This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
File: EpTEi8aWr-ggvRWC80NnutqwJDI.mft (raw, json)
Hash identifier: zbf2D+HegMrnBdEItzzuoXsotUhNgTv7iRXA9lqx/zY=
Subject key identifier: E9:68:07:71:1D:3B:6D:F4:8C:06:9C:8D:7D:BB:DB:FB:CA:87:CF:8A
Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
Certificate issuer: /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Certificate serial: 04EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
Manifest number: 04E1
Signing time: Sat 24 Jan 2026 23:00:20 +0000
Manifest this update: Sat 24 Jan 2026 23:00:20 +0000
Manifest next update: Sat 31 Jan 2026 23:00:20 +0000
Files and hashes: 1: EpTEi8aWr-ggvRWC80NnutqwJDI.crl (hash: UZeSLu/Ni6spwlPCZ2vpBxApbrCAEPH8gGAxgK630tg=)
2: 2A84118CE0A311EC9CF2B738C4F9AE02.roa (hash: m8kc5pmxyNUtzE4T6XJqZukX44I+76FHWWNgV7rp9ww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1258 (0x4ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117817, serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Validity
Not Before: Jan 24 23:00:20 2026 GMT
Not After : Jan 31 23:00:20 2026 GMT
Subject: CN=69754f04-e1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:bc:83:78:b8:e6:ff:04:d7:8e:a0:8c:f2:
6b:3c:9d:fc:78:61:66:8c:ef:36:c9:4d:99:cf:1c:
8c:9f:49:b4:89:4e:f2:13:44:f1:78:5e:a4:82:bb:
4f:d4:dd:76:02:19:fb:9c:a2:76:74:d1:f2:50:75:
ce:f6:c9:58:d2:91:5d:9d:c6:a9:2a:9c:f3:9f:ae:
03:82:d5:7a:6b:a7:58:e4:c6:4c:a8:7a:3c:c3:0e:
54:a2:62:0d:0d:11:6a:f5:8f:09:41:3a:3b:3d:60:
e2:28:0c:65:eb:c4:b9:68:b5:fb:75:6b:46:c3:d1:
47:a4:e8:2f:f8:dd:38:74:79:31:8c:83:4f:f0:02:
73:69:37:04:ec:40:99:38:fe:5c:43:bc:58:63:3e:
bd:88:91:60:c4:bd:3e:ce:d5:ce:11:14:f3:78:9b:
5e:31:57:e4:91:d7:ff:f8:4a:1a:df:01:d4:ed:d1:
bc:d3:15:11:69:01:5e:8b:7f:47:43:b6:e7:7c:aa:
f3:f9:c6:c9:f6:80:ca:15:74:65:77:18:77:c4:53:
ca:e4:be:a7:0a:4c:4b:cf:de:05:ff:36:66:0f:c0:
96:ea:a0:6b:1b:b9:c9:dd:2e:b9:f3:21:7e:e5:f4:
79:3f:75:85:31:36:97:58:e7:0d:ae:24:a2:ab:7b:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:68:07:71:1D:3B:6D:F4:8C:06:9C:8D:7D:BB:DB:FB:CA:87:CF:8A
X509v3 Authority Key Identifier:
keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:9f:99:60:38:dd:a9:0b:cb:83:0a:75:a0:79:2f:bf:86:79:
82:af:c6:6d:ac:39:c7:13:af:14:45:7b:74:00:a0:ad:e1:79:
95:cd:5d:2a:8a:8b:71:d7:76:90:6a:3e:12:f0:80:a5:96:00:
a1:d6:7b:28:31:3e:90:29:1b:4f:a6:05:b5:89:d3:c1:d0:d5:
cc:95:72:b2:40:52:c6:03:79:87:98:95:74:12:f1:38:99:1a:
1c:1e:64:1c:a4:ed:eb:68:d9:a1:0e:67:64:4d:6d:20:c2:a6:
2f:8b:f9:bb:b5:8c:4d:4f:04:86:73:69:a3:bc:b2:46:6c:b3:
87:2a:02:4b:a3:c9:e5:83:a0:11:77:40:d3:7f:b1:59:40:33:
99:44:78:37:fa:30:6d:ba:99:55:ae:48:b1:c0:01:1c:30:f0:
90:69:a1:1f:89:3e:03:cb:ba:12:61:3d:42:aa:82:eb:cc:00:
65:0e:35:a2:4c:65:7f:7b:4f:8d:6a:77:7c:45:77:21:c4:56:
29:7a:bd:da:7e:ea:7f:32:1d:f0:cc:11:f7:1d:84:e9:94:7d:
db:89:52:42:6b:f9:c5:9a:0f:e1:96:44:52:80:91:e1:c4:63:
0c:70:b7:83:fc:a6:a5:cb:71:bc:dd:ca:5b:ca:40:a8:06:16:
84:10:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:16 2026 by rpki-client