This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json)
Hash identifier: fOBTMa6iFcY5D598YDw1DRG3cVGQ0boqg2soVa8HdNw=
Subject key identifier: FF:CA:14:B4:D3:C6:95:5A:68:5B:6D:E3:4E:34:2E:50:F1:DE:9B:3C
Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
Manifest number: 0221
Signing time: Sun 25 Jan 2026 01:34:10 +0000
Manifest this update: Sun 25 Jan 2026 01:34:10 +0000
Manifest next update: Sun 01 Feb 2026 01:34:10 +0000
Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: mdFr8HeyskqUoWY7hiVc1Y0TZeD/ExuTVWC2Wd1dphI=)
2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: sT81rK2M9q+5qR5h3geelVobh9M/XdM5YvpNMzqLxAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl
rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Validity
Not Before: Jan 25 01:34:10 2026 GMT
Not After : Feb 1 01:34:10 2026 GMT
Subject: CN=69757312-5d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f4:ec:53:5f:ad:2b:62:c9:12:d7:26:57:33:
87:14:c7:75:90:ca:e9:2e:21:56:f0:97:18:28:21:
de:38:97:12:0b:5e:19:7a:85:1e:36:6e:4b:48:b7:
1c:fe:e6:9c:9a:00:e2:8a:70:d3:09:91:0c:58:27:
85:5a:ea:d0:7b:16:ec:05:02:a3:2e:33:22:49:91:
aa:78:9b:34:e6:44:4a:ee:40:1b:9b:a6:cb:a2:2b:
ad:51:e2:b6:72:36:fa:59:9e:77:d0:62:12:70:26:
70:fe:4f:16:2d:f1:a2:32:50:15:8c:fc:dd:7a:80:
4b:28:28:fa:f4:6b:01:88:ef:45:52:71:14:d0:00:
29:d6:f7:43:ce:0d:a5:43:9f:6d:e2:62:31:14:3f:
aa:fe:2b:a0:40:12:6b:32:d2:6c:74:a5:04:90:b1:
82:5c:f4:54:dc:a0:48:cc:ee:a7:bd:5d:d9:e3:ec:
0e:35:11:d2:4a:e7:7b:55:74:4c:ea:52:c1:ec:15:
6c:72:36:08:39:9f:1c:b0:47:b6:0b:f2:80:2d:7e:
74:77:9a:2d:3a:42:ce:61:3a:e0:61:5c:9a:61:3e:
93:93:e7:f9:e6:33:08:16:b4:16:c2:9d:1e:b6:bf:
6d:a3:ab:b7:39:6a:08:b9:ba:dc:db:16:fd:18:1d:
de:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CA:14:B4:D3:C6:95:5A:68:5B:6D:E3:4E:34:2E:50:F1:DE:9B:3C
X509v3 Authority Key Identifier:
keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:5b:73:49:3a:73:cc:eb:ba:20:9d:ca:d3:61:d4:92:c9:c7:
cb:f4:d3:b6:07:71:12:92:86:98:4c:57:08:43:18:9b:d6:4c:
79:8a:22:34:a8:40:d1:45:b3:2c:b3:b1:2d:ef:7a:4e:55:6b:
f9:42:24:58:d1:2d:1f:41:31:1e:87:ad:a8:f6:42:f5:30:4e:
e9:41:52:1d:d1:62:74:4f:07:a4:e2:43:d2:07:28:6b:45:74:
cf:4d:f7:eb:41:63:42:cf:7e:fb:ed:9a:6f:89:1d:0e:a6:3b:
48:38:35:44:38:41:4d:6b:ad:79:66:e1:53:9d:8d:2f:50:56:
00:e1:10:67:69:20:d3:8b:43:1a:8d:1c:11:c5:c8:21:2d:2d:
91:27:80:a6:9f:24:dc:a6:e7:73:f1:94:83:d2:d7:94:f9:fc:
cf:d7:a9:dc:2d:97:2d:d0:39:8e:e4:85:b5:75:7c:9e:e4:71:
21:95:72:97:d2:f5:66:cb:2c:d6:84:6e:62:53:f3:2c:bf:36:
4d:59:6c:39:2f:36:89:c1:40:f9:c2:3a:8b:17:7d:44:49:a5:
d4:02:e9:aa:08:0e:f1:0a:06:db:ec:ba:cf:89:55:62:60:55:
da:c9:87:ba:da:76:cb:7d:61:f1:64:33:84:0d:7a:c5:93:a1:
46:98:d0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:20:39 2026 by rpki-client