This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
File: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json)
Hash identifier: K99Z/HG6Y/CmfM6HaeO6Em7y+k8qZrwkxXBvKcIZgZg=
Subject key identifier: E3:2F:68:0D:D1:C3:B1:4F:FB:F6:8D:3E:69:1B:25:AE:F7:4E:2D:52
Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
Manifest number: D0
Signing time: Sun 25 Jan 2026 04:57:49 +0000
Manifest this update: Sun 25 Jan 2026 04:57:48 +0000
Manifest next update: Sun 01 Feb 2026 04:57:48 +0000
Files and hashes: 1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: rF/eOgrYP6pIgZGzYz5/w3ZGvxqmFnZkpmBsy3UphFo=)
2: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: F2TN6kUJp2zCGS7Pi3gV30XU9jGgecUfxw0pY7QFhrE=)
3: 4965C7C02E4411F0B187B122C4F9AE02.roa (hash: +o5vQsGGuh+AuqjpxPstrIQPz4sTNRp2Q1dDlOqDFfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Validity
Not Before: Jan 25 04:57:48 2026 GMT
Not After : Feb 1 04:57:48 2026 GMT
Subject: CN=6975a2cd-4d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:4a:de:c3:79:26:51:66:0e:16:89:f0:d3:
be:dd:67:d3:b9:fe:b0:fb:88:94:55:c4:4b:37:48:
4d:c8:e5:f7:ae:42:80:c9:11:11:05:5d:a5:3f:f6:
99:01:a7:9a:77:ce:1c:76:b3:d2:74:91:7e:22:d9:
d7:fe:bb:3e:0c:53:bc:2a:4f:76:c9:fa:cc:0a:9f:
92:a7:e8:98:5a:7b:0e:f5:ac:62:1b:4b:e1:1b:91:
06:9e:86:7f:65:6b:f4:d0:51:45:c5:06:6a:4c:29:
28:7c:1d:f4:18:08:6c:a8:bc:04:67:79:f4:4e:cb:
43:aa:40:5a:2f:f1:3a:dc:5b:9c:ef:b4:1d:e5:9d:
13:e2:97:ce:d6:ea:e9:8c:0a:44:fb:e4:e4:da:d2:
00:25:68:6c:68:bd:45:2e:29:a0:ae:17:ea:b0:7b:
18:61:af:47:12:86:67:3d:60:fb:4c:ad:d4:bb:ee:
d6:38:35:3c:63:29:ec:64:99:8d:de:65:b7:26:c8:
59:f2:55:40:f4:15:c8:0d:1c:23:bb:2f:9a:02:23:
b4:f1:cb:0a:9a:88:ba:0e:da:c7:19:92:7c:7a:7c:
36:b6:fa:7b:43:93:cb:94:1a:e0:5a:9e:90:4e:9a:
30:ee:de:8a:eb:20:1c:32:c4:81:ed:b5:99:f8:47:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2F:68:0D:D1:C3:B1:4F:FB:F6:8D:3E:69:1B:25:AE:F7:4E:2D:52
X509v3 Authority Key Identifier:
keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:e8:4e:1d:7d:bd:26:f6:27:34:f5:f5:48:b9:0a:85:df:e4:
33:44:a8:62:cb:62:97:91:1c:c0:77:eb:eb:61:a2:90:a9:b2:
40:09:5d:cc:a7:1e:52:54:3f:68:41:61:a5:a8:53:6e:9e:8e:
60:2f:c6:dc:a0:87:f4:5d:5b:9c:a5:6f:10:9c:35:ea:fc:20:
7b:2a:b5:12:d9:18:84:22:8c:5e:f2:bc:05:45:9a:95:b3:20:
bf:91:68:e0:3f:55:8c:95:83:d1:f8:7c:76:44:e8:d6:f5:05:
9f:f0:02:0d:13:c3:0b:68:4d:f7:61:44:4e:5d:8c:32:7b:d2:
f7:93:5f:d3:45:5d:84:1c:3d:53:0a:63:17:aa:a3:be:df:82:
5f:2c:f4:f1:e3:80:ee:23:4a:a7:a2:c3:5b:1d:48:0d:1c:56:
1a:c6:f3:9f:c5:49:a9:aa:c1:0d:9e:d5:c1:f3:51:ad:02:59:
88:ac:2e:7c:c9:23:82:cc:a5:f5:48:55:96:6e:c4:d6:3b:c6:
9e:11:ab:fc:4d:2b:02:ff:c2:cb:7d:c1:70:2d:de:35:1f:a6:
e8:60:c8:f0:66:62:f1:8c:ac:0b:0a:83:7e:c2:4b:2a:46:b0:
52:d7:37:45:3e:8e:2b:36:d9:94:b1:72:4b:77:8a:a2:0b:58:
eb:e0:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:33:36 2026 by rpki-client