This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
File: rcLQEHTd7bWHQSLy4bisO07c23s.mft (raw, json)
Hash identifier: 2d+U3j5e1EkxYbHnpS0ZGpKlOLTiezcLwH+UxKujQRU=
Subject key identifier: A2:74:DC:38:EB:27:D9:8D:6F:AB:54:0F:EF:CA:8D:8B:9E:60:A0:43
Authority key identifier: AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B
Certificate issuer: /CN=A9114DAE/serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B
Certificate serial: 0817
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
Manifest number: 0817
Signing time: Sat 24 Jan 2026 20:18:36 +0000
Manifest this update: Sat 24 Jan 2026 20:18:35 +0000
Manifest next update: Sat 31 Jan 2026 20:18:35 +0000
Files and hashes: 1: rcLQEHTd7bWHQSLy4bisO07c23s.crl (hash: dAiu+UyfK5TK+Ee7ixGeYRuU/Vm2efUAq4CCLH/DvQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl
rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2071 (0x817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114DAE, serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B
Validity
Not Before: Jan 24 20:18:35 2026 GMT
Not After : Jan 31 20:18:35 2026 GMT
Subject: CN=6975291c-ee17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:2e:be:87:2d:bf:63:07:5f:6b:a4:7c:ba:
0d:84:45:14:7a:2b:d4:d4:ec:8f:e5:f9:5a:f5:af:
22:a6:89:62:e5:2f:22:65:aa:0f:e7:5a:c1:66:11:
fd:a3:08:9e:35:97:b3:aa:48:bb:82:ff:e0:77:52:
af:3f:32:ee:38:80:f0:e5:80:b5:f4:35:e6:32:90:
f8:6f:16:23:b3:e6:94:c1:48:44:06:41:d7:47:7f:
42:78:39:3a:8f:3d:3d:41:26:bb:50:36:d0:13:60:
7a:a2:b9:37:fe:23:d5:bb:76:19:56:e2:b0:90:6b:
0c:ac:47:dc:b9:d4:65:ff:e3:b9:1a:f9:1f:11:1c:
a7:23:80:11:98:b4:2b:61:38:4b:6f:42:49:86:4b:
84:ce:b9:78:2e:a5:a2:3d:59:2e:a3:0d:bf:f9:f6:
a4:a0:a9:31:66:90:47:ae:0e:c3:84:3e:2c:4d:3d:
a5:0d:d2:cf:df:b2:1b:3a:88:22:94:65:9a:85:e7:
9d:36:52:7a:1d:50:a7:01:26:50:9d:66:ee:46:d2:
1a:96:89:d0:9e:ae:14:00:93:86:f4:b0:01:39:a6:
1b:0d:79:a2:cd:8b:4a:3c:fc:3e:82:88:51:c4:0e:
c9:c9:7b:7d:b9:1f:05:b9:be:a0:76:a6:ae:ef:bc:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:DC:38:EB:27:D9:8D:6F:AB:54:0F:EF:CA:8D:8B:9E:60:A0:43
X509v3 Authority Key Identifier:
keyid:AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ff:95:8a:f3:9e:82:86:91:6f:d8:87:bb:3e:d6:52:16:86:
96:43:5e:39:74:d1:54:79:21:64:32:7f:47:b4:ca:8c:60:44:
27:ea:05:db:d2:5a:28:98:8e:6b:39:2c:e7:92:d8:83:cf:2b:
25:b3:16:3e:fa:a0:19:27:98:2b:1d:14:85:83:f1:75:55:08:
07:1f:2b:b1:8b:af:4d:76:5a:f7:8a:87:1b:32:fe:45:fb:24:
24:8c:ae:fa:f7:69:28:12:58:29:d5:15:c4:8e:71:b5:3d:f5:
01:b6:45:8d:41:7d:10:65:7a:91:28:bd:1c:f8:06:34:fc:db:
22:bc:68:28:7c:71:76:13:36:ae:d5:06:65:13:46:28:6d:21:
4d:59:f6:08:47:75:77:01:af:e4:27:53:0f:5e:5e:01:a4:51:
90:20:73:22:61:6a:ae:3b:78:f0:3b:9b:81:6a:fd:7d:91:f0:
00:d1:71:23:6c:d5:08:ef:d7:d3:a0:56:f8:86:33:44:41:37:
d2:a5:75:77:c0:fe:cd:3d:a3:22:61:1d:c0:1c:36:b4:dd:76:
2e:0a:90:9a:29:68:fe:de:9e:48:42:c9:1c:15:cf:24:aa:57:
05:82:14:5e:ba:6f:3f:f0:3d:19:e6:7a:09:ad:50:6c:69:84:
06:55:4f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:27:51 2026 by rpki-client