This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
File: 0pm8o5yZPbgNETe5mbIhhGrPVWs.mft (raw, json)
Hash identifier: +COW2ckPXwBw05QprSvCg0P3rqjH2jC6BfcygR2jE0I=
Subject key identifier: 8F:38:A8:76:70:A3:F1:9E:60:FE:9A:74:31:F5:59:90:1A:AB:D7:64
Authority key identifier: D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B
Certificate issuer: /CN=A9115C2E/serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
Certificate serial: 054C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
Manifest number: 0546
Signing time: Sat 24 Jan 2026 19:11:05 +0000
Manifest this update: Sat 24 Jan 2026 19:11:04 +0000
Manifest next update: Sat 31 Jan 2026 19:11:04 +0000
Files and hashes: 1: 0pm8o5yZPbgNETe5mbIhhGrPVWs.crl (hash: LgniM2WsNNwIoqg9mopv5yoLzrgqVriN1CoOG8yqyLU=)
2: F490AE2431D811ECA3C4CE3EC4F9AE02.roa (hash: /oifx1YqYxKOVaxnhM6Z6BMW1b5AcpZK0vDtcYNO6Zg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl
rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356 (0x54c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115C2E, serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
Validity
Not Before: Jan 24 19:11:04 2026 GMT
Not After : Jan 31 19:11:04 2026 GMT
Subject: CN=69751949-cb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:24:55:d2:11:7f:8d:05:9b:8a:1c:4c:7a:
21:d5:39:10:38:9f:78:52:32:87:e3:91:c1:83:87:
4a:b5:58:99:d9:45:04:37:29:88:09:6e:be:da:16:
d2:48:f8:ec:67:07:36:af:86:94:02:43:f6:92:a5:
a9:55:5a:cf:0c:43:2a:6a:59:73:18:29:52:53:74:
a8:4a:bd:38:7c:7f:6b:f7:4b:dc:e3:1e:28:a2:d5:
18:3d:3f:0b:c0:93:96:6e:be:5c:8e:0c:a4:9e:93:
60:f9:47:63:81:17:89:f1:44:cb:f1:13:ef:5d:f1:
f9:e0:de:43:dd:0d:77:4b:4d:37:dd:1e:ec:37:25:
bd:96:4b:64:f9:d5:d8:f0:e4:ae:16:94:08:66:ea:
3a:e1:e6:44:8e:de:e9:ea:4b:01:a2:86:51:9d:52:
cb:d0:93:af:d9:29:86:a2:57:bc:ad:39:6c:4d:18:
97:01:2f:10:5b:be:a5:4f:da:3b:12:16:7b:b7:54:
53:cb:34:fc:f5:a4:7c:97:7b:92:40:31:f2:04:81:
0b:15:7e:04:dc:e6:bb:ae:e9:3f:20:f6:2b:c7:19:
97:2a:01:8b:b1:72:3c:fc:73:14:f3:5f:2b:be:33:
5b:f6:89:d4:f8:df:8f:c0:bc:91:c1:b8:e0:1e:bd:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:A8:76:70:A3:F1:9E:60:FE:9A:74:31:F5:59:90:1A:AB:D7:64
X509v3 Authority Key Identifier:
keyid:D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:50:c0:30:b6:38:e0:99:45:79:3a:ec:08:18:cb:53:b4:d3:
d3:8e:60:27:5a:02:4f:90:d3:97:03:e1:51:1a:30:7f:7b:66:
2a:2c:4f:67:01:93:67:b4:34:20:d2:91:fb:e5:f7:fd:a2:61:
4b:b4:71:9c:8b:d9:ba:35:c0:e2:dd:9e:63:87:e3:eb:71:de:
ff:a9:6f:64:a2:01:d2:70:0c:97:35:51:f6:5d:27:b6:f4:fb:
9f:65:28:1b:ad:76:81:0f:ec:78:c3:b2:4b:1e:bb:c4:4b:85:
51:69:f7:9a:fc:74:d6:6e:39:70:22:34:e9:fb:23:61:13:2a:
40:f3:2a:b6:71:7a:76:a1:44:ea:1b:aa:52:94:a0:82:2d:ce:
c1:b1:53:e2:cf:fc:e1:e1:57:8d:2a:cc:04:0f:87:f6:a5:b3:
bf:fa:ea:ff:80:01:df:c1:5a:60:c1:95:9b:5e:91:3c:7c:9b:
fd:97:c7:d9:ce:8e:61:74:a1:63:c8:57:4d:7f:99:eb:ad:dd:
69:21:a5:7f:48:3e:eb:b4:cd:1d:c6:2b:5d:7e:d0:30:41:b2:
e5:5d:f8:7a:5d:9c:0d:16:a6:05:50:e3:35:24:cd:11:ab:af:
04:bc:93:2c:e5:69:56:6e:5e:3b:80:02:43:a9:19:a6:0a:ee:
73:bc:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:50:26 2026 by rpki-client