This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json)
Hash identifier: 6/7GMA99goNcd9KqsHPryieEbr06yVIF2vRl69is8zk=
Subject key identifier: D8:41:D4:6B:19:E7:42:59:F7:58:E2:7A:75:8B:C6:20:AE:07:68:96
Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0
Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
Manifest number: 0125
Signing time: Sun 25 Jan 2026 03:54:15 +0000
Manifest this update: Sun 25 Jan 2026 03:54:15 +0000
Manifest next update: Sun 01 Feb 2026 03:54:15 +0000
Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: 4IS7Jg01fiQRi4SN7p0V/ABzLPgMh6RGX5T/ffzm49I=)
2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: Xtt+dRvGTSadJPsj0h+bYSdSHUpop3mgErELCN/AU2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl
rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0
Validity
Not Before: Jan 25 03:54:15 2026 GMT
Not After : Feb 1 03:54:15 2026 GMT
Subject: CN=697593e7-c783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:65:00:f9:4d:f8:6c:02:d4:fb:a8:ef:2b:
3b:51:5c:57:1b:15:c1:ae:c0:fa:a7:37:99:2e:fe:
1d:3e:e9:b2:d5:9f:f5:4a:21:a4:eb:5f:75:a4:4c:
cd:49:37:32:99:c6:73:b7:e7:72:fc:22:7a:ee:2c:
26:30:f4:1b:7c:00:c5:52:de:49:1c:e6:25:39:81:
21:73:47:54:0c:bb:9f:b9:31:f8:ee:3c:e2:86:d7:
b2:e1:fd:ff:9d:ec:85:f5:25:20:b4:48:6f:3a:87:
88:e9:5f:da:a0:94:11:0a:20:1a:30:e9:08:e0:8e:
ac:f6:6e:02:76:1f:09:0b:9f:f4:55:dd:5d:e2:ce:
4c:63:25:15:c8:7c:1a:48:12:45:a7:95:11:d4:d7:
c1:49:2e:04:46:9d:a7:81:21:3e:f9:21:cf:dc:0c:
27:ef:db:83:e3:25:ec:a7:cd:e0:c1:20:51:99:ee:
83:72:66:bc:4d:d1:42:f5:9b:95:26:0f:da:24:c3:
e0:47:b5:d3:8c:5e:b0:16:3d:15:7e:5e:ac:db:9a:
3c:84:cb:7a:f8:c9:10:ca:4a:ab:67:4b:97:ef:c3:
86:5b:a7:ef:92:8b:8f:71:c6:5f:ed:86:4a:6e:d8:
b8:50:bf:32:59:4d:00:51:03:02:08:16:4c:e5:ca:
83:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:41:D4:6B:19:E7:42:59:F7:58:E2:7A:75:8B:C6:20:AE:07:68:96
X509v3 Authority Key Identifier:
keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b8:e6:ea:48:24:ce:5b:d9:f9:6f:4f:c5:b3:7d:8f:c2:29:
68:6a:7e:07:34:8f:52:13:8e:81:b9:76:83:fc:ac:99:c3:9d:
22:98:2b:e0:b1:b7:28:1e:d7:5a:b5:f0:60:78:87:f9:0a:7c:
40:e1:9b:f7:46:16:00:a6:8d:d8:50:2d:cb:f3:36:0d:25:64:
aa:af:84:d7:b7:20:61:b8:62:f3:82:cf:5b:15:65:8e:c1:f9:
de:8e:04:28:f1:5d:59:37:6a:4e:c7:ad:44:e4:ad:cc:1a:5d:
ab:df:02:c3:68:06:6a:76:a5:2f:81:f2:e6:4e:2c:e4:d1:17:
85:1e:47:ac:12:41:22:b9:9b:44:e1:aa:cc:21:cd:71:65:ef:
97:85:57:cd:c1:6a:57:d4:29:28:fe:db:1b:d2:52:6e:a0:4e:
1a:0e:08:fb:01:ab:04:20:fd:d3:aa:0c:47:37:97:ae:45:89:
bd:59:21:bd:dc:c9:a0:c2:dd:c7:38:ca:70:21:b8:5a:83:ce:
0c:ed:24:5d:a3:cf:d5:c7:3e:35:bd:8e:47:40:6c:18:a0:d9:
64:e7:c6:a8:44:0c:7b:05:68:da:f8:8d:30:ce:a3:95:91:b5:
ad:0e:26:3b:c8:5e:a4:3c:a0:5e:be:97:b6:65:29:63:7e:6f:
93:39:08:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:44 2026 by rpki-client