This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json)
Hash identifier: 3nA9fOZw8S0U/+C4VJ/PpkIdA09yxJWX/OyBu6pNjl4=
Subject key identifier: C1:A0:2A:05:7E:E5:99:01:6C:EE:61:E7:86:72:68:41:AF:4B:10:65
Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
Manifest number: 0215
Signing time: Sun 25 Jan 2026 01:31:28 +0000
Manifest this update: Sun 25 Jan 2026 01:31:28 +0000
Manifest next update: Sun 01 Feb 2026 01:31:28 +0000
Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: Z5LlyQNadH+tYqnEst+wmpArnkFXY2C4F/KX+DZv214=)
2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: hqEhlFzljzL9QNC3npjH/PXhuwMeiWo8+fxKQZav0bo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl
rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409
Validity
Not Before: Jan 25 01:31:28 2026 GMT
Not After : Feb 1 01:31:28 2026 GMT
Subject: CN=69757270-97cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:ef:98:da:c7:3a:4a:b7:d5:9b:7b:65:ae:
f6:17:0d:ac:51:04:32:36:d0:ad:41:a3:1f:be:0d:
5d:89:a0:cc:40:f8:40:b7:1b:54:61:c8:70:a5:08:
bf:f8:35:6a:55:2b:1d:e4:56:4d:07:bd:20:f2:41:
dc:ac:1d:f1:41:2b:13:9b:96:cd:12:79:a8:e9:9f:
5e:f9:39:b0:82:f9:4a:84:ba:43:07:a4:6c:8f:ca:
d6:70:96:13:bf:01:d9:3a:24:f1:21:1f:7b:22:60:
b2:06:65:28:a2:86:65:7f:e8:16:52:df:5f:fe:f1:
0f:15:f6:73:c9:5b:96:82:00:66:28:7d:f2:c8:b2:
18:07:bd:1c:55:c1:d0:f6:1f:60:6c:33:65:e7:0c:
ba:03:ad:c4:95:6e:49:83:80:d6:c4:a2:40:80:81:
22:dc:08:87:50:a7:58:d8:60:87:a5:fc:20:8a:67:
10:22:53:da:46:fb:91:44:25:32:1b:fd:8f:12:c6:
a8:db:ab:61:10:14:44:6c:61:79:9e:97:45:17:5a:
42:fa:dd:d1:b5:a5:ca:90:43:fe:99:16:02:57:92:
96:ce:2c:6d:1f:b7:60:19:96:22:b7:b2:10:a2:88:
f4:68:e9:5b:2c:32:fe:11:64:22:cb:ff:f1:72:b8:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A0:2A:05:7E:E5:99:01:6C:EE:61:E7:86:72:68:41:AF:4B:10:65
X509v3 Authority Key Identifier:
keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:5a:ad:0d:aa:e3:fd:67:f1:0b:c8:15:f5:c8:83:f4:73:36:
81:0f:aa:44:1c:b6:ad:8b:0d:b5:d1:fe:bb:20:25:5f:47:15:
5d:36:36:de:33:47:2f:4f:7d:f8:b1:d0:8e:06:33:0b:f2:7a:
18:44:7d:f2:1d:74:92:38:bb:80:c8:b4:cc:f9:cd:32:e4:16:
55:3b:5f:53:0b:e0:77:45:90:cc:0e:a3:54:36:73:ce:38:c7:
39:c6:7e:96:1a:ed:e9:35:fc:b1:54:53:1e:9e:0a:e9:27:54:
aa:72:28:c2:fd:d6:6f:91:6e:06:fd:86:42:49:54:a6:83:cf:
a4:98:b2:0a:57:e0:41:1c:16:b1:72:6f:76:0c:e8:66:5d:e1:
8d:b8:af:1d:be:e4:56:6c:be:97:7d:9e:03:4f:26:37:60:91:
37:23:d7:4f:10:c6:c7:eb:62:85:77:06:de:8a:b1:ce:ee:8c:
8e:bb:c0:68:f8:54:90:09:38:48:c6:6c:ef:cb:1e:4d:9d:b7:
b1:4c:50:b5:57:14:df:5e:1c:65:d7:b8:aa:aa:a4:c2:31:4e:
33:76:e2:5f:f6:1f:fb:2b:d7:33:2d:69:4c:d3:ec:06:ae:87:
9b:5d:6d:a6:a1:91:f6:f3:c0:c7:f9:9a:5d:87:b7:8e:5f:0d:
9b:70:32:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:20:57 2026 by rpki-client