This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
File: 59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft (raw, json)
Hash identifier: vvZmnZQ4siYJY+1FoTxJ3s7OaOZp6xhWR4rEce+T23k=
Subject key identifier: A2:78:AA:EB:25:0F:97:78:12:74:FF:F7:13:62:DE:9E:90:7E:92:A6
Authority key identifier: E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC
Certificate issuer: /CN=A911D951/serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 07:08:08 +0000
Manifest this update: Sun 25 Jan 2026 07:08:08 +0000
Manifest next update: Sun 01 Feb 2026 07:08:08 +0000
Files and hashes: 1: 59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl (hash: Hpw04dOWsWTx/OmHvnhQ3/ATNrMBWAR73Lj7ssGUQUM=)
2: 8FFC4170EF6C11F0B51A35C1596F56BC.roa (hash: j35Jk6eiuaxCtJEwH3XZ/qNGSmb+7M6pv4kaHYFmiCA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl
rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 07:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D951, serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
Validity
Not Before: Jan 25 07:08:08 2026 GMT
Not After : Feb 1 07:08:08 2026 GMT
Subject: CN=6975c158-8c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:89:ab:68:70:ca:6a:04:73:44:fd:fc:d5:
50:10:9b:7a:c2:8c:ff:7c:3f:6d:d2:3d:4f:ff:44:
4b:61:de:01:17:3c:5b:dd:d9:89:f8:69:c1:15:8e:
ea:68:59:f6:14:07:c9:05:01:72:ec:f9:b2:e6:39:
60:0d:a8:8b:c1:f1:e0:24:dd:0c:f3:fd:b9:73:d2:
a6:9a:f6:9e:55:51:18:2a:ff:9f:34:3d:64:8b:47:
b7:db:6d:4b:5e:5a:a6:50:97:9b:65:5d:af:c1:b4:
76:52:8d:2e:19:af:51:40:54:8f:22:5d:3b:e6:31:
b9:81:12:f6:76:da:94:42:91:26:b3:0b:34:f2:95:
cd:f5:a7:ea:6e:67:fd:e6:12:da:e3:1a:a6:f5:e8:
f3:e7:ee:e6:9f:fc:3c:19:53:df:ff:02:59:64:bc:
12:06:3a:a5:42:90:ae:9d:8f:3a:ec:46:a8:31:18:
6c:dd:96:3d:b8:1b:76:92:3b:71:de:60:c7:ef:c7:
29:0d:65:7a:fb:f9:b2:3b:e2:e9:e6:cb:da:33:17:
13:9f:bd:b7:51:c9:a2:7f:da:82:7c:b9:1b:6e:68:
4a:63:46:d1:4e:63:49:2c:08:7c:a0:27:99:88:8b:
10:38:cf:0b:88:30:43:ab:1b:47:7f:39:7c:9e:78:
34:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:78:AA:EB:25:0F:97:78:12:74:FF:F7:13:62:DE:9E:90:7E:92:A6
X509v3 Authority Key Identifier:
keyid:E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8a:5a:fb:ec:ff:4a:00:5f:4a:a4:41:83:11:26:92:5f:a8:
09:1e:17:67:e1:ee:b4:8f:71:d7:b9:89:0a:8f:24:5f:38:de:
d0:26:70:59:35:a4:bb:31:9a:dc:17:41:cc:96:c5:47:21:74:
08:34:c0:b7:2e:39:d9:53:b8:e1:86:65:55:4d:63:c7:4a:dd:
24:40:47:fa:2c:61:c5:d9:b9:8b:51:56:37:bb:d6:fd:fb:a3:
00:7d:e4:2a:fb:5f:2c:8c:ad:10:4e:45:5e:e1:9b:92:46:9a:
b9:76:30:89:e5:a7:94:b9:da:64:19:bb:6d:0f:c2:32:2d:7c:
29:2a:62:49:37:32:f7:2e:45:13:a6:34:98:70:cf:e1:d4:ac:
8e:00:d6:c0:2f:2a:61:6c:72:93:7d:60:b5:f7:af:05:8f:6c:
ce:36:03:dc:65:73:40:d7:b8:34:ab:cf:f9:ea:f8:f6:38:e7:
96:16:2c:67:3d:df:ab:d2:43:89:d3:04:94:36:ab:c6:c7:e7:
0f:0f:81:a9:1a:b6:3d:82:6b:3c:93:79:19:4a:8f:3f:c0:a7:
ac:4b:ad:c8:c2:43:68:82:cf:71:b4:30:4d:30:7c:e5:1a:3e:
52:1b:14:34:26:93:46:04:81:61:42:dc:1e:20:5d:1e:d9:c5:
f2:ab:65:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:12:27 2026 by rpki-client