This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
File: jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json)
Hash identifier: X+qx/H92Cuviiyo4y7yELoLTsfxZ0niTjUZCC86QSes=
Subject key identifier: 79:96:63:06:8D:76:9A:1F:BF:FF:A9:75:B2:73:77:31:ED:4E:08:54
Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87
Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587
Certificate serial: 0AA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
Manifest number: 0A97
Signing time: Sat 24 Jan 2026 19:03:07 +0000
Manifest this update: Sat 24 Jan 2026 19:03:07 +0000
Manifest next update: Sat 31 Jan 2026 19:03:07 +0000
Files and hashes: 1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: 15dLm2n5kHk3vHZ/L+ruZAerN7ZRegHyzfsgPZu3QrY=)
2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: NYdc2f4yDizOBPmg8EBE/rQVPUKcax5Hh13GoWVtgRo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl
rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2725 (0xaa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B7EB, serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587
Validity
Not Before: Jan 24 19:03:07 2026 GMT
Not After : Jan 31 19:03:07 2026 GMT
Subject: CN=6975176b-1677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:3f:5e:52:4e:22:0f:42:ac:8a:e4:4f:aa:
3e:96:53:55:0d:48:7a:c2:aa:9e:96:42:66:75:6d:
6e:ae:78:d3:4b:5b:72:03:a3:63:f3:dc:c1:73:de:
80:d6:1e:2b:7f:1e:f8:ae:2b:d0:50:f2:ad:0e:1a:
4c:35:74:25:35:39:94:af:aa:a7:be:04:db:32:ab:
da:f6:a2:88:4b:56:06:81:61:3e:08:21:46:c5:26:
54:ca:36:23:f4:a0:67:0f:8c:7a:fa:00:a6:b0:de:
72:bb:26:3e:be:3e:4c:b9:a4:42:a8:51:36:5e:a7:
15:76:3c:21:03:c6:0f:d5:fb:cd:df:7d:1c:36:20:
0e:26:05:ee:f1:e2:a7:3b:2b:d9:2c:85:e5:36:a8:
2e:e2:7c:de:57:70:28:0c:83:9b:52:d9:ca:a7:cc:
7e:cc:de:3d:d2:11:e6:ef:76:f1:92:d3:0d:10:f1:
35:6e:10:c1:34:87:49:14:37:be:b0:47:f6:f7:65:
a8:7f:b7:92:d8:0d:36:95:18:78:a6:3e:c0:fe:03:
4c:35:f1:6e:f9:da:b4:cb:13:66:ab:bc:d3:3c:ad:
79:d2:ed:63:6f:bb:f0:85:1d:3b:74:93:c3:70:24:
f0:8d:0e:b6:4a:1e:f6:d2:6f:e8:c4:a8:3c:3b:25:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:96:63:06:8D:76:9A:1F:BF:FF:A9:75:B2:73:77:31:ED:4E:08:54
X509v3 Authority Key Identifier:
keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a2:ab:d7:0f:16:6b:9c:1d:14:d5:58:cd:ba:c3:6c:4a:12:
da:47:e8:65:ad:f2:ac:3f:fc:72:3f:32:86:dc:0e:6c:af:15:
51:b5:31:87:5d:8a:d0:85:bc:50:f2:2f:2d:b5:31:35:51:d1:
47:91:cf:8f:98:9d:49:83:2d:94:58:f6:76:94:4f:7f:86:db:
fb:3d:24:51:8b:2a:c8:76:ed:2a:aa:fe:2b:57:70:6c:18:f3:
b8:e0:fc:ef:75:e5:4d:d8:3e:a3:0f:86:70:6a:fd:2b:45:16:
e3:d4:0b:c6:48:0d:ca:23:f5:1e:aa:ff:88:ff:c1:46:64:2e:
ea:88:bc:12:92:9f:19:a8:aa:a3:25:fb:a4:47:4b:95:bf:fd:
0b:6b:ec:a9:89:be:9a:d7:ce:27:4c:98:19:6d:ae:20:5e:28:
9a:4f:48:05:bb:ce:f8:82:8f:7a:8f:b7:9a:50:06:60:ac:83:
e1:7e:66:9b:fd:a3:4b:ca:7c:f5:41:5e:24:27:50:e3:d6:c9:
73:71:3e:51:17:a2:3d:dd:cb:79:45:42:3a:e1:d7:92:0b:21:
22:de:64:4d:4f:43:94:a9:99:fc:f2:f7:0a:b0:3d:8b:94:a5:
b2:5b:3a:6e:c2:63:88:4d:b6:6f:b3:35:4d:49:a8:f0:6f:d6:
a0:0a:40:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:58:11 2026 by rpki-client