This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json)
Hash identifier: UyzyrbbxeKEO7WsTvajVxT0autNcdfBfX/gR+F+kxw0=
Subject key identifier: EC:36:4B:5C:3B:3A:40:06:76:0C:E0:62:A8:76:3D:8E:49:62:4F:70
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial: 025D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
Manifest number: 0257
Signing time: Sun 25 Jan 2026 00:56:27 +0000
Manifest this update: Sun 25 Jan 2026 00:56:26 +0000
Manifest next update: Sun 01 Feb 2026 00:56:26 +0000
Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: KToiIKile4HFTCjiBFTC3g9/Q08yyi81WS7VpgZQP3s=)
2: 642AEE6EB3FF11F0A569692DC4F9AE02.roa (hash: 06OWDIqMBpACeuE4oEOzcbVBDwiweM8yZ9MBzLlKdEk=)
3: 38C8C2E6B3FF11F0B056312DC4F9AE02.roa (hash: eGvi9ehXeYJN73mQ/IC0/2k5dRBhN6mtIFIP3LLFsyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Validity
Not Before: Jan 25 00:56:26 2026 GMT
Not After : Feb 1 00:56:26 2026 GMT
Subject: CN=69756a3b-2774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:ce:f2:f7:70:59:eb:6a:11:e8:8f:c4:51:
b1:12:20:7d:44:85:4b:70:4b:aa:8a:ef:97:3d:bf:
61:24:a8:f0:2a:38:84:8b:2e:05:a3:66:28:91:75:
b7:4f:be:73:bd:97:42:5a:56:34:5b:e0:1f:1a:bc:
40:39:c6:ad:f1:b9:96:4a:33:62:f3:b9:ad:ce:91:
bd:e3:bd:f0:2c:ee:d9:10:f4:e6:19:da:a5:a7:70:
a1:e5:3e:dc:a0:41:5d:ae:d7:9c:63:d6:d8:a3:69:
44:ac:ed:a9:40:35:3b:9e:ae:f0:1a:0b:8d:b2:fb:
4c:f6:9d:5e:7b:d0:b9:c0:1b:b8:a5:32:c9:9b:46:
a3:9f:ab:e5:7e:f1:04:fd:9c:05:29:b2:43:b5:6f:
a2:94:4d:bb:51:2c:1e:0f:68:ad:aa:5f:67:44:d7:
90:73:fa:ad:bc:f6:3f:54:9f:06:e2:a7:7c:00:75:
53:e7:e5:51:39:9f:13:3a:ca:42:21:d6:82:ff:76:
96:f5:aa:85:62:ab:38:0e:db:81:80:44:df:ed:bd:
5f:47:3f:8a:b9:b1:b1:67:58:dd:15:bb:ed:63:25:
40:be:43:7d:16:9f:06:c2:85:d2:04:7e:d7:38:60:
d4:47:09:f8:25:2b:c4:5f:4c:89:06:25:89:47:2f:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:4B:5C:3B:3A:40:06:76:0C:E0:62:A8:76:3D:8E:49:62:4F:70
X509v3 Authority Key Identifier:
keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ec:0f:67:0c:2c:de:e3:db:7b:d1:69:15:5e:25:cf:e6:c1:
29:31:93:bf:6c:c4:a1:41:df:7f:d2:c3:da:26:a7:07:43:43:
b1:c6:8b:59:7e:05:c9:57:62:96:27:da:b4:0b:77:0f:63:ef:
90:6e:3f:c5:07:a4:cb:59:9d:cd:c1:5d:12:fb:ed:c2:57:2f:
e8:8a:ba:0d:86:c1:d5:83:fc:40:d5:0c:ad:a9:6e:e6:3e:01:
be:33:50:26:e9:e1:0d:e2:76:44:9d:b2:0d:cd:24:6f:e2:15:
91:b9:dd:fc:32:19:01:4f:b5:92:ca:4b:46:33:e2:0b:b6:47:
3d:bf:35:60:f0:ce:d5:4e:52:0b:18:1e:93:7e:d8:84:54:27:
c4:23:5c:5d:ea:10:b8:64:29:98:7b:df:04:dc:b4:7c:61:d5:
4e:1c:c6:57:a4:ac:2d:42:d2:49:6f:2b:49:88:da:11:97:a5:
32:58:17:b0:3e:13:d4:82:b9:1d:29:9e:f1:96:be:a0:74:21:
ba:16:79:e7:df:c3:40:d9:81:d9:33:23:b2:70:c2:8b:ab:38:
22:d7:ac:52:85:c7:97:13:fe:70:52:92:62:71:d9:e9:18:80:
da:a7:79:b0:9a:a6:b4:60:5f:51:dc:4f:10:cd:f4:99:7f:08:
11:a2:33:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF
RDEyQzFDMzEwHhcNMjYwMTI1MDA1NjI2WhcNMjYwMjAxMDA1NjI2WjAYMRYwFAYD
VQQDDA02OTc1NmEzYi0yNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsc/O8vdwWetqEeiPxFGxEiB9RIVLcEuqiu+XPb9hJKjwKjiEiy4Fo2YokXW3
T75zvZdCWlY0W+AfGrxAOcat8bmWSjNi87mtzpG9473wLO7ZEPTmGdqlp3Ch5T7c
oEFdrtecY9bYo2lErO2pQDU7nq7wGguNsvtM9p1ee9C5wBu4pTLJm0ajn6vlfvEE
/ZwFKbJDtW+ilE27USweD2itql9nRNeQc/qtvPY/VJ8G4qd8AHVT5+VROZ8TOspC
IdaC/3aW9aqFYqs4DtuBgETf7b1fRz+KubGxZ1jdFbvtYyVAvkN9Fp8GwoXSBH7X
OGDURwn4JSvEX0yJBiWJRy9MpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOw2S1w7
OkAGdgzgYqh2PY5JYk9wMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz
OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI
REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTc0Ri8xRTE1NzAzODYzOEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpK
SUhmbnROWUJZd2Z0RXNIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBt7A9nDCze49t70WkVXiXP5sEpMZO/bMShQd9/0sPaJqcHQ0OxxotZ
fgXJV2KWJ9q0C3cPY++Qbj/FB6TLWZ3NwV0S++3CVy/oiroNhsHVg/xA1QytqW7m
PgG+M1Am6eEN4nZEnbINzSRv4hWRud38MhkBT7WSyktGM+ILtkc9vzVg8M7VTlIL
GB6TftiEVCfEI1xd6hC4ZCmYe98E3LR8YdVOHMZXpKwtQtJJbytJiNoRl6UyWBew
PhPUgrkdKZ7xlr6gdCG6Fnnn38NA2YHZMyOycMKLqzgi16xShceXE/5wUpJicdnp
GIDap3mwmqa0YF9R3E8QzfSZfwgRojOv
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:26 2026 by rpki-client