This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json)
Hash identifier: gi0s3T2mmvu6lfJYILFZ++5VN2HMBw5ym90FKMjoAKI=
Subject key identifier: F1:6D:A9:83:E3:E2:4F:18:4A:80:5C:AD:43:31:A3:92:9D:35:CD:57
Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Certificate serial: 04D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
Manifest number: 04CF
Signing time: Sat 24 Jan 2026 23:03:04 +0000
Manifest this update: Sat 24 Jan 2026 23:03:04 +0000
Manifest next update: Sat 31 Jan 2026 23:03:04 +0000
Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: sNTTIkCh+ZLuqsJDvdrI5uL3lYpj/Y1Fjz/qvd0ANQc=)
2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: LakU53mmAKZxWbtHABnd6u2JIQUwSgIdxv6XnbOWa7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1236 (0x4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Validity
Not Before: Jan 24 23:03:04 2026 GMT
Not After : Jan 31 23:03:04 2026 GMT
Subject: CN=69754fa8-aa72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:ae:5e:9f:73:e2:83:6a:e8:32:5a:54:88:
4e:bd:1b:75:68:54:c2:63:25:d7:bb:6d:aa:4c:f6:
f0:ad:dd:9d:8c:bb:e2:97:84:74:85:fd:8f:19:77:
25:48:ec:04:b2:f7:80:17:e8:20:01:28:bf:2a:2e:
af:5e:e1:38:8f:5a:27:29:75:7c:eb:ec:b8:26:a9:
19:e3:75:18:6c:0c:76:f4:ca:5d:44:c5:a2:c7:26:
e0:5a:31:8c:a4:12:45:2f:46:1a:07:8c:da:2a:b0:
e9:57:46:77:04:7b:a5:8e:05:b7:34:4b:46:95:9a:
51:50:01:3d:6d:7e:0d:8a:72:e4:5e:26:d4:17:b1:
66:76:c9:20:12:2f:c0:f6:8d:19:01:81:cd:29:5e:
f9:f8:e0:d1:db:38:26:f3:2d:c6:6f:0d:10:50:23:
f6:f1:36:b3:79:e1:f6:3a:7a:8a:49:42:c2:54:91:
a3:d4:22:0b:74:11:20:91:0b:0c:2e:64:17:a8:c4:
f5:38:92:8c:58:74:06:bf:4f:64:e4:1c:f6:be:0a:
84:6d:96:72:29:ef:fc:03:68:49:1b:9d:a3:e0:cf:
9f:0f:26:07:5e:b1:1b:1d:fe:9b:b8:5f:7d:2c:a0:
dc:cb:4b:ce:cd:09:e9:fb:57:20:f1:0d:04:e0:c8:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6D:A9:83:E3:E2:4F:18:4A:80:5C:AD:43:31:A3:92:9D:35:CD:57
X509v3 Authority Key Identifier:
keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:54:e2:ad:33:12:19:75:6b:64:cd:7c:59:80:6c:de:d3:0c:
a1:77:89:fd:7b:a1:af:fe:b4:bd:fd:ee:1f:c7:19:02:f6:f9:
0f:a6:5b:75:e8:88:a1:5f:38:7d:b6:28:28:f7:7c:7f:d4:6a:
94:e9:23:74:70:0a:59:f5:d1:b2:2f:dd:ef:12:b0:bc:7b:93:
3d:3b:f4:b5:dc:c6:b1:53:a8:97:41:2f:9c:98:b3:5a:29:33:
9c:43:63:1b:ee:7a:36:db:7f:a9:0a:f6:0e:11:06:94:38:5d:
25:53:00:a2:56:75:12:e9:13:66:b8:98:aa:ee:ad:c8:78:bc:
dc:16:b2:eb:b9:fd:09:6a:7e:0f:de:63:8d:a5:f5:84:df:1f:
27:6d:6f:e4:60:0b:2b:4f:c9:6d:8e:f4:c3:27:a1:31:13:2f:
a5:0b:fa:90:5a:13:ee:00:b8:da:62:b9:3b:35:6e:ca:b1:24:
a2:e0:c5:2f:93:78:87:2d:ee:73:15:1a:1b:51:83:6d:c6:22:
f9:96:af:16:67:2c:eb:75:17:b1:ce:d5:51:79:5d:52:78:da:
65:1b:d9:b2:9c:d1:a4:00:67:8f:f0:38:f0:f2:9d:82:43:2d:
fc:eb:40:c3:92:67:eb:2e:ad:9f:ea:ed:0f:ab:26:b0:e1:26:
81:7f:17:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:17 2026 by rpki-client