This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json)
Hash identifier: F0DLMYmYIEbNLo1qxjoZrWDIKjRKBGJNN0IlGP7mEdc=
Subject key identifier: AB:4D:21:1A:22:7F:48:1C:24:AA:DE:23:9B:DE:53:BD:6F:5B:B7:4F
Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Certificate serial: 079A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
Manifest number: 078D
Signing time: Sat 24 Jan 2026 20:56:16 +0000
Manifest this update: Sat 24 Jan 2026 20:56:16 +0000
Manifest next update: Sat 31 Jan 2026 20:56:16 +0000
Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: oCJrTB2Ywcs2bbuSJNOuoOS5uSyqB1uvUuMdJp/aMc8=)
2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 2jsCymQavrx92Kq4v6h75mDYqdyK8XpnNBvpUzJpvhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Validity
Not Before: Jan 24 20:56:16 2026 GMT
Not After : Jan 31 20:56:16 2026 GMT
Subject: CN=697531f0-eb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:75:bb:63:ba:5e:ca:57:64:ce:7e:98:29:
5b:32:a2:8c:6f:38:39:79:ba:a4:a4:15:27:26:da:
46:97:b3:75:a5:96:a0:c4:90:af:2e:25:fd:9f:04:
66:26:23:e0:ed:90:28:83:d6:dc:c3:99:2d:20:21:
0f:c8:a2:d1:d6:60:04:b9:e0:08:2c:51:81:aa:c4:
24:5b:87:45:dd:06:13:fb:37:d2:b2:7d:eb:42:93:
f5:bc:da:71:a3:92:f4:f6:1c:39:41:c0:ea:f8:49:
b8:a4:6b:8b:0b:12:e0:0a:0d:50:bb:6c:19:4f:6b:
3a:50:e2:3e:06:68:e7:3b:f4:5b:c1:bb:c2:07:22:
8e:22:ae:3d:10:49:17:81:2b:1d:7a:87:8f:5f:91:
8e:2a:56:0d:92:9f:af:a3:f8:92:5c:d6:a2:15:d0:
d1:c3:c1:1b:3c:8d:de:d2:6a:75:26:9e:1e:95:12:
46:df:c9:63:44:14:ec:1f:d7:10:e8:0b:32:2e:2a:
2a:f6:53:43:06:3a:f3:67:eb:cf:a9:4b:c6:5e:42:
5f:6d:f4:71:20:69:fb:bd:45:61:d4:86:61:e1:63:
5c:7f:23:0c:4b:75:75:23:36:44:ff:f3:3c:37:2a:
a1:d4:5c:ae:06:af:8c:b0:67:33:11:c1:3c:98:4f:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4D:21:1A:22:7F:48:1C:24:AA:DE:23:9B:DE:53:BD:6F:5B:B7:4F
X509v3 Authority Key Identifier:
keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d0:23:67:d4:f3:53:eb:81:8f:4a:02:f0:1c:75:7b:b2:b2:
7c:13:65:3e:64:ea:42:46:b0:30:d8:ed:c6:86:ca:db:94:c4:
78:92:26:cb:1b:c5:e8:31:01:b8:ad:1d:5d:f6:e8:c0:e0:5e:
a1:57:25:82:7b:1f:a8:5f:bd:73:c5:78:b4:ab:3b:5d:e2:be:
3d:44:30:a7:80:ba:b2:eb:8f:65:5e:7e:b3:aa:72:1c:c4:0c:
22:9d:51:71:ac:d3:3b:57:b9:e7:95:f5:f1:e0:1b:3d:5c:89:
47:ab:0b:5b:81:5f:9d:c6:04:19:26:63:43:43:0e:70:b1:1e:
f0:0d:49:96:21:e5:85:41:b7:55:eb:46:78:c0:b7:6b:a1:eb:
4f:52:3d:3d:f5:00:32:c5:f7:9c:72:c1:06:68:34:eb:e2:81:
b4:a8:52:fc:1e:21:b2:c2:ea:20:78:ee:f4:ec:bb:05:c7:28:
ea:33:14:4c:f6:db:27:b7:2b:62:0b:60:2a:2d:35:af:0f:04:
da:b9:3f:a3:7f:bf:a5:23:03:d8:2f:d5:b8:3f:5c:0c:43:04:
d6:66:4f:fd:42:16:57:80:87:46:3d:f0:76:71:20:27:06:0d:
9c:ca:10:1e:1d:c2:25:d1:a8:4a:a0:43:6f:64:9f:91:78:ad:
03:38:64:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz
QUM5MTNGRTgwHhcNMjYwMTI0MjA1NjE2WhcNMjYwMTMxMjA1NjE2WjAYMRYwFAYD
VQQDDA02OTc1MzFmMC1lYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArKZ1u2O6XspXZM5+mClbMqKMbzg5ebqkpBUnJtpGl7N1pZagxJCvLiX9nwRm
JiPg7ZAog9bcw5ktICEPyKLR1mAEueAILFGBqsQkW4dF3QYT+zfSsn3rQpP1vNpx
o5L09hw5QcDq+Em4pGuLCxLgCg1Qu2wZT2s6UOI+BmjnO/RbwbvCByKOIq49EEkX
gSsdeoePX5GOKlYNkp+vo/iSXNaiFdDRw8EbPI3e0mp1Jp4elRJG38ljRBTsH9cQ
6AsyLioq9lNDBjrzZ+vPqUvGXkJfbfRxIGn7vUVh1IZh4WNcfyMMS3V1IzZE//M8
Nyqh1FyuBq+MsGczEcE8mE959QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtNIRoi
f0gcJKreI5veU71vW7dPMB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ
LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0Q2Ny82MDI4NjYzODQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZ
V0VZdWtIQ3h0UlU2eVJQLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+0CNn1PNT64GPSgLwHHV7srJ8E2U+ZOpCRrAw2O3GhsrblMR4kibL
G8XoMQG4rR1d9ujA4F6hVyWCex+oX71zxXi0qztd4r49RDCngLqy649lXn6zqnIc
xAwinVFxrNM7V7nnlfXx4Bs9XIlHqwtbgV+dxgQZJmNDQw5wsR7wDUmWIeWFQbdV
60Z4wLdroetPUj099QAyxfeccsEGaDTr4oG0qFL8HiGywuogeO707LsFxyjqMxRM
9tsntytiC2AqLTWvDwTauT+jf7+lIwPYL9W4P1wMQwTWZk/9QhZXgIdGPfB2cSAn
Bg2cyhAeHcIl0ahKoENvZJ+ReK0DOGSH
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:10:40 2026 by rpki-client