This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json)
Hash identifier: puTqVoi05nuNCtGViDZER9Zz2nB0BATzuOQrNIhTZ1Q=
Subject key identifier: 56:B2:EE:3A:21:8D:FD:A3:35:28:AC:80:81:54:F1:25:3A:43:8F:48
Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F
Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
Certificate serial: 02CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
Manifest number: 02CA
Signing time: Sun 25 Jan 2026 00:34:25 +0000
Manifest this update: Sun 25 Jan 2026 00:34:24 +0000
Manifest next update: Sun 01 Feb 2026 00:34:24 +0000
Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: G+JY7YopdLqDrZFglP0eDND8JcmjQJS37JqISZ/2TGs=)
2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: nUMhsxhIRqeHeQEDGBtbEEh0D5JOlIzRcfpKkf1PF5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl
rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
Validity
Not Before: Jan 25 00:34:24 2026 GMT
Not After : Feb 1 00:34:24 2026 GMT
Subject: CN=69756511-2bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:dd:0b:6c:a1:85:90:16:51:72:4c:c8:d6:
1f:bc:55:a2:94:86:41:e9:a4:62:a9:cd:c3:ee:7b:
1f:3e:f0:a0:20:0a:0c:da:75:66:cf:9e:76:54:bc:
29:8d:a8:07:24:a4:42:f2:af:0c:58:1c:36:01:1f:
fa:b4:34:7f:f5:92:94:69:f4:04:bd:44:1f:3b:a1:
8f:36:ac:6f:f6:33:43:15:58:d7:8c:58:60:18:7d:
fc:69:fa:5c:49:99:25:d1:b3:88:25:71:5c:db:81:
1a:94:04:0e:db:df:d8:bd:36:c8:1e:aa:59:97:93:
08:67:74:6b:9b:49:b2:c7:f9:79:fd:29:52:d4:27:
99:61:76:0d:33:0f:17:5d:ae:b1:54:7d:b7:f3:d7:
c7:6f:08:69:fa:44:7f:69:cc:7d:2e:52:51:da:21:
ed:7a:5e:5f:8a:99:fd:61:b0:f3:56:4a:7b:a2:7c:
4b:a6:66:6e:eb:b7:e7:b9:12:a9:eb:3f:4e:b5:ea:
8f:77:79:f1:f0:21:aa:90:8e:10:5e:00:0f:a9:e9:
2f:45:c9:45:70:9f:53:4b:a7:12:93:5b:49:90:04:
52:c7:c1:23:61:3e:7c:86:54:fd:1a:00:19:dc:25:
3f:24:6a:6f:1a:91:4f:ed:37:e9:5e:29:45:d3:b8:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B2:EE:3A:21:8D:FD:A3:35:28:AC:80:81:54:F1:25:3A:43:8F:48
X509v3 Authority Key Identifier:
keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7d:8a:25:8b:f5:98:9b:3e:ba:f1:ac:20:04:7e:a7:df:d4:
d0:6d:79:28:cc:b8:0b:58:df:dd:c4:69:35:ad:2b:48:01:a6:
77:21:0a:ed:18:1e:3c:21:28:07:92:d9:8c:00:4a:ab:02:dd:
2f:d8:36:31:ac:64:04:28:45:88:09:b3:3b:d1:33:d4:62:38:
ad:9d:73:10:05:da:b4:3d:cf:29:7e:61:a3:dc:3b:87:14:17:
45:46:9b:1b:5e:f7:0e:49:0c:57:9d:c2:d9:16:00:e7:ee:42:
bb:f9:a9:8f:03:f5:22:fb:35:cd:47:ee:97:93:30:cc:aa:bf:
b7:14:99:dc:09:aa:f5:67:f5:f3:3f:c6:ce:e0:cc:dd:2c:8a:
03:fc:0c:8f:7b:dd:42:65:cc:84:fe:8b:b6:3d:84:18:63:ad:
38:45:33:2e:4b:a1:5f:e5:8a:7b:eb:6a:2e:31:41:0d:da:eb:
d8:67:f0:a1:2e:37:83:ea:42:a4:7f:c2:b4:f3:57:1d:aa:85:
fa:50:60:26:27:3e:4d:51:6b:9f:03:0c:3e:31:7a:90:b2:9b:
f0:c0:c4:40:37:ea:7e:7e:cc:0c:4c:70:7f:f6:b7:be:72:b6:
1a:85:2a:17:a3:57:96:01:33:32:b4:af:f1:96:c3:65:2a:c6:
95:70:a0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:44 2026 by rpki-client