This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
File: 1rdRTL8L4gRsE8oNf10iNS_aWO4.mft (raw, json)
Hash identifier: d6daypTMYff4ZRYqswQ56k1vH/9OgBp6bJ4ESU7z8DA=
Subject key identifier: A4:CC:44:D8:12:76:77:62:0F:D1:9D:31:17:C4:A4:05:6A:9B:43:79
Authority key identifier: D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE
Certificate issuer: /CN=A9134B2D/serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
Manifest number: 0243
Signing time: Sun 25 Jan 2026 01:09:40 +0000
Manifest this update: Sun 25 Jan 2026 01:09:39 +0000
Manifest next update: Sun 01 Feb 2026 01:09:39 +0000
Files and hashes: 1: 1rdRTL8L4gRsE8oNf10iNS_aWO4.crl (hash: 16PLicEziL2mvIc9KvKxy070w8BxHJaBpBJMJWnw29w=)
2: 8E3128B4837D11EDB082012FC4F9AE02.roa (hash: pbCZups9CHpt8yF1jqE6eaTv1T+fEJy3uGbRYPbMwLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl
rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134B2D, serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE
Validity
Not Before: Jan 25 01:09:39 2026 GMT
Not After : Feb 1 01:09:39 2026 GMT
Subject: CN=69756d53-7ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:20:9c:3b:f2:94:35:f4:1c:80:85:f3:01:
1b:ab:c6:69:db:ea:8a:c9:28:78:d5:1f:c0:7d:86:
5d:a4:18:93:7f:91:c5:4b:49:5e:07:5a:4e:b1:e1:
91:d3:0c:1f:17:6e:7d:29:ec:af:86:6d:62:f0:01:
6e:8c:67:f8:11:5d:b7:ea:82:19:29:7d:21:c3:be:
83:9e:69:c6:ce:fd:4b:a5:52:e4:7e:bf:07:bb:a6:
8e:da:c6:72:ac:b8:01:02:fb:d0:33:ee:0e:ea:a0:
be:5f:19:93:c5:6b:88:10:94:9c:44:c5:c4:e7:08:
11:db:46:39:ad:b4:e4:fe:95:6c:ce:49:ea:14:24:
3f:f1:0a:4c:90:9b:6a:84:0e:a0:3a:42:1d:79:16:
4f:e2:9b:4a:80:f2:e0:78:e0:af:41:5f:9c:16:bb:
b2:5c:d2:48:94:21:72:b5:63:7b:4e:d5:33:06:83:
ff:46:3b:3c:97:2c:33:90:b0:8e:40:9b:45:44:94:
63:1a:2d:4c:13:73:66:bf:ae:63:f6:d7:ee:f5:94:
d7:04:84:75:af:82:71:a5:88:f4:35:9e:3d:fa:6c:
09:66:2f:a1:d6:18:e9:d4:be:20:02:a1:ae:a5:63:
93:6b:45:85:8f:b0:c8:e2:65:e0:be:2b:68:11:51:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CC:44:D8:12:76:77:62:0F:D1:9D:31:17:C4:A4:05:6A:9B:43:79
X509v3 Authority Key Identifier:
keyid:D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:b9:5a:a4:1b:02:c5:a7:fa:34:91:b7:91:84:03:95:53:82:
8a:7d:16:86:34:ea:cc:62:24:50:79:61:08:22:35:ef:5c:78:
0e:c6:37:c0:57:ea:7b:68:eb:f4:73:d8:d5:7a:17:e5:31:1a:
65:72:22:6a:31:64:f1:51:df:96:6f:df:9f:91:2a:a1:c5:a8:
f4:ec:9b:c6:c8:74:d0:6e:cd:a0:aa:ee:3e:b8:b8:0b:41:cb:
05:89:c4:93:81:1a:b9:e7:18:da:cf:27:29:4c:ad:8c:cc:41:
82:a3:5a:e0:29:33:c9:79:de:7f:87:d1:e2:ab:d7:84:c8:8e:
19:fe:cb:47:3d:66:7c:a0:c0:a0:d8:3f:e1:3e:3e:56:62:45:
b8:c4:90:bb:0c:a0:fb:79:a5:67:48:4a:ef:bb:08:9f:a0:55:
2b:53:9f:73:36:08:fb:b1:da:ab:f1:6d:6f:5b:d5:7a:4f:b8:
cb:f5:db:43:dd:a2:e1:9b:04:9e:4a:35:36:e1:57:c6:41:09:
7f:75:aa:46:50:c8:fc:72:28:cf:d8:a4:fc:c5:98:4d:67:87:
41:04:8c:93:05:07:0e:fc:fd:de:bd:69:c7:d3:54:76:8d:7a:
26:f7:79:2c:d3:4b:37:55:36:0c:3d:f0:04:8d:15:0e:af:2e:
27:5a:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:49 2026 by rpki-client