This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json)
Hash identifier: mF2xZc1fOiZ6gS/Bv7wk5KHlIbeSZCdTC3KCvLnwCtE=
Subject key identifier: 2B:4D:C2:2B:AD:C7:51:5A:06:82:3A:30:15:98:7C:55:23:8B:27:0E
Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Certificate serial: 0233
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
Manifest number: 022D
Signing time: Sun 25 Jan 2026 01:19:31 +0000
Manifest this update: Sun 25 Jan 2026 01:19:30 +0000
Manifest next update: Sun 01 Feb 2026 01:19:30 +0000
Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: GgvFiZUPiKgVHDpea5Z8dksKxb0lfStH76gw4h2ugP8=)
2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: 3fAULkE6ttb330SWu8NuIByl/YALdaeco2VwvKvVPGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl
rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:19:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Validity
Not Before: Jan 25 01:19:30 2026 GMT
Not After : Feb 1 01:19:30 2026 GMT
Subject: CN=69756fa3-95ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:35:6c:5a:90:22:49:6e:58:25:51:2c:af:fa:
ec:38:1e:54:61:f3:4b:63:02:79:4a:97:59:a8:e8:
3e:2c:16:7e:a7:cd:a7:cf:63:e9:d9:a7:13:44:7c:
a4:a1:c2:19:a8:12:6e:89:91:80:15:a4:4d:a5:30:
db:99:0d:67:00:b4:1e:ac:89:95:bd:0b:39:19:fe:
74:0e:11:6e:0c:53:b6:dc:a2:0f:c5:00:79:e8:fd:
a5:c0:22:f2:a4:9b:3c:25:2f:13:41:9b:ba:d4:fb:
eb:43:53:6c:0d:cc:ce:fd:3d:21:11:e1:7f:ae:b8:
56:50:98:39:5a:df:08:a2:db:bc:4e:3f:a2:44:ee:
5c:c1:2f:78:58:9a:75:ba:a8:3d:b4:af:51:d7:05:
b5:33:b6:85:77:32:7a:0c:0e:8b:83:fe:14:4f:d9:
f2:c1:ee:d1:23:2b:24:6e:54:3d:be:e7:9d:e2:00:
ae:e6:32:46:8c:75:a4:fe:1f:ef:b4:d3:3d:e0:02:
7f:dd:8d:e8:67:9b:1e:df:be:f6:b9:0a:bb:7d:69:
5d:0b:2b:2b:c1:36:0d:2e:30:65:c6:1a:d5:db:4d:
e4:02:be:54:15:e3:bb:69:4d:45:4b:5c:5d:94:37:
07:36:cc:19:11:2a:60:60:fa:51:18:fc:61:e0:44:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4D:C2:2B:AD:C7:51:5A:06:82:3A:30:15:98:7C:55:23:8B:27:0E
X509v3 Authority Key Identifier:
keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:44:4e:30:22:68:25:8e:95:b9:80:0b:2c:2b:78:bd:d2:1a:
a5:1e:e1:e2:93:06:42:62:ab:84:22:92:4b:62:71:af:7a:7c:
cd:fe:3b:cf:65:48:80:6a:39:25:15:13:85:f9:7d:f5:f2:09:
3d:25:16:ee:47:d5:37:d1:82:31:8b:9d:eb:41:4f:cf:1f:0e:
1d:f7:86:c2:59:86:a6:09:38:78:50:f1:36:05:b5:16:74:8d:
45:6e:b2:12:e2:3c:c8:f1:3d:b3:64:5a:e0:c8:36:0c:e8:da:
f6:62:54:d7:a0:64:ef:f3:ff:33:33:ff:79:de:ac:fc:bb:84:
77:9e:92:80:12:eb:14:2b:8f:50:a6:85:bc:c2:f9:0c:45:d7:
00:14:1c:20:46:c0:65:d1:ab:54:b7:00:5c:a6:2f:bd:dd:da:
32:f9:98:25:69:65:46:2f:6f:a3:cb:88:46:75:47:d9:55:d8:
64:cf:77:40:5c:15:f7:dc:bb:ad:63:10:2f:af:5d:39:d6:b4:
36:ef:49:11:03:95:81:8c:4f:d6:5d:2a:96:e9:85:96:96:0b:
b3:fa:a0:0c:1f:e7:04:4b:56:eb:e3:e1:08:3a:b0:dc:bb:49:
14:fb:a8:5a:87:a7:8b:e6:e2:18:96:67:4d:f3:fd:3e:94:c5:
cb:7d:a3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:07:59 2026 by rpki-client