This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
File: SoXPE4hy0-RPkNe28wKPC1BnNMw.mft (raw, json)
Hash identifier: GB5Ywu7s5pMPYQ+xniGa/4NXDkJqDfh4UyDX80sIzQo=
Subject key identifier: 52:46:64:F0:C0:39:AA:EF:73:49:1D:2F:93:F1:3A:B0:C9:9D:CA:8B
Authority key identifier: 4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC
Certificate issuer: /CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC
Certificate serial: 045B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
Manifest number: 04CC
Signing time: Sat 24 Jan 2026 23:27:12 +0000
Manifest this update: Sat 24 Jan 2026 23:27:11 +0000
Manifest next update: Sat 31 Jan 2026 23:27:11 +0000
Files and hashes: 1: SoXPE4hy0-RPkNe28wKPC1BnNMw.crl (hash: TydaCLHKAFjI+5+vKettFLDaDcuPlyrM4eiBPm2k2iU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl
rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115 (0x45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0AF, serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC
Validity
Not Before: Jan 24 23:27:11 2026 GMT
Not After : Jan 31 23:27:11 2026 GMT
Subject: CN=69755550-aa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:7c:3b:e7:14:ad:a5:04:0a:ec:67:b9:51:
ac:2e:fc:99:22:8b:c7:5c:79:fe:53:4b:92:67:7d:
56:82:53:9d:d8:4a:5b:c2:cb:68:92:88:e5:c5:ff:
ed:a7:8e:24:ba:56:1c:d0:11:47:a0:f9:01:27:f1:
d3:bb:0f:54:8e:85:34:5a:27:84:38:e0:ba:93:54:
0d:44:d9:23:69:da:f9:f2:48:27:7e:a7:9a:4e:54:
45:97:ab:f7:80:a2:bf:46:2a:4f:81:b7:c2:74:0a:
24:a6:f6:64:2b:ab:5a:8f:20:17:97:d1:f4:b4:5a:
b4:0b:a6:3a:6a:54:4d:fa:9a:66:a8:30:b2:a5:56:
7a:31:62:6b:90:be:d9:33:9e:b6:e9:9c:a1:d0:69:
fe:ea:9d:77:f4:59:69:ee:ca:6f:9c:dc:34:d9:cb:
7f:7f:21:63:07:89:f4:26:c9:55:c4:69:33:2e:2b:
89:ff:6f:fe:e3:78:4e:64:02:86:e5:40:6f:64:27:
8a:06:34:95:a6:cc:16:f6:59:e1:49:67:b6:cc:05:
17:ec:ad:12:ca:50:4b:6e:43:0d:81:62:5b:3e:87:
37:e1:ff:63:11:ea:d3:ce:fd:e8:e4:96:a6:49:ef:
f2:04:20:3a:1e:dc:d6:b6:58:60:4c:df:dc:eb:b8:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:46:64:F0:C0:39:AA:EF:73:49:1D:2F:93:F1:3A:B0:C9:9D:CA:8B
X509v3 Authority Key Identifier:
keyid:4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:0c:c5:96:48:54:83:8b:90:31:b9:72:60:3f:8b:b9:ea:77:
bb:46:74:f5:93:f8:55:b6:4b:bd:cf:8b:d8:2c:bb:b5:10:18:
e7:3d:50:52:3b:75:48:fd:c7:c0:b5:ea:ef:b7:19:48:fc:35:
72:f7:fd:f6:8e:85:f9:0e:e3:8c:34:fc:92:ab:a3:f3:19:8d:
5e:69:3b:98:12:90:35:ba:af:a0:1d:9c:36:49:22:2e:b8:c5:
c6:6a:9d:ad:14:16:68:27:26:7c:82:7b:67:f5:46:d2:ff:75:
53:bc:cb:ff:f8:5b:c7:4a:b4:36:96:3d:c8:6a:59:df:e5:31:
ee:9e:96:7a:5e:ae:3f:9a:21:11:a8:50:2c:2e:61:91:7e:68:
ec:ee:bb:9e:5a:e5:69:2c:6f:25:a7:e9:59:56:9d:a5:9f:40:
76:b4:bf:77:28:5b:65:f8:e7:02:35:8f:23:8d:a0:32:6d:7a:
20:4d:b4:da:60:76:61:cc:b3:b4:b4:e9:2e:88:ce:4e:b0:81:
d1:18:29:5d:05:e5:8c:c8:68:de:fc:7f:94:d4:d1:29:e9:e3:
58:05:a5:dd:d4:61:99:57:8f:92:69:70:4b:cf:e6:0d:27:09:
fd:6c:08:7b:c2:a5:24:c8:6b:80:c3:77:88:a0:52:d2:4c:98:
59:20:da:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:32:43 2026 by rpki-client