This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
File: PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json)
Hash identifier: Nl/yVdDXnkwh2T7GhZ6kYFC8BI2J1WWX4rOgweIZ93I=
Subject key identifier: F5:B8:99:05:7C:23:81:F3:D7:78:19:D7:DA:FD:86:AA:F8:72:3F:97
Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Certificate serial: 081A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
Manifest number: 0813
Signing time: Sat 24 Jan 2026 20:22:08 +0000
Manifest this update: Sat 24 Jan 2026 20:22:08 +0000
Manifest next update: Sat 31 Jan 2026 20:22:08 +0000
Files and hashes: 1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: AKhqoqFw/ibFmxnIrmvIFYeFFZAhXTTLdjr6XfTtOLE=)
2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: 5irZrEFk8FHbNW4pjJl+pAv8i1MZscE1joryry7BH0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl
rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074 (0x81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Validity
Not Before: Jan 24 20:22:08 2026 GMT
Not After : Jan 31 20:22:08 2026 GMT
Subject: CN=697529f0-303b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:3f:31:03:61:1d:7d:97:f6:84:ca:51:d8:
49:35:6b:1a:cd:0a:98:b7:ae:e2:45:93:6f:5e:09:
12:0e:a8:0d:49:78:01:31:61:2e:0a:57:2b:d7:fb:
58:15:f6:62:4b:e0:9c:cd:58:52:a5:95:ca:44:c4:
e3:4a:30:32:37:a1:d3:3c:b8:fe:2f:82:d3:22:0e:
0f:64:8e:2b:9d:f5:2a:59:f6:a0:d8:07:20:49:c9:
2a:02:7f:0f:2e:d3:26:24:af:0a:46:c0:4d:fb:27:
45:29:06:54:0d:3a:ef:01:ec:51:36:57:5c:5d:8c:
a0:6d:f4:8f:5f:1c:fb:5b:2e:6a:fe:11:59:df:79:
70:d8:35:77:eb:e6:52:9a:81:fb:a3:51:b9:e7:bb:
83:d5:84:af:3c:13:bb:d4:88:08:68:c3:2e:37:93:
21:68:80:6b:4b:a0:1f:9b:d6:1e:a3:2b:f3:5b:8b:
2c:74:e1:60:b6:c3:a5:70:48:8e:71:fa:b0:57:9d:
1b:82:05:53:fe:e8:be:f0:b5:d3:3b:42:02:db:79:
ba:13:a5:85:32:0a:6e:00:62:d5:3f:e5:e1:82:76:
76:59:38:e1:47:93:d8:69:0c:02:20:a1:07:38:97:
bb:4f:72:7b:da:f0:e2:a8:be:5d:98:fd:69:f2:de:
da:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B8:99:05:7C:23:81:F3:D7:78:19:D7:DA:FD:86:AA:F8:72:3F:97
X509v3 Authority Key Identifier:
keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:22:3d:69:2a:15:fb:4e:67:cd:ca:31:f0:a9:60:83:b1:a8:
a8:fb:63:73:a7:ac:63:3d:9c:6f:aa:db:de:d6:07:5d:1f:43:
61:a0:9f:3a:ab:79:b9:ae:6d:ce:31:63:e3:6c:4b:ff:e2:21:
49:f5:7e:7d:77:d4:06:e2:b3:c2:dc:af:54:36:e3:a6:08:78:
ff:16:1b:55:79:8b:7a:33:2e:c1:fd:1b:af:da:ea:fb:59:a6:
bd:c3:87:09:46:56:7f:5c:bb:bd:16:98:60:95:4f:b6:c6:eb:
15:08:fc:a5:68:9e:8c:99:7f:0b:85:4e:84:b0:1a:b0:12:2d:
03:46:a1:ac:e0:88:90:b5:01:8c:d7:f8:65:b9:49:7b:be:e2:
8d:92:5c:a6:eb:8f:8c:7b:fa:5c:92:5a:5a:4e:f0:0b:46:9a:
23:c7:99:dc:c7:9a:0d:75:d7:97:7b:47:91:db:26:d6:1d:7e:
33:51:f3:e2:bd:e3:c9:b0:73:98:00:5a:61:86:62:77:45:f6:
f9:1a:8b:2e:cb:51:1e:fd:15:ef:97:f0:74:28:e8:c4:43:7e:
f5:76:bd:15:02:07:c1:fe:d5:6d:f9:87:79:4f:60:2a:03:da:
80:45:b0:95:25:b9:8e:83:6f:e6:b5:07:8c:e8:1d:a4:c6:59:
65:2d:31:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:36 2026 by rpki-client