb2dGLInsH4o=)
2: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: EHblWN/sQZKLg9HDhv2zyoanKhtnruUlRN2jtd5a8fY=)
3: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: vkLbx3UKTR9g9Nkc39hdbcDwUn28d/ORpVf5hXTtd6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl
rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 16:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8311 (0x2077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91972B6, serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF
Validity
Not Before: Jan 12 16:55:38 2026 GMT
Not After : Jan 19 16:55:38 2026 GMT
Subject: CN=6965278b-c1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:2a:52:34:2d:1c:69:c6:3c:7f:71:f7:69:
1b:35:ea:f0:35:6b:75:5d:ab:15:65:1e:7b:0a:84:
67:91:ba:08:f7:ba:97:cb:26:b0:61:bc:76:94:55:
a5:a7:e6:6c:d9:73:dd:05:b7:44:68:3b:ff:68:14:
07:6c:67:6e:36:b6:44:b7:61:27:a7:e6:4f:f3:c1:
02:d5:ea:57:7a:a5:00:6b:21:d4:a6:a2:87:96:58:
9b:97:17:90:1f:2f:04:26:e9:22:c3:bc:7c:78:ea:
84:11:54:36:a2:f8:dd:b3:fe:68:f1:d2:d2:4a:b2:
43:16:eb:e0:23:7f:95:06:57:aa:ff:cf:e4:c4:0e:
52:4a:20:e5:af:2b:67:b8:d9:56:b6:ff:fe:ef:09:
5a:5b:66:e8:8a:08:46:b9:42:e7:bc:05:ac:7b:62:
ab:ad:4e:c7:f0:ef:f5:46:16:71:99:d5:d5:63:7c:
35:07:43:3e:ad:b4:9c:0f:fb:d9:04:bd:27:84:f4:
0c:e5:b3:b4:e7:e1:0d:c2:56:3d:2f:3a:a2:df:6a:
89:e5:a6:47:dc:eb:1f:26:b2:63:35:46:6b:48:66:
06:65:c5:a5:3a:11:f2:e0:c8:e2:be:21:0a:dd:e7:
a0:d6:27:52:c0:da:aa:83:b7:cb:e0:ea:9d:70:b3:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:63:BA:76:C7:2F:7E:75:0B:22:A5:D9:16:BD:BA:C2:4B:FB:8F:50
X509v3 Authority Key Identifier:
keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:bb:a9:e6:fe:e9:a8:12:01:4b:4a:d1:b4:4d:33:06:5b:c0:
ec:f3:d5:95:c9:79:d7:44:6e:36:ac:92:93:e3:65:0a:37:36:
77:5e:dc:a7:9e:9c:ae:b5:c1:ff:c5:64:6d:36:ef:c3:90:c3:
fb:68:c7:b6:32:f2:d1:48:8b:a2:e5:e4:13:63:f4:ba:8d:65:
4e:45:fd:c5:46:c6:d8:7a:80:f2:b0:3e:1d:7b:c9:1c:52:eb:
51:66:d9:99:e7:c8:65:22:5a:6c:16:80:71:8a:2d:2f:0e:36:
7d:b5:83:8f:f0:ad:56:f6:a4:52:8a:1c:07:8a:6a:81:14:d6:
b1:ca:ed:8a:d3:6b:d1:10:10:b1:f7:2e:37:d1:7b:93:d1:03:
4c:9f:b4:c4:a4:a7:10:9d:a6:e5:0a:cb:74:29:2f:80:c0:15:
5d:29:ad:03:4b:80:ef:c2:59:37:ee:b4:d2:67:e0:fc:26:88:
7d:6b:ab:97:e7:22:ea:56:4d:3b:cc:ea:93:cf:97:b3:1f:55:
40:86:99:31:52:99:09:a0:bd:0f:fe:8a:27:b1:53:5c:7e:8d:
6d:18:17:77:13:e7:6f:65:94:34:98:6e:78:1b:f3:48:dd:b1:
27:11:8e:22:8b:46:70:ca:26:e1:c8:d0:49:1d:05:33:6d:57:
68:b2:55:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:03:37 2026 by rpki-client