This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
File: 07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json)
Hash identifier: iXc1Km0fy/SUR13QtjgHv8L1Um7tXYiYVy5IAuRnL4M=
Subject key identifier: 44:A7:13:01:C4:8F:6A:9C:7B:CC:31:B3:38:9C:AE:BC:A7:D4:75:92
Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Certificate serial: 09B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
Manifest number: 0993
Signing time: Sat 24 Jan 2026 19:31:23 +0000
Manifest this update: Sat 24 Jan 2026 19:31:22 +0000
Manifest next update: Sat 31 Jan 2026 19:31:22 +0000
Files and hashes: 1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: Ux5RDjDMg05Qujf6WKunyEGqHlk5r09TGg9VQrp3cwc=)
2: 42B13940C3C011EE86C2C317C4F9AE02.roa (hash: ohub1su2eLkcxe2mnfMUSQeEjo+GPwYrkG+K0CsdsDY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2480 (0x9b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Validity
Not Before: Jan 24 19:31:22 2026 GMT
Not After : Jan 31 19:31:22 2026 GMT
Subject: CN=69751e0b-963a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:04:22:ac:21:af:44:29:82:eb:bf:0e:1d:
bf:eb:73:4b:2f:b1:59:00:ab:78:71:98:57:29:f3:
9f:d1:24:76:64:17:57:24:13:f3:6e:7d:2e:20:44:
64:b9:4b:fa:d6:ec:09:c0:54:a6:3b:2d:cc:f1:77:
91:e6:af:ee:3f:a8:5a:68:b7:c3:8b:8a:a9:23:21:
3b:35:50:c1:36:57:b9:94:2e:ed:9b:70:de:d0:5d:
42:c3:72:8f:60:e0:ca:ea:da:75:ec:00:6b:60:90:
32:95:06:b0:1c:4a:07:be:49:7f:90:a8:d9:0e:46:
01:ab:c1:f3:a5:e6:1c:ed:77:54:98:eb:86:b6:d7:
f8:2d:26:8c:32:63:66:8e:cc:c8:7e:50:40:24:21:
d5:73:be:80:b5:04:f3:0f:a3:a3:b2:7f:d9:75:2b:
bb:2a:ac:2b:4e:cb:36:f0:2c:7c:e4:43:44:53:7d:
77:1a:8a:fe:b3:be:87:2d:f8:74:99:33:c4:9c:92:
7f:53:b6:97:79:60:7c:79:48:57:98:df:29:4a:ee:
50:2f:49:d3:52:3e:47:d1:6a:93:62:56:13:2e:8e:
e0:d2:2b:7f:cd:72:77:1d:89:64:f7:a0:c4:76:87:
22:c1:bf:06:39:12:a8:ee:94:16:71:f0:f4:60:22:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A7:13:01:C4:8F:6A:9C:7B:CC:31:B3:38:9C:AE:BC:A7:D4:75:92
X509v3 Authority Key Identifier:
keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:77:88:91:87:ff:72:ec:70:fb:b4:6b:9a:57:8b:9f:17:31:
78:ea:ad:81:aa:9a:56:d9:fe:bb:7e:e6:7e:ab:57:bf:30:e4:
5e:9c:5f:3b:81:91:58:3e:96:fc:9d:17:43:a3:65:1c:99:c2:
1d:dc:be:97:13:40:fc:b8:a1:f2:7d:41:c1:10:08:ab:f9:cd:
8c:dc:2c:0e:3f:55:7d:90:dc:42:df:d3:76:4f:ff:99:1a:24:
7e:a8:31:a8:99:3e:39:b8:7b:9d:d6:79:38:e2:4d:60:9c:9a:
e6:6d:ce:4b:a7:a7:d3:d6:75:38:4b:9e:8d:3a:fe:b8:11:fe:
49:ac:e8:3b:9e:6b:68:03:cd:ad:d8:8c:c4:b1:13:1d:4e:f0:
77:53:72:18:9d:d4:bb:d4:5c:69:60:a5:34:ab:de:ea:24:77:
a5:e7:ee:24:95:08:d3:eb:4a:13:6e:0b:76:e8:63:aa:2c:2d:
2f:65:c9:23:87:49:8e:55:c0:14:40:21:15:29:0f:fc:dc:eb:
74:73:f8:0c:10:2d:3e:c9:79:4c:85:16:26:24:25:70:6e:24:
b5:3c:25:16:22:ce:50:a8:c3:e0:9d:4c:f7:74:40:ed:1c:d8:
c3:02:1d:d3:7e:d0:94:70:b7:33:de:74:33:7d:59:b5:e8:ef:
6f:de:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:03:14 2026 by rpki-client