This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
File: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft (raw, json)
Hash identifier: jZIl+UZYlOWgYFN6bTb/eFD+ozN84Usl8dA7mIOWPfw=
Subject key identifier: FE:48:28:9F:CA:85:0F:36:E0:EF:21:DA:DC:6E:10:BF:95:3A:37:FE
Authority key identifier: D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0
Certificate issuer: /CN=A9146D06/serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0
Certificate serial: 3287
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
Manifest number: 3275
Signing time: Sat 24 Jan 2026 15:17:29 +0000
Manifest this update: Sat 24 Jan 2026 15:17:28 +0000
Manifest next update: Sat 31 Jan 2026 15:17:28 +0000
Files and hashes: 1: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl (hash: Fnl/eFIp+CchBagXxOWJT1NZmZYuQsOcl78HCVLWzLU=)
2: F1C9EE68B13B11E5B2D80087C4F9AE02.roa (hash: 1VVuRrqVVTtGHoXa2KKerRIHjhwmzovA9uhLiSgp/NQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl
rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12935 (0x3287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146D06, serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0
Validity
Not Before: Jan 24 15:17:28 2026 GMT
Not After : Jan 31 15:17:28 2026 GMT
Subject: CN=6974e289-f27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:9b:29:f8:62:6e:f6:93:46:72:21:18:08:
01:ff:1b:86:57:ad:f5:19:7b:88:5e:96:93:cc:cf:
71:55:3b:7a:b3:70:70:47:f5:b7:f8:9f:bb:78:85:
72:9d:94:72:d3:c4:5d:41:76:49:10:5b:87:77:f1:
32:d3:f9:e1:b1:48:70:cb:1b:cb:9f:eb:17:1c:79:
db:f2:24:20:a3:73:b5:c3:60:ad:b7:09:3e:6c:ae:
11:30:4c:03:ce:3c:d9:1d:9d:58:43:1e:11:c1:23:
85:e0:18:12:df:d8:f7:37:19:dd:76:db:a4:61:33:
61:01:5d:ae:3d:b0:21:70:72:16:a7:d1:c9:ae:44:
dd:d4:a1:1a:74:95:57:2d:3a:1d:79:bb:40:2c:11:
37:26:aa:e2:12:fa:4d:f1:81:45:de:bc:e6:73:0e:
cd:a2:69:5a:86:e8:06:23:b0:cc:4b:a7:5e:36:f0:
0d:47:b8:6d:1c:03:13:6e:13:9d:ee:ba:d8:ca:cf:
e9:30:e2:88:b3:d0:8a:b9:16:2f:12:11:20:83:2d:
62:b4:6a:ab:fe:d8:0e:ea:f0:2a:c7:4c:7d:51:f2:
e3:ff:91:1f:b1:30:14:46:f2:d0:b3:1c:22:0d:f9:
62:5a:aa:b1:58:23:e0:c5:33:d2:91:95:24:5e:80:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:48:28:9F:CA:85:0F:36:E0:EF:21:DA:DC:6E:10:BF:95:3A:37:FE
X509v3 Authority Key Identifier:
keyid:D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e9:11:52:81:f8:1d:5f:a4:7d:d8:9a:e4:f2:d2:95:e4:37:
13:97:61:4e:13:21:ed:fe:c0:6d:e0:d4:a9:f3:b6:bc:15:e4:
14:d7:f0:56:ef:8c:d4:ab:11:70:32:86:66:6a:0e:2d:46:09:
07:26:d9:c7:34:ed:0c:48:2e:be:1e:0a:35:8e:13:82:77:e0:
f7:c5:18:ac:b3:57:e3:ce:b3:8c:24:a2:eb:d1:07:e1:3b:d4:
b7:f8:fa:cd:57:66:b1:c6:9b:4a:2e:a9:e6:42:5d:71:ed:1c:
c0:69:36:1c:3b:88:7f:04:84:73:e4:ac:57:42:b7:4e:b8:94:
87:24:ad:a5:2e:bb:38:fd:5a:fd:b5:fb:4e:9c:08:00:47:55:
94:5d:98:22:8a:06:11:ab:4d:e1:f3:bb:5d:65:b0:53:b8:9e:
09:1f:14:c0:9f:63:ef:2b:fd:5c:90:1c:98:58:c2:3b:de:d2:
05:eb:31:ff:99:1d:5b:04:22:47:f7:7d:b1:70:74:38:05:53:
e6:4e:ef:11:c3:81:29:e3:43:73:5e:ea:08:38:f4:e8:29:d9:
e1:1b:84:ea:90:c6:50:3f:3e:26:44:47:03:48:30:f4:fd:f2:
c1:88:30:d9:38:9b:6b:70:13:57:43:f5:af:f8:09:d8:eb:7f:
ea:d0:60:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:36 2026 by rpki-client