This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
File: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft (raw, json)
Hash identifier: OdVyWsuHdkZfyo2Qty7USqRsr0qvNRjEapBfW+kS5fc=
Subject key identifier: 1E:63:42:14:02:60:5A:63:78:C5:C4:55:87:0B:97:37:04:FC:7C:2E
Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20
Certificate issuer: /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20
Certificate serial: 0239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
Manifest number: 022D
Signing time: Sun 25 Jan 2026 01:23:24 +0000
Manifest this update: Sun 25 Jan 2026 01:23:24 +0000
Manifest next update: Sun 01 Feb 2026 01:23:24 +0000
Files and hashes: 1: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl (hash: OsS4iGG73cLw+DOVUU1ZKRRyFpEn/VcaMLyJ1OK8YKE=)
2: 98152E6C480111EFB2976238C4F9AE02.roa (hash: p8fvqZ7Alg5roEiASszoiJIP01rninX1g3Jc6iC5JJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl
rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91525A9, serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20
Validity
Not Before: Jan 25 01:23:24 2026 GMT
Not After : Feb 1 01:23:24 2026 GMT
Subject: CN=6975708c-dcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:64:b8:3f:6f:21:6a:06:0d:3c:ae:dc:3f:
b6:d3:05:b7:de:7f:be:ad:f7:da:cd:a9:e4:0c:ba:
1b:2d:b8:2c:c3:2f:7c:9e:ba:f1:ff:0e:20:1c:85:
d0:62:b9:ac:1f:3c:a5:13:cb:36:a4:e0:ee:76:bf:
76:c7:96:22:a1:82:c1:0d:77:2c:8e:a9:56:64:a7:
96:ce:1a:bf:e8:cd:98:ab:a8:b4:93:ae:21:da:f4:
6b:13:89:6f:b0:93:71:22:35:1e:e0:f7:76:32:47:
fb:8c:95:a6:a9:3a:3f:a6:df:1e:b5:21:68:6d:55:
58:ba:61:c1:c6:1c:12:45:40:38:4f:59:6d:c9:83:
27:0a:ac:9b:e1:1d:79:3f:5e:59:62:ac:a0:0a:9d:
4a:75:d5:76:87:4a:ea:ba:ae:0a:ff:0b:ff:93:82:
4c:ed:54:e4:45:70:7e:f2:8f:a6:c6:15:fc:ef:53:
1c:bb:23:28:d7:1c:91:ed:b4:4a:c4:39:c5:3f:c6:
a1:63:ef:5c:51:8d:5f:7a:14:65:c3:c7:a4:93:95:
59:57:63:d6:72:db:b9:51:91:0d:dd:1c:8b:17:fb:
18:29:cb:25:ae:e4:e8:d0:08:6e:9b:bd:98:d9:4a:
78:fa:d7:fe:eb:49:b6:2c:ce:7f:71:79:55:d3:43:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:63:42:14:02:60:5A:63:78:C5:C4:55:87:0B:97:37:04:FC:7C:2E
X509v3 Authority Key Identifier:
keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b6:ca:16:2b:e2:34:af:5a:a8:e0:a5:60:c9:9a:97:bd:20:
01:fb:47:20:9f:c9:b7:5f:82:87:3c:69:00:76:4a:4b:46:ff:
4b:2d:2e:19:18:e3:de:6f:00:96:71:7f:5d:46:c7:f2:ff:b7:
40:a5:ab:e6:83:07:df:cd:13:e5:06:fe:5b:89:e6:ce:7a:ea:
3d:4a:4d:6f:13:e1:0d:08:3d:ce:5b:8d:84:76:7f:ae:40:c6:
a5:a3:82:a4:14:8e:a5:ec:94:13:6a:13:bb:31:fb:7e:eb:3e:
1a:d2:6f:6e:c1:b8:15:8e:0b:8a:ac:20:9c:87:1e:ac:1e:08:
66:b9:b2:c4:73:74:f9:a5:55:06:e4:8b:e8:bf:e4:f3:24:b8:
4d:f4:30:09:15:15:1e:18:4f:46:f8:53:36:c5:8b:5d:88:23:
a4:93:ad:12:42:d2:ed:46:46:e1:f0:30:80:ed:7b:f6:53:e9:
fe:2f:b3:81:6a:f5:b9:12:95:a7:72:e7:49:4d:2b:1f:83:07:
73:21:ee:b0:34:4a:4a:ee:27:57:56:c9:8b:81:6b:9a:9c:f4:
87:b4:47:10:4a:01:da:bb:50:b4:94:06:83:b9:f9:2d:e5:5c:
0a:62:a9:2b:f1:d3:29:5f:c0:02:93:4e:c9:42:d2:1a:20:01:
00:b7:8a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:39:36 2026 by rpki-client