This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
File: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft (raw, json)
Hash identifier: vwSgMq+GkFleruNdlQbqAo8NJEfM9W+r7LQOOvds9Ww=
Subject key identifier: CA:02:42:C7:B4:C7:4B:5D:0E:8F:24:17:C8:36:71:A7:B8:C7:0B:CB
Authority key identifier: DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6
Certificate issuer: /CN=A914BE8E/serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
Manifest number: 18
Signing time: Fri 23 Jan 2026 07:01:35 +0000
Manifest this update: Fri 23 Jan 2026 07:01:34 +0000
Manifest next update: Fri 30 Jan 2026 07:01:34 +0000
Files and hashes: 1: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl (hash: d2+f7hZvXZDsVlSLy+ekZ1wSGT9C+DoGX5RE2GFsc4M=)
2: 0FE42DACE16811F0AD117D783A6F56BC.roa (hash: JsUVmDenlNRs0tfS9whRc7Jzv4Yo+z4hCHKowYgJ6Tk=)
3: 21EF23B2E16811F0AE4839883A6F56BC.roa (hash: IplB0gM9Uuw4HNboDvbREthelLfiR2zwPB1/OskSGfA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl
rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BE8E, serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6
Validity
Not Before: Jan 23 07:01:34 2026 GMT
Not After : Jan 30 07:01:34 2026 GMT
Subject: CN=69731ccf-dd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:a5:41:d8:ee:c5:9f:1e:5e:fe:5f:cd:37:
23:85:e5:af:42:76:f4:30:2d:3a:80:d5:28:f9:b0:
a9:6b:c6:06:02:95:40:7c:13:a7:1b:e2:d7:cb:87:
3f:1d:07:04:6d:f0:0e:6d:27:5d:23:6f:1e:f6:a9:
ee:65:a4:53:6a:98:47:42:1f:0c:ce:d7:e6:6a:35:
e7:8d:f4:29:f5:2b:c5:cc:0a:a9:0e:e2:c9:75:45:
9a:f6:bc:0b:cc:0b:a3:92:56:6d:41:6b:89:55:82:
b2:14:9e:66:f1:60:63:04:90:fa:24:23:de:ce:73:
f1:27:be:bb:e9:2a:41:70:4d:43:77:d6:e3:fa:56:
cb:97:81:e3:d4:02:d8:28:40:bb:3d:6d:84:9b:79:
6b:8f:b7:ab:23:9e:0f:c2:79:65:2e:3a:bf:dd:d1:
8f:ad:31:bc:7d:f9:4b:b9:47:ab:36:a4:c6:45:87:
39:c1:21:7f:8e:2d:e0:de:61:c8:52:f3:7a:da:56:
83:ed:21:50:b6:6d:42:28:23:0a:cc:39:77:7f:f9:
88:51:4b:d3:f3:d4:09:47:fa:36:27:cd:cc:0d:e7:
6e:eb:ef:8a:aa:ac:12:e3:a1:b3:ab:07:7b:a8:f0:
ee:7c:61:51:9b:ca:f2:a5:e7:d8:49:84:1e:a8:71:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:02:42:C7:B4:C7:4B:5D:0E:8F:24:17:C8:36:71:A7:B8:C7:0B:CB
X509v3 Authority Key Identifier:
keyid:DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:ed:c8:cb:d1:07:f1:2e:3f:48:7f:87:0a:65:d7:e5:c4:f8:
87:15:d4:08:ba:54:8f:66:f5:4b:a0:35:31:bf:8d:33:f7:d3:
1b:48:ca:d7:bc:43:68:65:0a:fa:5a:d7:6e:f1:97:30:34:54:
6e:c6:34:48:6e:10:e7:c9:fb:27:c1:28:e3:34:3c:d2:f1:da:
83:6c:b1:7e:18:cf:71:9c:62:3a:22:86:11:1e:ad:cd:6f:94:
4e:f3:df:7c:bc:60:05:d5:47:e5:f4:cc:73:67:2d:71:19:cd:
30:f7:b9:10:15:66:c7:3d:1d:5a:1a:a9:8e:9e:e5:1b:b3:a5:
f8:10:43:1e:2f:d9:35:42:a3:ae:b3:52:1f:11:25:24:e2:1a:
c1:3d:1f:a9:07:71:76:33:ff:cb:6c:a3:2e:1d:57:c2:bf:87:
d5:3e:9a:b6:2c:72:f6:4d:57:00:b6:7f:65:bf:04:bb:d8:06:
db:33:49:6c:8a:f4:3b:c9:3b:47:e8:2d:cd:ca:6a:17:12:55:
d3:c0:43:ea:86:75:b6:ce:a1:39:30:06:bd:0d:d1:db:05:66:
3b:f6:d0:33:5e:c6:39:5e:3d:1b:c9:72:15:b6:a6:d6:81:93:
09:b9:d9:a9:7b:12:40:77:3a:db:71:ad:f7:0c:10:29:e3:ae:
38:45:a7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:56:06 2026 by rpki-client