This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
File: PPkWCCJoGcPp2oTRGVtTJvkkn70.mft (raw, json)
Hash identifier: 7Ky5yQRp/kcMXUmlFOzY6+v0aPTr0vVX/+sMcI1bhOg=
Subject key identifier: 1C:01:64:9F:D3:AA:6C:2C:68:4F:EC:B2:89:E7:43:65:04:4F:BC:AA
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial: 0337
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
Manifest number: 031D
Signing time: Sun 25 Jan 2026 00:21:40 +0000
Manifest this update: Sun 25 Jan 2026 00:21:40 +0000
Manifest next update: Sun 01 Feb 2026 00:21:40 +0000
Files and hashes: 1: PPkWCCJoGcPp2oTRGVtTJvkkn70.crl (hash: H3N+wtEPO/YvD3PfKlQJR0z3i7C8cDbTD3GpWEDQYBw=)
2: 76494F6E146111ED83A8FB50C4F9AE02.roa (hash: qyVadK6PowhxT5dTxZ86nSTovFJ2RAqG5nfVtu7+2Bg=)
3: E8343A14280A11ED80EB7F2FC4F9AE02.roa (hash: HdD/+ld1Uf50ShMo2E2ANBSVseJYDOqUpaCHNPJZLUs=)
4: 807EEE68281011ED9C81C50DC4F9AE02.roa (hash: jD7jiIEoA0zrb6YHgdu7nodN7r96+edv/r/epjKwp04=)
5: 873C98E0DE5911ED826BDB39C4F9AE02.roa (hash: 499SL3b2qo6tqtvUtTvrd1ycmIPTXzG0Kk7YhvDP3Mk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 823 (0x337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Validity
Not Before: Jan 25 00:21:40 2026 GMT
Not After : Feb 1 00:21:40 2026 GMT
Subject: CN=69756214-7d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:2e:7d:5c:4b:d0:d9:71:33:b7:5d:c3:29:
b9:43:bb:9d:4c:98:e7:9d:43:ca:a1:ba:fa:4c:ee:
b2:ba:0a:e8:fa:ca:6b:10:7f:9e:76:0d:5f:c9:9e:
b8:38:f0:02:38:9a:f8:3e:c3:28:ea:72:fa:e9:6c:
31:42:c8:ae:49:fb:da:86:9e:3a:c3:44:e0:46:d9:
3f:57:50:07:0c:3a:1a:38:8c:c9:28:4f:6f:1e:a4:
2f:30:c0:8b:a1:d2:e6:8d:c2:73:59:aa:b4:39:59:
b9:2c:43:23:cc:57:68:e0:a0:45:c7:13:e5:d2:4e:
a9:28:5f:80:0c:ac:08:42:4a:e9:30:7e:ec:91:9a:
f5:5e:fb:85:b2:32:5e:0b:1e:20:29:9e:3a:80:e2:
0a:b8:e8:77:97:52:b4:43:c9:93:ce:0c:78:58:25:
0b:ea:2d:5f:d1:98:dc:04:07:4f:de:d5:dd:53:d9:
40:41:eb:d7:41:5f:3b:6b:00:b7:30:21:b2:21:60:
16:c9:c9:72:23:39:9a:fc:77:3d:49:07:df:8c:55:
b4:95:3a:99:d8:a3:5e:2e:9a:46:48:2d:df:63:c2:
a0:e1:3f:79:0a:95:03:55:46:38:42:e7:bb:5d:f5:
78:cb:77:f9:a9:2f:ec:cc:fc:52:78:3e:28:cd:0f:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:01:64:9F:D3:AA:6C:2C:68:4F:EC:B2:89:E7:43:65:04:4F:BC:AA
X509v3 Authority Key Identifier:
keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:ed:6d:d4:56:ba:11:f9:70:75:db:96:17:a3:80:83:13:14:
13:23:d8:90:c4:05:96:01:5d:4c:c9:b7:07:fa:90:0c:48:18:
25:5d:6c:e2:2f:7d:15:48:9a:55:56:8c:be:e0:36:08:97:22:
db:4f:16:cc:b5:e8:81:a7:79:0d:6f:61:20:0d:b0:61:f8:51:
e8:01:fb:f8:e1:88:7e:1c:7f:d0:08:b4:3f:ce:6a:ec:2b:b8:
2f:7d:41:9b:43:cc:63:99:06:d9:cd:72:ff:c5:7e:f4:34:f8:
e4:59:f4:2c:b3:41:1a:a3:3f:e6:56:0c:e7:5b:fe:09:f3:45:
8d:f3:dc:7a:a4:4c:50:84:ab:1a:8d:7a:83:c9:b8:80:06:e2:
7f:50:2f:84:20:e7:ba:7a:9b:64:37:e1:10:ad:b9:01:a9:84:
04:4f:c8:e7:20:9d:0e:f6:76:2b:7d:56:bc:7c:e1:78:99:41:
f4:33:48:13:53:fc:93:cc:be:e9:f5:1b:96:29:8c:a2:91:c5:
59:3e:bf:e1:e8:ba:12:af:ba:ad:bb:0a:52:7a:6f:a2:d3:4d:
74:72:91:2a:70:c1:98:45:b6:5d:e1:22:bc:2f:a0:9a:04:db:
fe:13:4c:b9:d0:4c:39:79:b4:0e:3c:66:d1:cc:d6:79:69:2e:
f0:fc:23:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:01 2026 by rpki-client