This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
File: 2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft (raw, json)
Hash identifier: ST2JdlnSI7YtjQQIXL1tZPBYxwzOAqyDqypo133L/u0=
Subject key identifier: 5F:6D:76:10:A9:00:76:8D:C3:07:F6:F3:06:01:8D:73:19:C4:56:53
Authority key identifier: D9:5D:A1:17:14:12:30:0A:B5:3B:3E:48:70:F2:F4:41:F0:6C:81:24
Certificate issuer: /CN=A9159ECD/serialNumber=D95DA1171412300AB53B3E4870F2F441F06C8124
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
Manifest number: 0126
Signing time: Sat 24 Jan 2026 22:27:29 +0000
Manifest this update: Sat 24 Jan 2026 22:27:28 +0000
Manifest next update: Sat 31 Jan 2026 22:27:28 +0000
Files and hashes: 1: 2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl (hash: pNm2NXUQbZwh58Hlk2e0i7Y82B91BNKfzKMRVdYYG2w=)
2: 5A4723DA6F3C11EF8FD45F13C4F9AE02.roa (hash: nJrP5XyTG2U3goSrQUjPEnvTLR/1/bqUd5TtsJOT5YA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl
rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159ECD, serialNumber=D95DA1171412300AB53B3E4870F2F441F06C8124
Validity
Not Before: Jan 24 22:27:28 2026 GMT
Not After : Jan 31 22:27:28 2026 GMT
Subject: CN=69754751-4439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:0a:20:0e:38:84:bb:59:75:d9:46:7d:42:
db:55:6c:bb:8f:2e:82:93:e2:53:04:e8:f6:fd:44:
53:8d:b7:d4:3b:82:b9:67:95:ec:4d:ea:96:37:7d:
d7:cf:3a:f4:f4:9a:04:6b:18:bf:81:c6:88:ae:69:
01:fd:ac:88:9b:cb:a3:9a:5d:73:81:7d:83:9c:30:
66:1d:89:7e:05:0f:fb:9c:06:49:4c:56:96:f3:e3:
ce:cb:77:1c:a5:c1:de:4e:d0:51:53:d7:52:77:96:
ec:49:01:58:56:cc:67:3a:51:75:35:06:bb:99:ff:
2d:d8:1d:90:7f:68:05:be:de:0c:00:68:fa:e0:85:
0e:32:41:e2:02:70:6c:4e:28:52:d1:98:a8:d1:80:
ea:61:36:0b:0e:28:1f:87:85:b1:c7:33:08:7e:68:
c9:ff:d3:5b:3c:22:c7:cb:bc:91:ef:a7:3d:bf:e7:
8b:60:a1:e5:e1:7c:33:31:06:2f:56:f0:af:d2:4d:
79:f1:6d:3a:b7:57:ef:26:09:c5:5e:b8:82:48:f7:
55:01:cb:1b:d8:82:5c:fe:d6:3f:2a:dc:c8:c8:e8:
14:f1:26:14:28:ed:97:77:74:6f:fb:94:f7:47:71:
d2:e9:8c:f3:12:33:e6:14:a0:b8:38:f2:f9:4c:85:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6D:76:10:A9:00:76:8D:C3:07:F6:F3:06:01:8D:73:19:C4:56:53
X509v3 Authority Key Identifier:
keyid:D9:5D:A1:17:14:12:30:0A:B5:3B:3E:48:70:F2:F4:41:F0:6C:81:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:ba:83:08:7a:c2:ef:2c:77:44:48:1e:8b:75:a5:21:f2:d7:
9c:a0:db:02:7b:81:7f:6d:d4:33:56:ab:d3:c0:5c:42:95:2d:
4f:1a:09:af:07:fc:c6:75:c1:27:3d:ac:c7:a0:f2:c5:71:62:
12:4f:64:61:1f:e9:f6:36:26:e6:b6:b8:bc:08:c7:37:2f:bb:
20:82:1c:59:a3:1e:d7:5f:ac:26:dd:15:3e:a7:3b:fc:f0:34:
18:3b:de:0d:61:90:1f:86:6e:65:1a:75:a8:85:c8:05:73:a3:
f2:9d:72:d5:13:64:80:c3:11:ba:61:89:d3:1d:4d:f0:d9:04:
c2:4e:4a:ad:f2:9d:57:5c:5a:75:79:ee:fc:a5:ef:5f:a2:d6:
36:8e:22:20:d1:0a:66:b7:cf:53:07:70:cb:b7:c0:ef:e7:7a:
50:e1:4f:4c:4d:fe:85:54:cb:b5:06:8b:c8:bf:f1:cc:b4:c5:
b3:20:fb:50:e9:ec:bd:27:ee:7b:00:87:15:79:6d:10:79:23:
ab:ce:d1:22:b0:4c:0f:0f:cb:27:19:ae:f3:6a:2a:ae:d5:52:
33:ed:72:12:50:ac:c0:76:2e:17:01:20:4f:0d:8e:6f:d9:1e:
d7:75:2f:17:75:9b:41:e7:71:ef:c8:27:92:65:cf:6d:03:16:
20:b5:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:15:22 2026 by rpki-client