This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json)
Hash identifier: qYmgGa159FgwoOv4lER5S2Oe/yBuVipsrmfpNaNYEX0=
Subject key identifier: 8A:62:57:A0:D5:3D:8D:F0:3F:C5:1D:E0:8D:AC:D7:A1:99:94:08:58
Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
Certificate serial: 01AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
Manifest number: 01A5
Signing time: Sun 25 Jan 2026 02:38:28 +0000
Manifest this update: Sun 25 Jan 2026 02:38:28 +0000
Manifest next update: Sun 01 Feb 2026 02:38:28 +0000
Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: 7Ida1rqL2i8bIAxnQzz3zM/e05TOshK12OnFV4MZhm0=)
2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: pB1reIfyHdxeUfXs+919CuRxWhrieVaoumr+2A452aM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl
rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
Validity
Not Before: Jan 25 02:38:28 2026 GMT
Not After : Feb 1 02:38:28 2026 GMT
Subject: CN=69758224-d52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:ed:0d:b4:ef:83:f3:90:84:9d:e7:46:18:
84:d9:22:53:b8:53:13:56:c8:e9:33:45:5d:25:33:
aa:51:98:83:a9:5b:ed:7e:b9:40:81:b9:68:4a:1b:
01:51:e8:ee:94:db:6b:ed:b9:d8:a7:c6:7b:a4:94:
03:65:be:7b:02:4c:fd:d5:f2:bd:e5:1b:dd:65:f4:
88:5e:0c:0c:9e:a5:80:4d:8b:89:89:2e:9e:7a:08:
e1:e8:08:35:b4:7f:87:db:bf:09:09:79:4f:57:a9:
93:24:d2:bf:62:d4:f9:dd:cb:36:5c:c9:e2:68:ce:
33:20:2e:3c:5c:20:56:54:c2:6c:9b:32:fa:c8:56:
77:9c:2e:85:de:fb:96:61:98:89:d5:05:e5:bd:65:
17:ce:e5:1c:82:28:c9:36:19:ff:c4:a1:1f:df:cc:
16:cf:fa:21:ec:5b:4e:6e:85:60:59:15:e0:9c:c9:
1f:fb:42:a9:93:d5:60:f1:d8:e5:cd:5a:67:94:9b:
77:29:0d:bf:e3:61:8f:09:38:79:eb:ab:77:2a:53:
59:09:38:b5:6b:82:f7:d2:ae:eb:8c:2f:c4:46:8d:
e4:eb:3a:d9:0c:fa:17:92:1e:f3:4a:d2:3f:97:d3:
21:1a:73:56:88:f7:34:b5:7b:30:4b:17:c3:2e:2b:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:62:57:A0:D5:3D:8D:F0:3F:C5:1D:E0:8D:AC:D7:A1:99:94:08:58
X509v3 Authority Key Identifier:
keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:67:28:14:4d:a2:be:47:4d:f7:31:33:28:cc:c8:6c:52:bb:
79:3d:bb:ec:90:24:28:d7:58:9a:57:13:93:cf:83:f2:2f:75:
4c:ed:23:b6:f9:0f:64:40:ae:99:ab:76:74:0b:de:e4:6d:08:
4c:a1:03:d8:e3:a8:4a:9b:5a:60:10:a7:41:c6:9a:1e:09:fa:
7a:a5:c7:dd:f9:81:24:dd:54:e1:68:92:52:93:be:75:85:7b:
45:90:69:30:1b:88:3b:2a:dd:fd:9f:7c:ca:1f:04:f2:dd:8a:
11:ce:15:36:19:f8:10:ff:f9:15:ca:75:21:63:e4:3e:13:6f:
6b:65:cf:bb:c3:54:66:be:dd:8d:2d:32:9e:f6:0e:0e:20:8e:
53:b6:28:71:d3:5a:8d:1e:e3:c2:f9:69:50:40:78:96:ec:cd:
01:5e:ca:0e:6b:82:62:17:9a:ab:ca:53:1c:98:c5:bc:ad:80:
0b:00:4c:f0:da:3f:49:19:da:d3:33:aa:e9:16:0e:6c:3c:d3:
3b:5f:74:93:e8:32:75:19:58:1b:db:b7:4e:29:da:7c:38:bb:
43:54:46:88:14:3c:9f:d5:f5:6b:7d:85:c4:9b:7a:52:cc:1e:
77:aa:38:a8:4e:c0:57:27:13:f8:5d:e5:9c:0d:6d:fa:31:85:
94:3c:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:08:36 2026 by rpki-client