This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
File: v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json)
Hash identifier: kuVHl8/dG0fE+f4d02b3n59HMVjR1/VOp0wLbZ5T8Fc=
Subject key identifier: F3:07:69:EB:B2:36:E9:11:D6:02:01:63:A7:1A:B6:46:F9:B4:C2:66
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial: 0769
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
Manifest number: 0704
Signing time: Sat 24 Jan 2026 21:40:30 +0000
Manifest this update: Sat 24 Jan 2026 21:40:30 +0000
Manifest next update: Sat 31 Jan 2026 21:40:30 +0000
Files and hashes: 1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: x8n5bykJcMNdCouu6Nt+PkYMMYLREYio6mqB6kh0Reg=)
2: F2AA224A1A1711F09D6D6923C4F9AE02.roa (hash: BxWae3NoAwopQofY/7tQ9EJUJTiDj/e3vsHIr+gLDzo=)
3: 671FC40EE29211EE94348874C4F9AE02.roa (hash: 8z6xDKhwld/+PqMlkxmQW4jjFgb0KSjTx84Nej4v1h8=)
4: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: y4GtwygNXHOsgApCazrA1K5LMWjkg33ysXo8KtVSOnk=)
5: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: UwSCk8PiXVxxp/HUKiEsKMP9QLxahaMhhaVASnsqLPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1897 (0x769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Validity
Not Before: Jan 24 21:40:30 2026 GMT
Not After : Jan 31 21:40:30 2026 GMT
Subject: CN=69753c4e-7238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:15:d6:f3:8a:e0:10:9f:e5:0b:12:15:0a:
25:33:62:ba:74:0d:83:d3:68:b2:2a:70:1c:22:06:
a3:92:e3:b9:65:71:d7:24:7a:1e:2e:fc:0c:be:89:
0b:d7:b1:02:e9:9c:d2:0a:bb:67:6f:68:c1:4d:19:
51:56:66:bc:2f:30:22:49:20:e0:9c:9b:dc:22:64:
a3:b1:dd:1d:47:65:5c:c2:ad:ce:b9:4d:e9:28:7a:
51:8a:1e:18:8d:60:97:d3:8d:c0:27:fd:f8:62:80:
b9:27:fe:a7:02:e8:6f:b5:e9:fa:86:ec:96:5b:18:
b9:4a:20:84:ff:47:7f:7f:7c:93:50:3f:78:53:0c:
82:01:6e:b4:1d:44:f7:f4:e8:98:cc:97:ae:10:e2:
b9:cc:e0:09:26:53:6b:12:ce:10:16:1f:dd:20:ef:
5d:67:62:84:67:17:06:49:22:69:bc:11:cf:50:b5:
01:58:b4:a1:57:f9:43:8d:48:7a:27:aa:4b:f7:5f:
29:dd:d9:1c:64:1d:fa:26:79:03:c3:c3:57:ef:83:
b2:4b:cc:d1:09:96:50:26:51:7c:95:55:f4:9a:4c:
bd:30:6d:08:10:55:2e:8c:f1:bc:5c:9a:07:d6:99:
13:40:de:d0:d0:6c:73:23:0e:59:29:db:13:09:ca:
48:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:07:69:EB:B2:36:E9:11:D6:02:01:63:A7:1A:B6:46:F9:B4:C2:66
X509v3 Authority Key Identifier:
keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:93:d0:4e:df:07:bd:0c:29:7b:33:10:ff:9c:35:fe:cd:26:
8a:fd:b9:70:cc:22:73:dd:29:b2:77:e6:cc:30:3f:f9:aa:e4:
5f:45:34:5f:72:4a:c8:ef:0a:a4:df:8d:19:82:8a:d5:44:01:
d7:0b:f3:67:8c:96:24:6c:d5:bf:65:76:6e:0e:d0:18:f2:69:
0f:06:50:76:62:2d:33:4b:18:4e:af:1f:52:60:51:8b:66:5c:
06:6a:ef:b4:e5:82:c0:f5:ee:1a:94:08:59:f9:0e:1c:22:01:
ea:3b:29:0e:4b:04:8e:dd:ed:ff:b0:9d:9a:92:bc:09:29:6d:
6d:08:6a:94:0b:2c:cd:84:ea:6b:a7:c3:18:09:4f:e3:b9:25:
06:80:8f:f9:ff:9e:fc:7c:27:5b:8c:ec:da:52:9e:c6:b2:cb:
78:7e:35:5f:e2:f9:c6:78:42:45:03:0e:57:de:e4:67:55:5e:
8f:cd:ef:93:aa:02:17:5b:bf:e4:f2:f8:40:71:48:0d:83:31:
31:08:7d:0a:78:c0:06:ec:57:98:50:ac:73:3d:3c:9f:15:c9:
9c:11:ff:ce:69:b5:5e:79:ed:eb:83:1a:85:50:03:84:27:b5:
bd:23:04:49:83:d4:b8:5e:a2:2a:93:e3:1d:94:62:67:c4:3e:
13:77:b8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:17 2026 by rpki-client