This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
File: 2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json)
Hash identifier: e7Gwp8Q0A4DXBtFXqr0/LPFMM4lHLE1Ck9imiTIcZU0=
Subject key identifier: 91:8D:F5:96:A8:04:D5:FC:9A:F3:29:45:AE:25:8B:93:3E:D0:0D:9B
Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE
Certificate issuer: /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
Certificate serial: 041B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
Manifest number: 0416
Signing time: Sat 24 Jan 2026 23:34:57 +0000
Manifest this update: Sat 24 Jan 2026 23:34:57 +0000
Manifest next update: Sat 31 Jan 2026 23:34:57 +0000
Files and hashes: 1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: aQ0qaEnpX/yWdKowGiKA24Xg6uu+iy+j2JMDIHTZ+i0=)
2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: 9cJ1X9p3KnoCJj9I/bBoQDkUW3YOKoAh40o4a5fDcJ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl
rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915429C, serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
Validity
Not Before: Jan 24 23:34:57 2026 GMT
Not After : Jan 31 23:34:57 2026 GMT
Subject: CN=69755721-2fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:70:ea:74:b3:37:24:45:f4:1b:28:cb:76:
99:0d:91:f9:5a:97:4a:2e:03:6e:c0:96:c7:81:fe:
a2:d4:95:e6:8b:a6:ec:9a:ba:dc:b3:25:98:b8:62:
37:cf:bb:25:b2:eb:8b:a0:7c:43:dd:e8:e1:e4:c5:
ba:e2:81:56:6d:ae:c3:ab:7a:9e:f7:dd:73:68:87:
d5:0a:01:84:2d:01:fe:06:b3:26:91:61:81:c6:51:
30:fd:63:17:df:5c:29:ad:0c:c3:64:a5:25:67:3c:
31:c1:38:84:bd:78:da:6a:6d:37:e2:e7:36:00:be:
36:d6:e9:c1:4d:7f:4e:4d:67:7e:b0:4c:af:19:ab:
19:13:b6:f7:e7:fb:f9:4e:55:4d:01:99:c4:95:61:
68:27:a5:29:00:87:a8:13:f6:7b:9e:c7:49:62:ca:
a9:8f:65:3c:2b:14:55:0c:d1:fd:dd:4b:85:ef:e4:
2d:fb:c5:f6:69:69:cb:db:7f:1e:59:9b:64:8c:89:
fe:7b:15:ad:8c:d6:7e:82:63:5b:19:7c:e9:eb:aa:
1b:2d:a7:2e:2c:ad:f5:3a:6e:e5:c1:fb:4e:aa:bc:
c3:eb:c1:c2:bf:2a:64:ae:ed:f0:8a:4f:cb:31:c2:
17:57:c9:81:69:73:d4:b6:5a:0a:64:71:1f:e8:f4:
fd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8D:F5:96:A8:04:D5:FC:9A:F3:29:45:AE:25:8B:93:3E:D0:0D:9B
X509v3 Authority Key Identifier:
keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:67:b8:27:fb:fb:4e:68:1f:58:0e:b4:9e:eb:83:15:28:da:
02:7c:06:fd:50:c5:a1:0f:bb:56:32:c6:80:31:23:40:fb:17:
54:7c:51:84:7a:42:a6:a4:54:86:29:90:96:19:80:12:bb:28:
cb:c6:50:ae:6b:6f:e5:0f:23:f4:76:0d:ba:98:e5:b9:04:ee:
c7:cf:96:cd:73:2c:58:83:57:bc:4e:f3:8d:d8:7c:05:d8:40:
ee:4a:b7:c6:6a:82:08:4b:ab:b2:75:5f:ca:32:95:d4:be:63:
7e:90:cf:19:69:0d:03:e9:4b:4b:bd:2f:2c:de:e9:68:ac:56:
69:d6:33:f8:9c:b6:ba:1d:0e:c2:5c:04:a9:43:86:77:93:ae:
fc:54:a8:71:ec:ca:0e:43:d5:04:e0:f0:27:93:0f:f0:d5:e1:
f8:cc:0a:c0:de:9f:35:a1:97:79:37:fe:61:fe:3d:79:d7:96:
c0:57:2c:65:6d:8c:52:71:2c:a4:7f:0c:1d:16:a1:50:13:a2:
86:7f:c3:af:18:eb:b0:94:fc:2b:91:8f:ba:4b:61:a6:59:d0:
9e:07:cb:ea:ed:fa:e1:35:80:9f:f9:5a:5f:b3:5c:f8:3f:fc:
ea:e1:95:86:1e:73:44:fe:e9:14:ce:38:ad:86:02:e8:34:fc:
4d:27:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:29 2026 by rpki-client