This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json)
Hash identifier: YtTiy1bPpaaWxjqwR09PsaO7dlw/zBKfliWG9EbWrHM=
Subject key identifier: E5:33:D9:C2:5A:DA:B0:A7:83:35:EC:54:F2:6C:88:1E:77:A8:64:27
Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Certificate serial: 0143
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
Manifest number: 013F
Signing time: Fri 23 Jan 2026 03:27:27 +0000
Manifest this update: Fri 23 Jan 2026 03:27:27 +0000
Manifest next update: Fri 30 Jan 2026 03:27:27 +0000
Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: zsCpxX2P2j0MDg/qVq0O2eTZiQ1dRnBbKlnhvCg8pP8=)
2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: 0shOiN+rphbS4psadLxUtUMxwGG1iaWqhEHItCynnbw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 03:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Validity
Not Before: Jan 23 03:27:27 2026 GMT
Not After : Jan 30 03:27:27 2026 GMT
Subject: CN=6972ea9f-6947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:77:73:56:3c:55:d1:e4:49:58:da:ba:1a:
e6:79:3a:6c:8f:23:93:1a:1e:23:49:56:2c:ea:7d:
6c:7d:e8:dd:7b:9d:4a:e0:21:2e:e1:6a:de:7f:16:
3e:4d:7c:ad:24:2f:32:76:e2:5f:df:43:e3:fb:a7:
29:20:cf:de:55:c9:54:ce:a7:3a:0c:9e:ca:0a:b2:
9a:20:17:b8:68:80:70:15:a5:f2:90:cd:05:2d:79:
5b:60:5b:fc:a7:9c:cb:9b:f7:db:08:02:79:c7:8d:
47:8e:c7:06:19:34:31:a4:1c:33:0e:b5:77:a9:2c:
2a:13:8d:55:a2:b6:fe:63:f2:8b:f5:fd:cf:9b:2f:
9c:90:37:d9:03:2c:eb:03:98:5a:bb:d7:02:6f:6f:
0d:c7:88:f5:a9:9f:fd:67:f4:4f:37:1f:73:7c:e4:
2b:0c:cb:c1:21:80:da:3b:e3:44:92:69:3b:ea:fa:
4b:62:c9:00:aa:b9:a8:00:7a:c4:cd:4b:03:02:8f:
94:0b:00:08:1c:61:ce:84:c3:ef:9d:fd:fb:af:84:
3f:09:82:b3:f5:e9:58:bc:e7:9f:63:5c:f5:01:39:
60:35:eb:58:2d:5b:73:db:8e:1c:62:23:13:4e:d1:
05:18:66:00:16:ef:6e:7f:1e:95:4c:e8:d3:bd:44:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:33:D9:C2:5A:DA:B0:A7:83:35:EC:54:F2:6C:88:1E:77:A8:64:27
X509v3 Authority Key Identifier:
keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:7a:00:87:cb:2a:33:0e:29:25:85:77:29:25:4c:ad:2c:5d:
56:29:00:ce:ea:55:2c:3b:af:81:fd:26:b6:79:d4:09:a7:c2:
ce:9b:3f:e9:b3:9b:1a:00:f0:01:64:af:14:67:2b:82:fe:9f:
a8:de:dd:00:51:07:95:7e:44:6d:71:f5:53:11:b9:69:1f:43:
ef:e2:89:8f:76:5e:45:5a:e2:ec:29:9d:a4:7f:d2:20:fb:f5:
54:fa:72:71:b5:11:71:80:96:ef:67:e1:d6:12:d4:82:75:0d:
95:f9:42:96:b2:88:9f:b5:ae:8c:a9:f1:28:19:6e:71:cd:c7:
96:d2:05:19:78:e8:37:20:22:15:79:38:a9:6b:97:09:0b:a2:
4f:13:d4:ed:74:bc:e0:92:48:a3:90:08:ae:a3:32:28:ca:c6:
c7:3c:49:ff:dd:cb:93:a1:7e:84:6d:d8:d7:6a:9c:73:1b:d3:
51:b7:55:c5:de:ac:7e:47:4b:e5:34:3d:67:1b:a9:34:a6:dc:
eb:97:f1:8b:9c:73:46:82:48:87:0b:21:55:fc:ae:6b:76:23:
ed:60:85:12:3a:21:f9:49:b0:1b:e2:e7:87:a3:36:6e:1e:19:
0e:8b:53:27:37:b2:72:7d:f3:d4:59:2a:55:c2:fd:fb:a7:fb:
56:29:2b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:43 2026 by rpki-client