This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
File: dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft (raw, json)
Hash identifier: JTX48mXJEduPhTU827/B282zKQo4+VSWtzKrPPFjswo=
Subject key identifier: 7A:1F:89:69:26:19:C6:A3:71:7B:57:2E:DF:B4:55:A0:B9:80:D1:9B
Authority key identifier: 75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
Certificate issuer: /CN=A913270F/serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 07:08:36 +0000
Manifest this update: Sun 25 Jan 2026 07:08:36 +0000
Manifest next update: Sun 01 Feb 2026 07:08:36 +0000
Files and hashes: 1: dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl (hash: CnfkBCCukXtUoMmVS+r2RqVphQfyw1pGvtAHX7QxpLc=)
2: CDCAE45AEFA011F0A40A3DE8696F56BC.roa (hash: fTXgC8J6YYN2gtdlq7e0BLgkfRwuah8z2KU0Ym7QZ3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl
rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 07:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913270F, serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Validity
Not Before: Jan 25 07:08:36 2026 GMT
Not After : Feb 1 07:08:36 2026 GMT
Subject: CN=6975c174-2a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:f0:64:a4:ae:30:89:85:b6:e2:fb:79:f5:
c7:bf:88:5d:b1:be:38:7a:df:03:dc:2d:43:68:33:
d9:b7:3e:b0:cc:f4:73:ec:e9:f1:d9:50:d0:3b:f1:
b5:37:f5:bf:48:d4:e6:66:53:bf:1a:c2:9b:48:d2:
1f:43:ca:e9:58:b5:75:d1:09:3b:37:bb:53:0d:66:
8a:17:a7:d4:2c:20:96:02:d1:a3:cf:2a:66:0b:95:
18:c5:56:4c:11:46:20:a3:a5:06:23:e2:ea:5a:d9:
15:3f:3f:8b:14:3a:b8:3f:ad:5c:2e:ab:be:cb:97:
f5:73:32:b6:73:ca:dc:97:a5:63:2e:27:b0:25:ef:
1f:6e:9f:f4:83:be:0f:e2:a2:74:36:a8:b6:2c:9f:
8b:80:97:07:34:2b:c0:4b:24:e5:3f:6b:33:e1:18:
8e:67:ec:f4:b0:e2:da:03:4b:08:41:2b:72:29:20:
a2:48:ca:88:aa:ea:c3:f5:83:79:db:52:77:02:b4:
d2:e3:05:12:4b:1f:84:81:6c:96:de:f8:dc:c2:da:
33:f2:7a:51:cd:06:1a:81:8c:08:71:cf:2e:af:d7:
fe:e5:eb:0f:8f:2e:64:be:5d:94:0f:f2:0a:2d:3a:
6c:26:93:10:c6:22:06:5d:0a:6f:93:54:3c:a7:3e:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1F:89:69:26:19:C6:A3:71:7B:57:2E:DF:B4:55:A0:B9:80:D1:9B
X509v3 Authority Key Identifier:
keyid:75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:31:38:75:38:c1:c1:0a:eb:ff:5b:50:cc:f2:f7:d3:0b:30:
9f:37:09:2f:4b:93:25:4f:e3:8a:f1:51:a0:77:d3:fd:dd:a7:
94:90:75:26:01:2f:ab:b8:c7:31:fa:44:d3:97:bf:71:38:42:
c1:cd:e9:12:47:15:b9:f2:d4:80:06:02:76:39:e9:d9:8a:86:
0b:2e:58:c5:34:d9:bd:61:db:57:9a:6e:f6:3d:d7:2a:22:c5:
0b:da:b0:7b:05:37:40:25:ad:8b:0a:28:9e:7c:c1:e7:4e:03:
00:fd:b7:3b:e6:e2:c5:89:0f:e5:ce:ed:2e:17:c6:ab:fc:ef:
66:9f:ef:3d:59:9e:a2:d1:10:c1:e6:db:d3:b5:78:bb:dd:70:
7f:4b:23:da:72:d7:4d:97:3d:87:e8:01:08:65:2d:23:78:a4:
7c:64:67:ea:59:c8:c2:6c:cd:c1:0a:fe:d0:b4:7b:ae:2c:62:
14:1e:e9:c9:fc:84:7e:1c:3a:d2:31:8d:a7:b0:f7:9d:77:9c:
13:82:a0:f1:5d:23:39:3e:ed:42:7d:eb:ed:f7:6a:15:ca:da:
3c:cb:37:c0:56:3b:5b:89:99:c8:80:38:ad:58:f4:ca:54:c8:
cf:d0:9e:e0:d3:28:a7:42:83:49:22:45:ec:d2:23:e3:ca:8c:
3c:b7:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:04:05 2026 by rpki-client