This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
File: MjQC2m9aUgggITsu3L_s7DrJEEU.mft (raw, json)
Hash identifier: hmUqPegj4PcQj1PjKSm91fTbbynEF3NOGcvqmNl1hNY=
Subject key identifier: A4:8C:FC:B1:88:B8:7D:54:B9:47:B5:2E:11:BA:22:5C:7A:67:7B:63
Authority key identifier: 32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45
Certificate issuer: /CN=A913059E/serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
Manifest number: 25
Signing time: Sun 25 Jan 2026 05:10:48 +0000
Manifest this update: Sun 25 Jan 2026 05:10:47 +0000
Manifest next update: Sun 01 Feb 2026 05:10:47 +0000
Files and hashes: 1: MjQC2m9aUgggITsu3L_s7DrJEEU.crl (hash: w69JSOCkDQWJ/f2zJI7QHS27Dwt0JNKOZnc3JObAqRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.crl
rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913059E, serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045
Validity
Not Before: Jan 25 05:10:47 2026 GMT
Not After : Feb 1 05:10:47 2026 GMT
Subject: CN=6975a5d8-7307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:12:b6:2a:53:65:ef:ac:68:c5:bd:e8:af:
01:e1:5c:f1:76:76:86:77:16:45:c2:52:b3:90:8b:
78:41:2e:8e:e1:18:93:15:62:07:c0:7a:88:b6:ca:
d9:4f:0d:af:35:8a:b3:f8:70:68:20:ee:98:c2:f5:
00:4b:8e:01:ed:67:a5:a0:d8:25:89:20:4f:5b:9d:
70:be:71:fc:28:d2:cd:b4:05:90:6f:d3:f6:0d:7b:
10:04:14:65:9f:16:b7:75:54:87:6a:fb:f1:8e:e1:
e2:5d:1a:a6:8f:54:b4:dd:9b:fb:28:48:a9:ad:36:
c2:24:81:67:35:ed:9d:49:b2:20:a8:be:2b:d3:c9:
e2:dc:45:30:48:96:1a:96:cb:df:fc:3f:52:79:c0:
71:41:36:24:2c:d7:74:57:7f:e7:c8:73:87:f8:fd:
67:44:49:f6:ca:fb:1c:d2:34:81:70:a2:af:ec:1c:
2a:54:eb:36:15:bb:86:cc:8c:81:de:63:b6:5c:e1:
03:fe:c8:f0:02:17:a7:b3:91:94:89:f4:1c:f7:f8:
b2:1c:f1:aa:e4:76:a0:32:71:9f:35:1b:9b:ab:f7:
09:a0:1d:b7:76:01:52:49:53:ce:52:a9:fe:25:3b:
fc:5c:39:9f:e9:dc:b8:fc:61:08:48:b2:12:93:5b:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8C:FC:B1:88:B8:7D:54:B9:47:B5:2E:11:BA:22:5C:7A:67:7B:63
X509v3 Authority Key Identifier:
keyid:32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:70:13:74:05:0c:2e:30:fd:e0:97:60:b9:88:49:47:bf:4f:
a3:be:f8:48:4b:08:8e:0a:4a:ec:b4:4e:b3:4b:2d:7a:e7:6c:
0a:34:97:91:0e:9a:6d:c0:d1:c2:9c:15:02:10:99:7a:c3:b5:
2e:26:c5:44:8b:5a:f3:8c:c0:af:1a:50:94:fa:77:49:0a:46:
ad:63:0b:99:15:7c:9c:74:a0:36:45:9c:92:9d:90:8a:54:a3:
3c:2b:d3:f8:45:bb:15:28:16:c0:46:d6:ac:75:6f:6d:29:5f:
cc:ef:ef:03:ec:0c:76:d9:fd:3f:eb:71:a8:a0:59:e1:68:64:
dc:91:b2:d5:dc:10:89:ff:0e:4b:33:ff:e1:02:5d:ce:b4:93:
e8:a7:2f:68:c8:d3:6f:30:93:0a:15:9e:54:de:5e:6e:7c:0f:
c9:5f:01:91:04:8a:f6:09:4e:cf:44:8f:3c:3b:aa:9b:76:87:
98:98:68:61:c1:96:d4:80:12:54:32:9f:6e:37:7b:81:f5:d3:
aa:e8:c6:f3:e5:d2:d5:53:a9:1a:71:c5:b8:6d:16:84:c0:8d:
da:97:b9:27:53:55:09:92:44:06:3f:0e:05:57:8a:be:90:0e:
9e:9f:a2:02:c5:78:ee:af:65:4b:56:66:2f:8b:88:d1:e7:9e:
67:2d:f0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:33:59 2026 by rpki-client