This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft
File: u7hAsFOTTV4f7dQN0CPvevQouuA.mft (raw, json)
Hash identifier: JEwsdaut4SrvcBMiyX5m5s0KbXdJz2yzx9LbSuuh3ZE=
Subject key identifier: 29:77:B2:D7:3D:32:E1:22:0C:72:E6:99:50:E3:B0:48:35:F1:7E:F0
Authority key identifier: BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0
Certificate issuer: /CN=A912AD2E/serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0
Certificate serial: 1842
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft
Manifest number: 1836
Signing time: Sat 24 Jan 2026 16:17:30 +0000
Manifest this update: Sat 24 Jan 2026 16:17:29 +0000
Manifest next update: Sat 31 Jan 2026 16:17:29 +0000
Files and hashes: 1: u7hAsFOTTV4f7dQN0CPvevQouuA.crl (hash: tCRc+OmuFj/bVdl+e8etR1/My8obk46VXUgzAlJz684=)
2: E3D5A6F4422411E8804DBC3AC4F9AE02.roa (hash: E/6I3qQjCBxjGs7jFLaCU1bmuGjPrQh25a7j/aLYowA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl
rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6210 (0x1842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AD2E, serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0
Validity
Not Before: Jan 24 16:17:29 2026 GMT
Not After : Jan 31 16:17:29 2026 GMT
Subject: CN=6974f09a-b3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:df:1f:39:f2:01:d1:41:43:0e:c7:3e:6c:
eb:9e:bd:c4:bd:c2:af:d5:c4:a2:91:e8:23:51:cc:
d2:a2:71:00:75:0c:a7:18:6b:d2:98:e9:ec:dd:0d:
d1:b2:4c:a5:88:11:62:57:f1:9b:e8:e2:37:70:34:
4a:e8:90:b2:df:06:ca:a2:62:50:9b:dc:da:de:bf:
74:c7:ae:11:b2:5f:4c:5c:c8:c1:3d:54:55:f3:25:
e6:a5:d0:20:19:71:52:be:bf:51:a3:ec:2d:c0:7a:
9a:47:83:a8:89:ab:db:ad:46:18:ff:32:8f:8d:4b:
a5:2c:af:42:7f:26:91:e9:8e:02:03:72:3d:a6:d5:
2a:00:63:dc:80:2b:27:b9:7f:b8:64:f4:b7:43:1a:
cd:53:d1:88:e8:89:d6:ef:17:73:f3:2a:02:36:5e:
e5:d3:1e:b2:2d:9e:bb:6b:ef:11:fb:a3:ce:e4:c3:
cd:01:8c:8d:31:f2:3e:e9:6b:e4:bd:32:01:ac:fe:
22:24:97:5f:6d:8c:90:05:ba:f4:ac:3a:e4:cf:42:
38:f1:e3:00:3a:8e:27:0a:78:7f:1c:ae:ba:5d:f3:
8f:87:bd:0f:76:fe:a5:f6:a8:cc:4d:51:85:f8:ac:
84:59:b2:b7:bd:54:b7:79:fb:82:68:5b:38:f4:d5:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:77:B2:D7:3D:32:E1:22:0C:72:E6:99:50:E3:B0:48:35:F1:7E:F0
X509v3 Authority Key Identifier:
keyid:BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:20:be:57:dd:ed:78:36:f2:a4:cf:7a:c0:7b:9b:13:8a:42:
4a:7b:fd:2d:01:52:03:5a:8b:50:f3:15:3c:af:d4:4a:ba:55:
a8:7b:f9:40:fb:3c:7a:f6:3a:3c:8f:0f:b5:52:b7:3a:d2:a9:
b5:37:cc:be:fb:9e:ea:40:22:04:20:af:db:85:b2:d7:e0:0f:
e7:45:84:1d:62:ae:55:d5:9a:bd:0c:5c:6e:93:4b:64:3f:c2:
58:c8:77:65:ad:2e:3a:85:33:49:fc:cc:69:62:41:60:4b:ac:
0a:82:0e:c9:e5:77:38:7b:ac:e2:fc:8e:7f:c3:53:31:91:a3:
99:36:a6:13:b1:9f:9b:b5:54:46:56:c6:c1:6a:c9:96:f8:13:
4a:e2:99:7b:28:14:6b:e1:16:5a:72:24:dd:90:4d:85:2f:7b:
d3:78:f7:43:35:00:de:01:58:4d:4e:f8:ce:8f:30:55:f0:5f:
47:cf:f8:82:56:2b:9d:67:85:3a:81:1b:cb:3d:8d:50:62:1d:
c4:d7:81:ef:2e:09:ee:18:29:9a:d4:89:a6:20:73:21:50:e8:
86:6b:06:19:fb:59:ba:f5:1e:73:ea:96:fe:c1:76:89:bf:58:
67:e2:54:0d:78:13:2a:fb:25:97:21:9f:c4:86:b9:70:18:81:
87:88:62:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:36 2026 by rpki-client