This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json)
Hash identifier: BDlnBlhz2j5u86GGSWTbqmUvQkNXtCRgByHB1tGiCr0=
Subject key identifier: 7B:B0:B2:4C:49:F1:99:E0:AF:08:5D:F0:42:45:72:D7:78:1A:82:DC
Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44
Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44
Certificate serial: 06E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
Manifest number: 06DF
Signing time: Sat 24 Jan 2026 21:21:03 +0000
Manifest this update: Sat 24 Jan 2026 21:21:02 +0000
Manifest next update: Sat 31 Jan 2026 21:21:02 +0000
Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: zn2iOmFYgxBJV8M992MfTMBt0vjiuaWN101yQj6Fq2o=)
2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: 6Kv6ZSL3MazMHrERvQ2sPcXYF/GKUnOfly5I2XW62pA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl
rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44
Validity
Not Before: Jan 24 21:21:02 2026 GMT
Not After : Jan 31 21:21:02 2026 GMT
Subject: CN=697537bf-41d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:7e:7c:dc:33:8f:d6:0b:f6:c8:06:1a:75:
f9:82:56:35:28:00:41:11:ce:bc:58:38:2d:5e:77:
79:ad:d3:16:e9:24:b2:5d:aa:c9:2c:02:d5:df:bb:
8f:8d:ef:aa:b0:61:d2:15:7d:16:f2:67:f6:c8:1c:
7a:81:e2:05:5a:c3:3f:e8:f5:9f:e6:01:69:2d:e6:
05:9f:01:fb:a0:5b:5a:18:3d:0e:da:d8:bf:bd:42:
e8:ac:56:5c:4b:cd:b9:bc:9d:86:58:01:31:68:e2:
7c:bb:94:3a:e6:3f:f6:43:90:26:a3:47:57:cb:14:
49:85:ad:53:98:96:ef:9f:72:90:60:ae:69:5d:77:
9b:8e:25:d6:51:c2:4f:2f:69:07:36:e4:c7:0c:90:
10:ce:d8:41:9e:8f:e8:7c:47:b0:a5:30:99:4d:75:
41:79:7f:66:ca:2a:16:bc:46:b6:01:f4:2d:da:94:
89:35:ee:26:8c:0c:6c:22:24:6e:2c:d5:b3:ed:d8:
86:30:57:6a:3c:1f:fb:ed:5d:81:bd:e1:ff:5c:3c:
04:4d:40:33:74:4a:f2:92:02:6c:ed:f0:60:e1:a4:
dc:5c:2e:4a:df:45:12:29:c3:7b:3a:f9:07:60:eb:
dc:34:25:39:9c:21:ab:bc:60:2b:43:93:c6:23:c0:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B0:B2:4C:49:F1:99:E0:AF:08:5D:F0:42:45:72:D7:78:1A:82:DC
X509v3 Authority Key Identifier:
keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7c:d7:3e:ed:af:d8:b5:34:51:0d:ef:71:4d:b4:68:ac:f1:
fe:61:39:4f:ca:12:6f:1e:1a:7c:08:df:86:45:84:7e:36:8d:
0f:b0:45:a7:ee:1e:67:e2:a5:27:61:3f:d8:26:8b:d4:e4:3c:
0f:9d:00:da:26:14:16:6c:d6:46:10:75:00:85:45:5b:a7:39:
6c:a1:b7:e6:b5:05:ab:06:bf:07:ff:04:e4:c5:99:b7:c0:22:
e3:5c:78:fa:19:1d:4b:f3:5e:4c:f6:00:16:d0:cb:34:85:3c:
c7:81:ee:42:89:15:bb:9b:be:7b:f2:de:9a:03:70:22:2c:37:
50:e4:8d:37:23:44:2e:7e:c8:a7:3f:c0:d7:c7:5e:ed:c7:e5:
24:58:3f:00:73:e6:b4:cf:81:e7:75:48:38:f3:81:53:18:a7:
a5:5d:9f:eb:2d:8b:2a:08:ef:99:27:cf:e6:9f:1c:5b:1b:a8:
cb:2b:57:e4:a5:3c:bf:e5:5f:e5:f7:96:02:f4:85:e6:b5:ec:
39:fb:28:70:df:3d:29:6e:48:16:94:a1:ff:9c:12:84:8c:6e:
9b:e1:59:0e:2c:ab:21:1d:eb:6e:0b:38:31:88:ff:34:c0:78:
f0:dd:1f:56:b6:41:21:94:6c:bc:74:28:dc:2d:ea:3c:01:dc:
d9:1c:f9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:19 2026 by rpki-client