This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
File: ez9g2bGigAKgeHXKtYohRXBz4X8.mft (raw, json)
Hash identifier: GxdS+PqJp8wkthxxgUrD2cFFaC8UjSbTmPPLKNdGJcM=
Subject key identifier: 68:59:D1:76:DB:70:27:E9:B4:85:D1:04:2E:63:19:C9:A8:07:58:03
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial: 1708
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
Manifest number: 16C3
Signing time: Sat 24 Jan 2026 16:27:58 +0000
Manifest this update: Sat 24 Jan 2026 16:27:58 +0000
Manifest next update: Sat 31 Jan 2026 16:27:58 +0000
Files and hashes: 1: ez9g2bGigAKgeHXKtYohRXBz4X8.crl (hash: cs2IqMWlVGvXDQWUGjiqVvZSqr4f9D3NH8S+OABkUgQ=)
2: 1DCB662A3DF211EB81F4CE73C4F9AE02.roa (hash: kCg25FDQRQj+e3KU6R/BP0M2KGcBEvQ7uEDAyKmHOCg=)
3: 774A232A718011EEA0E7EF5EC4F9AE02.roa (hash: QlcIbjq7jxCQ3SgyfdLUDXjmauzJiitADg/TiWQLByw=)
4: EE2F10889B4911EFBBAB9381C4F9AE02.roa (hash: tGyvJQ+VHA7B7G1gS3LwI/GSq7MJrx8JwpdoWLxQjws=)
5: 2CF180F0809511EFB8A82822C4F9AE02.roa (hash: HLuyZRv6VF6qFq88g7pPhaPeJ2Pt9n+iaV4TOkNRhbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:27:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5896 (0x1708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Validity
Not Before: Jan 24 16:27:58 2026 GMT
Not After : Jan 31 16:27:58 2026 GMT
Subject: CN=6974f30e-8f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:dc:f2:ef:14:a4:2b:a5:e6:45:39:95:17:
4f:1d:d5:24:09:07:cd:53:ea:9e:8e:eb:71:75:b6:
63:dc:46:4a:a1:44:66:15:05:42:3e:ed:84:f2:90:
f4:a0:c8:98:1a:af:02:ad:5b:df:d6:4f:50:37:1a:
b9:6d:5d:73:dd:66:7d:f2:45:a0:fa:79:b3:7a:a9:
77:61:dc:1a:47:7d:43:b1:79:88:48:fb:a3:0e:d2:
26:2a:52:dd:92:34:b6:2a:7c:f4:f8:b4:f2:ad:dc:
dd:e4:74:18:74:93:53:e0:12:09:47:1b:29:32:13:
8a:bf:7e:39:87:b9:8a:84:e1:6c:1b:ad:fc:ed:bf:
a4:73:b6:0f:1c:dc:1b:95:49:90:42:eb:ce:5a:f9:
b1:9a:e8:cb:89:50:76:ea:cd:49:d6:24:c4:7f:b9:
33:04:dc:1a:fc:34:e1:7a:16:4e:ca:57:bb:e5:5d:
b5:84:38:35:50:0e:d4:fe:2f:c6:a0:8a:42:f0:ff:
c8:fb:ef:c3:93:c6:7a:8a:8f:f3:9a:d3:cf:92:cf:
a5:b9:c2:43:39:6d:6c:cd:3b:99:39:7b:45:b1:28:
49:07:1e:b3:82:82:e9:44:58:aa:c5:b7:67:04:36:
44:03:a6:ca:86:3c:8b:c6:85:c6:74:59:fb:24:c0:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:59:D1:76:DB:70:27:E9:B4:85:D1:04:2E:63:19:C9:A8:07:58:03
X509v3 Authority Key Identifier:
keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:11:04:ef:3c:d6:b7:cb:8f:dd:7b:63:eb:07:22:c3:94:e0:
71:3f:a4:0b:73:6a:99:b4:bd:cd:58:b7:eb:6a:16:62:a0:c9:
9a:64:5a:11:a0:ca:03:84:38:ff:48:5f:65:0a:a6:bb:b8:d2:
25:e0:93:ca:0b:2b:47:8b:af:67:90:1b:90:78:26:6e:25:76:
05:72:1b:62:a7:a0:5e:cb:aa:59:c0:55:07:ce:be:1d:31:79:
13:db:11:90:d7:aa:54:23:a4:1f:bd:b9:30:5d:48:95:dd:78:
ef:65:35:c8:ae:db:c6:a4:60:6c:b4:03:98:f6:1a:5b:fa:89:
79:6f:c7:a4:53:ec:48:2c:ea:f5:ab:ee:4a:0c:be:30:81:e5:
ef:93:ae:f4:5b:bc:1c:9d:f2:3f:29:49:65:6b:f2:43:b4:04:
7c:6e:cc:c3:1e:e5:5a:86:5e:7c:99:0f:78:ab:19:20:98:6c:
2d:46:4b:b1:70:5e:db:08:62:1b:26:ad:64:3a:e4:51:70:6c:
43:b8:0f:39:ff:5b:8d:7f:8f:06:ef:30:71:bd:67:5a:d7:fe:
db:75:67:39:8d:4b:65:22:b9:31:8b:98:4e:f4:27:e3:e4:f3:
e2:17:fd:fa:91:c1:22:c1:fe:c0:2f:a7:f2:a4:86:6a:e3:6a:
2f:28:67:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:10 2026 by rpki-client