This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
File: s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json)
Hash identifier: FTHPCHP7iZT+wwvEnEPmTXZgU9uQs/IoeAXDbHjUwn4=
Subject key identifier: 5B:D2:26:3A:B8:30:08:15:C5:BC:B8:AA:E4:5F:05:D0:01:CC:22:3F
Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1
Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
Manifest number: 014C
Signing time: Sun 25 Jan 2026 03:33:29 +0000
Manifest this update: Sun 25 Jan 2026 03:33:29 +0000
Manifest next update: Sun 01 Feb 2026 03:33:29 +0000
Files and hashes: 1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: 9I6XoTIatpVHonAmwgPO/i5Cuh7T+ECm+rn0ubWWuiU=)
2: C591C650781311F080669C0EC4F9AE02.roa (hash: WdqV1sxOirOUn9ZhlZhPe2M8qixZkx77pHk6AUB3MBw=)
3: 9D44176C781211F09ADE4979C4F9AE02.roa (hash: jXqxc10SyUCzWVj9PPPMNw2b7v248uGR+j4feRoYBdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl
rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
Validity
Not Before: Jan 25 03:33:29 2026 GMT
Not After : Feb 1 03:33:29 2026 GMT
Subject: CN=69758f09-a86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:6d:b7:fb:ff:85:80:44:b4:7a:49:1f:5c:
6a:a2:47:17:74:c1:56:bd:8a:07:71:1b:86:25:de:
8d:82:a7:b5:09:a7:dd:db:43:34:80:d1:25:ab:b2:
91:04:3d:98:a3:3a:c8:18:44:39:5e:f2:7b:c6:8c:
81:ee:7c:1b:57:c3:49:52:8d:9b:d5:33:4f:ba:4d:
16:e6:67:73:a9:53:cc:7a:f5:5e:c5:35:08:c0:71:
8a:aa:6e:03:c8:99:75:cf:36:7d:3f:e6:c9:05:67:
58:3e:f1:4c:bf:ee:98:f3:04:09:ab:7a:cb:86:1a:
46:52:da:92:7e:f7:c8:82:4b:bf:0b:23:b4:61:5e:
b1:30:a0:be:24:ac:91:1c:da:1c:41:93:bc:e3:2b:
70:7d:ac:a1:2a:86:99:29:0f:e6:14:87:a6:89:bb:
03:ac:ec:53:25:5d:b4:21:b3:7d:ef:96:e8:b3:e7:
13:73:70:67:9e:5e:b7:e5:08:d2:94:5a:02:e2:c6:
f9:15:7c:9c:66:3b:54:ef:31:29:af:75:d6:9d:e7:
4f:37:19:fa:65:46:fd:c6:a9:99:d5:93:95:d2:29:
8d:d3:d6:95:94:10:7d:5e:22:f2:4b:fb:e1:5a:12:
28:56:43:60:e8:57:62:b1:74:54:df:c7:5e:26:96:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D2:26:3A:B8:30:08:15:C5:BC:B8:AA:E4:5F:05:D0:01:CC:22:3F
X509v3 Authority Key Identifier:
keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:25:53:2b:05:c5:bc:b6:1d:34:34:9a:11:88:8e:a6:3a:19:
9d:9b:89:0e:38:26:17:02:34:d2:18:01:9f:bd:bf:66:9c:48:
69:50:81:df:3a:f1:4a:c7:b4:fb:f8:d8:51:0d:7b:6d:e6:69:
ae:e4:1b:7a:4d:90:7c:51:13:fd:bc:1c:08:16:1c:e9:5c:24:
d6:02:e5:41:8d:54:b0:8c:5b:27:d5:71:4f:1a:b9:81:7f:90:
bf:81:30:a7:c7:ff:a9:46:c4:e0:06:15:c9:42:89:1c:c7:32:
08:fd:06:b4:09:49:60:bf:5a:95:56:79:d8:b1:99:74:16:8c:
6e:66:79:db:a2:0e:ce:b3:36:88:d9:19:68:cb:73:b1:c6:f7:
c7:aa:dc:3c:ac:06:db:fc:86:59:67:03:16:ec:55:ad:72:b8:
c9:97:4a:6b:ff:85:04:13:64:b9:8a:2e:38:46:88:8f:14:a7:
85:ba:f7:b3:66:c0:4a:e4:bd:9a:7c:e1:79:a7:12:72:b2:e4:
75:fd:8d:84:af:ac:32:23:b0:76:ac:ef:ec:58:b3:f9:ae:68:
7e:0d:c1:3d:dd:27:24:9f:39:97:62:47:87:b9:33:e0:94:5e:
84:91:5a:56:ab:bf:c1:42:aa:7d:4b:10:22:cf:4a:5f:39:e4:
45:a6:82:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE
NUJFNzc2RjEwHhcNMjYwMTI1MDMzMzI5WhcNMjYwMjAxMDMzMzI5WjAYMRYwFAYD
VQQDDA02OTc1OGYwOS1hODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApzttt/v/hYBEtHpJH1xqokcXdMFWvYoHcRuGJd6Ngqe1Cafd20M0gNElq7KR
BD2YozrIGEQ5XvJ7xoyB7nwbV8NJUo2b1TNPuk0W5mdzqVPMevVexTUIwHGKqm4D
yJl1zzZ9P+bJBWdYPvFMv+6Y8wQJq3rLhhpGUtqSfvfIgku/CyO0YV6xMKC+JKyR
HNocQZO84ytwfayhKoaZKQ/mFIemibsDrOxTJV20IbN975bos+cTc3Bnnl635QjS
lFoC4sb5FXycZjtU7zEpr3XWnedPNxn6ZUb9xqmZ1ZOV0imN09aVlBB9XiLyS/vh
WhIoVkNg6FdisXRU38deJpba7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvSJjq4
MAgVxby4quRfBdABzCI/MB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy
NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjVDQS85RTdDMkNFRTAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2
a3IwWDBNU3paUmpWdm5kdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQJVMrBcW8th00NJoRiI6mOhmdm4kOOCYXAjTSGAGfvb9mnEhpUIHf
OvFKx7T7+NhRDXtt5mmu5Bt6TZB8URP9vBwIFhzpXCTWAuVBjVSwjFsn1XFPGrmB
f5C/gTCnx/+pRsTgBhXJQokcxzII/Qa0CUlgv1qVVnnYsZl0FoxuZnnbog7OszaI
2Rloy3OxxvfHqtw8rAbb/IZZZwMW7FWtcrjJl0pr/4UEE2S5ii44RoiPFKeFuvez
ZsBK5L2afOF5pxJysuR1/Y2Er6wyI7B2rO/sWLP5rmh+DcE93ScknzmXYkeHuTPg
lF6EkVpWq7/BQqp9SxAiz0pfOeRFpoKh
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:06:27 2026 by rpki-client