This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json)
Hash identifier: LkiC3ypqVJd3Q9e+J1+lwJCOZ1JioVOSNtGvKVNVvOo=
Subject key identifier: E8:92:41:E3:76:2C:B6:91:84:6D:C5:99:0E:43:D8:A4:05:87:C5:94
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
Manifest number: 0172
Signing time: Sun 25 Jan 2026 03:10:13 +0000
Manifest this update: Sun 25 Jan 2026 03:10:12 +0000
Manifest next update: Sun 01 Feb 2026 03:10:12 +0000
Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: hj1IG1cEMHnTcKPbm5RAmilZEOsmpGQIjSMZnGYD13k=)
2: FE8D75048E9211F0B9F46F41C4F9AE02.roa (hash: /gOeld0CYxodUBPV3tKNNFujZlx0gVWxWCEj135eZpc=)
3: FDDFE12EC78C11EE911F1A30C4F9AE02.roa (hash: XDvJ7OAZIZH9Y1m5zAYI1aNVQygP0iZogi7EtsDf/ZM=)
4: FE1C0C348E9211F0B9F46F41C4F9AE02.roa (hash: iRQhqMAd0hRFEssmzS610D6wroDA71aDkWeK8ksNCRI=)
5: A18AC478AEC811F0892C5B26C4F9AE02.roa (hash: 6auHBhC1ONnsv07KBjxBsE+7f7XF8vJgLD19zPJdRCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Validity
Not Before: Jan 25 03:10:12 2026 GMT
Not After : Feb 1 03:10:12 2026 GMT
Subject: CN=69758995-e044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:66:8c:85:31:3a:b6:5d:6f:34:97:ab:31:
85:46:08:83:04:a9:11:0d:4f:d3:86:de:f2:1e:0f:
d0:51:53:c8:18:d5:91:ea:c6:2c:5a:4a:d2:2e:be:
8c:54:98:d5:a3:30:67:f9:06:96:5a:99:41:db:95:
b0:b1:b8:f9:64:6e:d8:51:9d:6a:8f:96:6b:d6:82:
ed:04:35:c1:a3:6d:1a:83:57:2f:18:16:44:02:73:
ee:65:43:8d:fe:c4:cb:c9:ce:71:02:23:7e:e1:57:
16:db:69:83:34:20:7a:d8:90:a9:03:4a:09:31:31:
e8:e0:b4:45:7d:a8:36:91:53:08:9f:eb:d0:70:a3:
42:fb:0b:7e:93:e8:ea:ba:ed:6f:a8:03:4e:d5:82:
69:39:2c:b2:82:c6:0d:26:3e:68:b4:29:bb:3a:ea:
59:2d:f9:dc:f8:2d:a6:a0:9e:13:bd:f9:f3:98:7b:
3a:f3:ef:19:d6:31:a7:04:eb:67:38:52:b8:f7:ef:
1d:4b:d8:78:d6:eb:8e:0c:c4:80:f5:23:1b:40:f7:
24:3a:ba:36:32:6e:8f:5c:dd:df:70:35:12:46:e3:
44:b4:2b:d8:94:76:6c:9a:42:b1:32:b5:70:98:15:
c3:d5:ed:6f:54:21:55:09:13:3f:fb:9e:29:97:17:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:41:E3:76:2C:B6:91:84:6D:C5:99:0E:43:D8:A4:05:87:C5:94
X509v3 Authority Key Identifier:
keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:eb:b9:7a:04:1f:f9:1f:65:9d:a2:6f:53:cc:ab:62:dd:e8:
fe:7e:77:b9:3b:87:09:35:56:41:70:59:7b:35:9d:4d:e9:c1:
17:3b:54:3b:de:a4:64:2f:04:5f:9a:b8:c1:92:95:6a:e8:54:
2a:35:91:f0:cf:ed:ac:ce:3c:f8:c0:ad:ba:86:8b:21:f3:20:
6c:83:e9:73:6c:6c:67:a9:1a:ad:c4:4e:24:68:48:89:8d:14:
d5:f6:40:80:ed:c3:b7:75:dc:2b:50:5b:3a:ff:b2:f7:0c:50:
00:1e:a4:b4:45:58:3f:61:77:e6:fd:8a:c0:56:61:86:12:0d:
f1:d3:50:52:ec:d4:a4:a2:9c:60:90:21:90:9d:f3:85:fd:d0:
77:a3:4f:58:e2:35:91:b2:32:67:6a:36:6a:ba:e0:1f:bf:f2:
86:78:54:99:68:b1:f1:c0:eb:44:a6:fa:10:78:a5:ae:79:8a:
57:9a:b9:d4:31:0b:46:49:4a:af:2a:c5:03:57:ef:d5:a8:c5:
03:cb:fa:5d:7c:23:72:9c:cd:df:d1:b5:58:4e:af:2a:74:10:
38:ce:ea:41:a2:78:77:ca:f6:27:f7:2c:be:70:a2:12:6b:23:
b3:ec:70:f3:f3:a7:b0:a0:fe:d8:b2:3a:87:10:3a:13:63:99:
e5:86:ed:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:08:07 2026 by rpki-client