This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
File: _U2MY5rcFYR8e0kRFZ3nG9gTk64.mft (raw, json)
Hash identifier: Fqr15jpho5nH9IU1xDIbE4KFZJhMfPTcaMj9o5XYuAY=
Subject key identifier: B4:C1:7F:B0:CD:CA:55:FD:51:02:7D:D8:28:62:AC:27:54:3A:B6:C3
Authority key identifier: FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE
Certificate issuer: /CN=A9152462/serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE
Certificate serial: 088B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
Manifest number: 0885
Signing time: Sat 24 Jan 2026 19:58:15 +0000
Manifest this update: Sat 24 Jan 2026 19:58:15 +0000
Manifest next update: Sat 31 Jan 2026 19:58:15 +0000
Files and hashes: 1: _U2MY5rcFYR8e0kRFZ3nG9gTk64.crl (hash: K0V6oww/ODbSFFQa1dR4a0oVjjAVFsqzjBqZdGIv5CU=)
2: 4149D206DC4711EA80D5D916C4F9AE02.roa (hash: fmTA3xXjU3MtioARHLhk0XmrYZWzaoGTX30tUFAbkPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl
rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:58:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2187 (0x88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152462, serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE
Validity
Not Before: Jan 24 19:58:15 2026 GMT
Not After : Jan 31 19:58:15 2026 GMT
Subject: CN=69752457-96c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:27:cc:a9:6f:db:12:50:76:18:48:25:ef:
48:3b:67:31:59:e1:ae:b4:7f:69:77:1f:a9:63:c4:
98:1b:1f:ce:42:07:31:2a:27:50:9a:d7:51:3e:4e:
64:65:6b:b0:ec:15:c5:b7:f9:e0:48:f6:bb:b7:80:
73:cd:81:03:66:40:d9:0d:13:2c:02:e1:19:40:5c:
df:b5:00:40:1a:3d:a2:aa:3a:a3:1e:73:6b:50:3d:
ea:7e:d4:95:2e:62:50:c3:e8:c9:16:23:c6:64:be:
93:27:7f:de:11:d2:fe:d5:c6:1e:3a:f9:e8:83:8e:
b4:23:b1:53:94:7d:7f:b6:fa:f0:bf:74:88:b6:65:
3c:8c:d0:73:ec:42:21:17:f9:a4:9b:9c:1d:e0:61:
bc:a0:ed:c2:2c:7b:da:84:2b:97:75:1b:5b:fe:ef:
29:c6:4d:6e:64:48:24:45:ab:05:59:bb:c3:be:11:
b3:e1:90:ff:4d:88:e1:f5:4b:62:e2:56:a2:cb:d7:
6a:6a:db:97:53:2e:52:ac:12:8f:ee:5e:47:b3:94:
6c:6c:c2:cc:9f:14:8a:58:58:42:9b:31:a7:5a:01:
1e:68:19:d1:8f:76:80:7d:8f:f3:2a:6d:fc:99:39:
f4:73:3a:58:95:5a:b3:9b:48:0a:53:8a:dd:79:14:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C1:7F:B0:CD:CA:55:FD:51:02:7D:D8:28:62:AC:27:54:3A:B6:C3
X509v3 Authority Key Identifier:
keyid:FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:a5:76:e7:68:ef:50:6f:45:b1:33:6b:64:2d:ff:e4:3b:f2:
63:40:be:8f:df:66:db:d7:fe:de:3c:d6:be:c5:cc:0c:41:3f:
99:5f:2a:58:44:58:da:00:e7:8c:7c:5d:fe:b4:dd:a9:a7:9e:
f7:d5:43:ea:b0:b9:43:38:3c:f6:bc:72:b3:d6:8d:68:ef:b1:
93:21:8a:1b:30:60:e6:97:41:25:43:5d:8e:76:ff:ed:27:2b:
3a:ca:34:d3:e2:78:22:8e:ff:00:7f:07:37:65:0b:a7:c7:bd:
da:b2:28:62:8c:de:e1:32:d5:4d:a7:8b:f1:09:9a:c1:1e:f7:
be:6b:53:99:92:f9:ec:ec:4a:7b:63:92:2c:e5:68:47:0c:5b:
53:ec:49:3b:70:6d:64:d4:d7:bb:c1:50:0c:9c:ce:54:a4:7a:
10:27:1b:26:de:c0:ee:7e:0c:a8:10:49:8f:b4:bc:f1:11:ef:
dc:f6:ab:4d:da:16:a0:e6:db:c3:fd:f4:a1:a5:7d:7c:43:a9:
50:9f:14:89:7d:27:ec:29:47:09:50:06:d3:23:71:8e:4b:39:
ca:29:46:ba:a6:06:b5:e3:95:69:73:0d:9c:ac:47:14:9c:63:
31:22:00:b8:1d:4d:16:1f:7c:cb:22:bc:6d:39:2b:d1:76:43:
aa:09:70:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:41:07 2026 by rpki-client