This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft
File: SC2tuZLeLPG_mQg2R44ZlEmVseA.mft (raw, json)
Hash identifier: stGqNHvROYgnrytawt4OoizPj+O1wJzMXq4zwYEB+3g=
Subject key identifier: 14:6D:ED:88:C3:F9:F2:68:0B:C8:30:CC:98:82:16:42:95:E2:EE:5F
Authority key identifier: 48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0
Certificate issuer: /CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0
Certificate serial: 0F2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft
Manifest number: 0F24
Signing time: Sat 24 Jan 2026 17:16:18 +0000
Manifest this update: Sat 24 Jan 2026 17:16:18 +0000
Manifest next update: Sat 31 Jan 2026 17:16:18 +0000
Files and hashes: 1: SC2tuZLeLPG_mQg2R44ZlEmVseA.crl (hash: lb4eK4REj2ez7SQABf6FYDAPTvCR/4zthQhTuRexSks=)
2: 6E37C53C72CA11EC8CE7244BC4F9AE02.roa (hash: IptQh9J7jeiBWTQD/hPt8ei062oDoKw0nZ49KCuQKMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl
rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3885 (0xf2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E898, serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0
Validity
Not Before: Jan 24 17:16:18 2026 GMT
Not After : Jan 31 17:16:18 2026 GMT
Subject: CN=6974fe62-4e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:a2:3b:38:e6:61:c1:4e:f3:97:1a:0e:26:
36:c6:cb:d0:b9:c3:92:6e:15:f0:42:e4:be:93:d7:
84:b1:1d:1a:36:13:39:0f:4c:de:9d:5d:59:38:cc:
3f:b1:25:71:5f:0d:1c:20:59:b1:d3:40:55:41:7b:
84:e8:62:e0:7b:fa:a5:fb:4a:f6:f9:44:95:7f:bf:
3b:94:82:20:34:3b:d0:ad:af:a0:d0:19:b8:1c:fa:
66:fa:02:f6:65:39:49:24:63:6b:00:59:ac:97:00:
06:21:16:80:80:14:39:be:b4:29:d7:68:35:61:f4:
4f:18:40:fa:e9:8b:be:3f:51:30:ef:f3:e6:6f:0a:
cb:96:d7:8f:85:ff:6a:cc:fb:d1:8d:39:22:e0:d2:
e3:ca:22:cb:22:c0:b7:6a:3d:cd:07:e1:4a:e9:19:
54:ab:ac:c8:95:52:c4:e1:3f:c9:67:e5:1a:ac:06:
87:46:72:4f:e2:c9:1e:4e:43:4c:6e:60:58:a4:0f:
58:65:97:8b:e4:89:e4:20:b4:9f:a3:95:be:d9:49:
aa:29:b5:3d:4c:e7:ca:86:ef:11:5d:de:e8:53:d9:
5b:8c:bf:ec:16:aa:0a:81:6a:0f:63:85:59:fc:fd:
eb:0a:8d:0a:d5:b0:1d:52:6e:8c:4a:79:14:da:bc:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6D:ED:88:C3:F9:F2:68:0B:C8:30:CC:98:82:16:42:95:E2:EE:5F
X509v3 Authority Key Identifier:
keyid:48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b8:12:e5:8f:2b:51:b9:8e:f5:77:62:a5:a9:8b:dd:b4:d2:
00:c7:60:02:69:4e:f6:83:49:20:d4:f7:35:eb:42:56:35:21:
c2:0f:87:65:8b:3c:4e:67:0b:3a:d0:23:32:23:d3:4a:72:45:
d1:03:a4:de:5a:77:9b:eb:24:6b:c1:52:86:67:e6:aa:f5:e2:
10:29:f1:38:11:1f:49:b9:18:54:28:d5:7c:3e:52:f7:55:8a:
91:f5:42:78:f4:0e:ee:1b:ee:12:6b:a1:ba:e8:e8:e8:95:76:
75:fc:d2:01:2a:12:d0:aa:d4:ba:32:cd:40:43:c9:f4:4e:85:
27:3c:88:c0:aa:48:34:b4:a3:91:50:99:c3:b8:5b:24:a6:6c:
e3:ca:96:71:2d:8d:f2:6c:05:d0:3c:c9:b8:f4:eb:ae:a9:b9:
ba:3b:59:59:a6:61:0f:ca:29:5d:65:93:4b:af:aa:15:32:6b:
f4:db:f2:33:bb:69:f0:b1:d3:3a:3e:6a:b0:c4:8a:a8:b6:4a:
39:8d:38:16:8c:b5:84:d8:a5:26:99:3f:69:bf:7b:f8:bb:0c:
63:88:02:be:79:16:fd:92:3c:5e:78:77:a3:59:d5:46:29:87:
be:4e:84:a7:9e:73:4e:2e:ec:45:69:37:2d:2d:0e:f2:0f:4a:
fe:44:df:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:13 2026 by rpki-client