This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
File: s-7PFnJWFEpGodq0i4CA15DSBDw.mft (raw, json)
Hash identifier: T0GpYOUUHWN3BJ+kHR+JjWKxs8/Uc6lh66Uc455/V74=
Subject key identifier: 2D:4B:47:5B:9B:A0:00:37:F4:44:A4:5F:B4:70:D0:A5:06:DE:7F:79
Authority key identifier: B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C
Certificate issuer: /CN=A9125F64/serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
Manifest number: 7F
Signing time: Fri 23 Jan 2026 05:46:31 +0000
Manifest this update: Fri 23 Jan 2026 05:46:31 +0000
Manifest next update: Fri 30 Jan 2026 05:46:31 +0000
Files and hashes: 1: s-7PFnJWFEpGodq0i4CA15DSBDw.crl (hash: n5OOOY6smHbuxwWkLxa815JObjmXV1sbHe0+jjM/hC0=)
2: E32B7E6E348811F0ABE70D36C4F9AE02.roa (hash: 7I16PahKXROEbW1mEKLvSzyE22KDspebhWlSBSWo4cY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl
rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 05:46:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125F64, serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C
Validity
Not Before: Jan 23 05:46:31 2026 GMT
Not After : Jan 30 05:46:31 2026 GMT
Subject: CN=69730b37-c4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:93:a4:fe:62:8b:73:05:7e:16:a7:20:59:67:
91:e4:97:a0:8e:d1:e5:e3:86:6f:8c:fe:a1:cc:f6:
cd:37:7b:66:a3:83:d0:b5:76:76:5d:4d:3f:81:9e:
17:1e:75:31:2c:3e:e4:47:db:eb:ff:b2:76:d1:91:
b9:03:e1:e8:43:b9:bc:19:27:9d:5e:c9:25:8c:af:
05:5a:ad:aa:03:03:61:38:6c:30:51:04:b1:1e:14:
ff:ee:38:e2:3e:6c:a5:44:86:66:c4:24:cb:23:aa:
bb:16:e1:97:91:b5:c2:51:2c:ac:aa:06:42:ad:54:
eb:28:3f:15:fa:14:c2:27:24:80:bc:fe:d7:0d:a5:
11:61:b6:3b:32:f2:81:ff:7a:2e:80:67:37:00:ff:
17:2e:32:c3:36:fe:c7:db:61:05:72:08:97:5a:6c:
6e:70:fb:cb:b9:63:a3:a2:bb:27:a9:b2:d1:dc:78:
02:93:df:fe:9b:ba:6c:3d:75:76:d2:b8:f0:ff:eb:
f2:19:7f:08:ff:fb:7b:16:f3:cc:33:40:df:dd:a4:
ff:5d:10:fb:06:f1:44:6a:34:c3:1e:83:4b:e4:ab:
29:ad:c9:a9:65:f8:20:0b:4f:65:e9:2d:a1:5b:fb:
d4:26:16:40:30:0a:d1:17:44:7b:b9:a7:40:89:77:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4B:47:5B:9B:A0:00:37:F4:44:A4:5F:B4:70:D0:A5:06:DE:7F:79
X509v3 Authority Key Identifier:
keyid:B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:35:91:47:04:5b:b9:3d:99:d3:61:78:72:ff:ec:74:8d:0f:
81:0b:b7:92:c4:d0:55:00:6b:53:28:f3:04:43:b4:bc:38:c7:
4d:05:91:2e:ad:c5:32:b0:70:f0:fe:7e:4d:1c:76:7b:ab:b4:
84:48:ca:44:39:f3:ee:18:cb:9c:76:fe:53:b2:7c:ef:fb:ab:
c6:a8:a0:94:bb:10:f8:c9:38:4a:5d:17:cd:ad:3f:48:f7:22:
86:c9:54:d2:92:4c:5d:ef:00:5e:0b:9a:20:bb:88:52:db:63:
73:01:a6:cc:83:ea:fb:77:92:6a:b9:81:64:f2:ad:44:0a:9e:
20:7a:f6:1e:f0:b3:d9:4e:ad:41:25:ce:d0:99:c7:2e:dc:ba:
52:34:ae:fc:ae:d7:91:3e:b8:fd:ba:d8:38:45:08:87:a5:f7:
1f:9f:bb:57:3d:ad:68:b5:5f:1f:02:a1:52:c9:ee:40:17:92:
22:a3:92:95:e0:d8:33:20:fc:62:b2:be:4b:a1:d1:de:3f:db:
86:e7:2b:59:1b:fb:c2:ab:f0:71:ff:47:00:6d:e3:a0:ee:d0:
f3:83:10:f4:49:75:c6:6e:83:21:22:57:a0:3a:5c:48:38:9e:
3a:66:18:37:ee:22:b1:c1:4c:e5:0d:b8:ca:ec:20:25:59:26:
60:cd:d5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:12 2026 by rpki-client