This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft
File: 9RwbzQ28E1ptm8RasFnm3ifpOwM.mft (raw, json)
Hash identifier: /XhbSiDHYeTvf54tg5LChKrv85eK9rlsnCmOi2mpLNc=
Subject key identifier: 84:CA:A5:5A:BD:99:17:8D:F3:2D:9A:02:99:94:C9:3F:B3:14:29:BA
Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03
Certificate issuer: /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft
Manifest number: 01B3
Signing time: Fri 23 Jan 2026 02:21:47 +0000
Manifest this update: Fri 23 Jan 2026 02:21:46 +0000
Manifest next update: Fri 30 Jan 2026 02:21:46 +0000
Files and hashes: 1: 9RwbzQ28E1ptm8RasFnm3ifpOwM.crl (hash: cS/MJJ7McLTGC/P9hqxt2SvvUY2jBUD7UDdu5Rgea0A=)
2: 9EEDB94662C111EE8F200F60C4F9AE02.roa (hash: nyq8KHP8dGY9X8L7b113gFAzdF9IMtkS8NNdIrOA99k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl
rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 02:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C1F9, serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03
Validity
Not Before: Jan 23 02:21:46 2026 GMT
Not After : Jan 30 02:21:46 2026 GMT
Subject: CN=6972db3b-a782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:65:31:2d:72:11:09:b3:7b:8f:1b:6c:f0:
4a:44:20:70:5e:6c:aa:5a:cd:08:7d:04:b9:5b:2a:
5a:bb:f3:fc:70:bb:f9:dd:0e:42:57:1b:56:8b:62:
53:78:44:2a:8d:42:ae:17:79:58:f8:ca:73:52:5d:
01:a7:fe:73:48:cf:f6:94:cd:50:3f:cc:3b:fa:35:
b0:ab:81:e5:62:fb:a4:fc:5e:d5:ae:e2:1a:ea:68:
c0:e1:04:35:d1:d9:7c:21:44:44:6e:af:98:93:06:
bd:da:83:26:13:a0:4c:dc:9b:6a:f6:55:17:3e:80:
30:7d:c1:e3:5b:d2:28:ec:72:e6:55:27:b5:95:da:
8a:4a:60:96:b8:01:59:ed:6e:e7:1e:65:57:ed:77:
be:5c:6c:24:2f:e8:f8:be:d5:63:ca:53:8e:b8:0a:
11:45:67:a3:1d:76:37:e6:15:cb:62:ea:1f:1e:ce:
a5:fc:da:95:ba:bc:fd:1c:12:58:59:4d:f3:f3:8b:
3b:90:7b:25:8a:bd:43:7e:9c:d2:16:1a:72:69:f2:
2b:fc:14:68:84:5c:7b:87:72:ee:72:5b:73:9e:42:
7e:29:b9:96:b5:ce:e0:8f:b5:b2:f9:5d:97:f2:b2:
b8:ac:de:9f:e9:12:22:ae:f3:b5:39:91:e8:ad:ad:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CA:A5:5A:BD:99:17:8D:F3:2D:9A:02:99:94:C9:3F:B3:14:29:BA
X509v3 Authority Key Identifier:
keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:b1:9f:6b:a6:8d:18:3b:07:3f:11:88:dc:6e:01:44:77:15:
b0:df:bc:d6:e1:32:73:bf:d3:aa:7a:57:68:3b:9d:ce:ad:4b:
bc:cf:64:00:59:3c:4a:16:bb:ed:85:09:18:ca:08:87:b7:44:
2a:8f:6b:96:e8:aa:fd:b0:69:81:ad:e9:1a:5f:06:84:f8:e2:
28:e3:4e:08:2c:fb:0a:b6:3c:8d:a1:ae:79:9f:77:d1:01:ed:
ba:b1:7a:2e:61:fa:ed:36:7b:f2:77:e6:80:cc:5d:09:a1:8a:
c4:c3:94:21:7c:29:9f:b0:d7:e7:91:46:9e:3e:aa:24:03:e3:
ff:6c:0d:6f:7b:bd:8c:16:4a:f0:b8:01:77:1b:21:3b:5b:ea:
1e:e4:0e:3d:bd:c9:ec:47:2d:bb:1d:4b:db:10:42:e7:54:65:
76:60:40:5c:b9:a8:23:4c:0b:76:c8:1e:0e:3f:3b:e8:50:07:
5e:09:9b:20:f4:60:9a:5e:c7:67:8e:1f:4e:56:cc:90:07:84:
ea:bd:a9:54:79:99:f4:52:c7:1d:d7:ff:79:e1:c3:5d:c0:23:
31:91:ff:d8:00:3a:60:70:e4:41:01:73:f7:e4:b4:c9:86:9b:
88:0e:f7:8a:ba:c1:b2:5d:f8:c4:48:0f:fc:72:4e:49:83:b6:
f4:10:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:56 2026 by rpki-client