This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft
File: PDml0ZGM9lqyVjMi8PXxQwmme48.mft (raw, json)
Hash identifier: +A4PxWyPFI7sejtb2fNDi0qrItVrwQmOsFKgAqudzVA=
Subject key identifier: 01:1A:44:F3:FC:DB:4C:DA:01:FE:AE:CB:96:3E:F8:9E:B0:0F:B0:8A
Authority key identifier: 3C:39:A5:D1:91:8C:F6:5A:B2:56:33:22:F0:F5:F1:43:09:A6:7B:8F
Certificate issuer: /CN=A91E2F2C/serialNumber=3C39A5D1918CF65AB2563322F0F5F14309A67B8F
Certificate serial: 09FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft
Manifest number: 09E9
Signing time: Mon 12 Jan 2026 19:22:50 +0000
Manifest this update: Mon 12 Jan 2026 19:22:49 +0000
Manifest next update: Mon 19 Jan 2026 19:22:49 +0000
Files and hashes: 1: PDml0ZGM9lqyVjMi8PXxQwmme48.crl (hash: TYHz3fPnhbWnDP9JJ+t770++5VJ3nc7WTnxTAx3olqw=)
2: DE07328A778911ECBD9C7748C4F9AE02.roa (hash: V37MROUsA/Vlywtiw7YJvjwfZWxefXilScjM3KKgLC0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.crl
rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 19:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2555 (0x9fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2F2C, serialNumber=3C39A5D1918CF65AB2563322F0F5F14309A67B8F
Validity
Not Before: Jan 12 19:22:49 2026 GMT
Not After : Jan 19 19:22:49 2026 GMT
Subject: CN=69654a0a-bc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:70:e2:ec:8d:ae:67:2d:c6:29:e5:ea:6f:
de:8f:94:36:fb:33:e8:12:79:4c:cf:89:9a:a3:85:
d7:43:6d:4f:df:59:c0:de:d4:99:2d:af:38:f5:04:
85:8f:84:f5:17:57:8c:6a:3b:06:85:78:6f:cd:59:
b1:21:a4:82:1e:66:67:c5:30:9e:c9:4a:0c:a0:f4:
01:a5:34:2d:49:12:f0:a4:69:2b:97:dc:09:0c:b7:
a8:a3:61:df:67:68:f7:36:e8:08:52:0e:ed:44:83:
6d:3e:83:6a:68:37:83:39:96:28:62:d9:a1:69:f7:
8f:f1:4a:9d:7c:e8:60:b8:37:92:92:9f:94:62:7e:
c4:b7:81:81:2d:97:26:9b:e9:1a:89:d4:8c:31:ba:
8a:9b:2b:63:ad:14:ff:16:28:39:24:60:45:ef:db:
e0:de:ac:94:f4:5d:b5:3e:a6:57:df:29:5b:21:ef:
59:02:84:7c:e5:ad:72:f6:c5:f2:2b:3c:6d:d9:0f:
a7:58:fb:1a:b5:b8:ca:8f:71:85:30:32:bf:a4:e6:
c1:22:3c:36:35:f7:19:c6:cc:1a:3d:e8:ef:c9:86:
0f:55:67:af:3e:4a:f5:a0:72:30:37:de:cc:20:8c:
fb:77:09:02:af:53:25:56:6e:24:28:dc:d2:75:13:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1A:44:F3:FC:DB:4C:DA:01:FE:AE:CB:96:3E:F8:9E:B0:0F:B0:8A
X509v3 Authority Key Identifier:
keyid:3C:39:A5:D1:91:8C:F6:5A:B2:56:33:22:F0:F5:F1:43:09:A6:7B:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:5a:a4:39:dc:25:84:06:f7:79:2b:17:84:8a:88:4f:db:54:
19:e9:e1:e0:e2:96:8b:20:71:20:cc:a6:b8:42:cd:fe:15:66:
27:f9:26:dc:b5:7c:75:d7:38:02:ea:ed:31:c7:8c:07:4b:43:
de:dc:5e:f6:c1:88:6b:74:18:93:87:d8:7f:77:aa:af:60:65:
eb:23:b9:89:f3:88:c5:56:21:25:87:4b:9f:ad:78:54:60:8b:
d9:ca:94:e8:35:ab:b1:65:82:e5:94:c5:2b:94:4d:ec:2b:02:
51:25:dc:d7:00:95:dd:fe:99:b3:f4:d0:bc:b4:88:6b:23:67:
c4:e2:30:42:26:37:e3:2d:26:3b:e7:49:e4:7d:c7:5a:71:11:
2b:ad:1d:6a:87:14:e5:53:7c:93:64:53:85:14:f5:97:35:a0:
7d:97:77:16:68:e0:79:3c:59:53:0e:aa:3d:ba:7e:a2:eb:db:
f2:9a:3e:85:01:0c:02:83:2f:58:81:48:b9:7f:28:28:d8:08:
14:1b:26:61:90:ef:cb:e3:5c:b0:d3:b8:03:81:70:01:fa:e5:
70:fb:67:2a:30:8d:d5:7e:6f:8f:2d:c1:de:e3:98:bd:64:38:
0c:a6:d3:b4:8c:c4:29:1d:91:6f:48:d6:8e:01:0d:1b:34:58:
d9:40:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 00:12:51 2026 by rpki-client