This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json)
Hash identifier: u53WesKvRySmMH5idgDmCr+YTuBym6Pjjkc0CDJ6btA=
Subject key identifier: 73:5A:43:26:B2:40:B9:43:0A:A0:71:F8:C7:2F:1D:A8:10:4D:FA:B7
Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57
Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
Certificate serial: 032E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
Manifest number: 032A
Signing time: Sun 25 Jan 2026 00:14:10 +0000
Manifest this update: Sun 25 Jan 2026 00:14:09 +0000
Manifest next update: Sun 01 Feb 2026 00:14:09 +0000
Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: hRVnQNM4wsKWz00exufqIREt/Eah7ZakFNj+Uf5OOyY=)
2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: t6gPHMURjmA0yTxJeNB9SOwe/egrKymREeoN93WnBuU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl
rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 814 (0x32e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
Validity
Not Before: Jan 25 00:14:09 2026 GMT
Not After : Feb 1 00:14:09 2026 GMT
Subject: CN=69756051-d47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:14:55:25:87:be:32:39:83:7e:30:a5:65:
c3:1d:6b:29:96:a7:30:34:3a:af:92:52:78:0f:14:
df:13:91:d3:a9:11:b8:6c:e7:26:33:46:a8:6d:39:
65:3b:27:47:ea:50:a2:c0:9f:7c:49:7e:dc:eb:fa:
95:fc:27:81:a1:56:7c:31:ec:b4:3e:fb:ef:77:a8:
49:58:7f:c3:40:ba:00:86:18:90:c0:e9:2e:be:7e:
35:e2:55:31:08:15:64:6e:f6:af:03:9c:e7:f5:5a:
31:32:89:8c:bc:8c:cd:c3:94:ab:e3:fc:6c:18:b2:
22:bb:6b:cd:44:54:d3:9a:af:8d:22:d5:85:c9:5b:
7e:b8:12:d3:6e:94:fa:81:a7:14:4e:39:5a:cd:b5:
fd:a5:9b:60:e7:51:b0:a7:f1:b1:f1:b7:2a:e9:8c:
3e:63:1b:7e:f2:4b:b5:65:d2:06:b2:c1:d3:39:79:
45:86:64:05:07:a0:68:43:26:be:2d:9c:12:27:c8:
05:e2:54:a9:28:72:8b:74:af:da:0f:b3:7e:5b:1b:
18:90:0e:a0:4f:f5:be:55:64:13:a2:56:0e:73:ac:
a5:95:df:f6:77:52:a9:6c:7b:c2:1f:e6:19:82:ae:
f3:f0:0d:23:0a:41:03:7c:04:12:f9:d9:a5:48:63:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5A:43:26:B2:40:B9:43:0A:A0:71:F8:C7:2F:1D:A8:10:4D:FA:B7
X509v3 Authority Key Identifier:
keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:3b:ec:bd:d7:54:5b:97:5e:ba:df:2b:2e:5d:6f:29:3f:c0:
bc:93:c5:8a:74:4e:e5:5b:4d:cb:06:4d:de:7e:34:58:41:87:
37:0f:30:4b:ba:2e:8f:4e:4d:3f:32:dc:fd:7a:92:99:5f:67:
5d:17:59:6d:fb:7a:47:c3:9d:8c:a9:8b:fa:29:69:c1:cc:c5:
70:e8:30:17:31:0d:d0:b6:29:ba:3f:1c:9a:06:80:14:e4:3d:
f0:f6:72:62:7c:f9:88:fe:71:ee:ad:5a:54:69:e4:94:4d:9d:
d8:ee:d7:74:58:00:d7:3a:f1:01:12:63:f3:ce:57:b3:81:76:
62:f2:90:d8:ad:52:48:47:ef:e3:fc:4f:da:be:f9:f6:4c:20:
2a:ef:78:38:a0:e2:12:dd:97:c1:9c:40:99:2b:fa:3b:50:aa:
eb:bd:bd:9b:5a:65:9c:98:93:f0:5f:e1:3e:40:a4:9b:fb:b6:
db:a6:f6:c2:c8:06:77:5a:96:76:88:bb:6d:d9:7a:d7:a5:e7:
4c:6a:39:87:39:79:51:d6:01:96:30:db:57:b0:22:d3:5f:30:
5c:fa:d9:f9:61:5e:f9:cb:69:be:3d:41:19:c0:2c:95:bc:df:
d6:43:bc:1b:88:1c:83:d5:7a:16:71:3e:2a:cd:ec:41:18:32:
02:38:bf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:23:30 2026 by rpki-client