This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
File: 33HZn0zTs4Mms-1HyOSl35ieQvI.mft (raw, json)
Hash identifier: /iSTU7QVn8QcBd2VzUd7hqXkYfunxV0mSqGv4nb1g9Q=
Subject key identifier: 6F:FB:CB:8E:B5:59:62:55:5B:AB:D5:57:82:15:BD:F7:1F:9D:27:6E
Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2
Certificate issuer: /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2
Certificate serial: 0203
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
Manifest number: 01F9
Signing time: Sun 25 Jan 2026 01:54:28 +0000
Manifest this update: Sun 25 Jan 2026 01:54:28 +0000
Manifest next update: Sun 01 Feb 2026 01:54:28 +0000
Files and hashes: 1: 33HZn0zTs4Mms-1HyOSl35ieQvI.crl (hash: AtmC8B0Q7Pa4NCpd5rGgsg7l7khYqb/INZJBfBwH2aA=)
2: 1BDBCE5013A011EE91039C41C4F9AE02.roa (hash: p/oubbOjEb8Zn+B8haVjlomp+846cFby5ixQFCvfJFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl
rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0EE, serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2
Validity
Not Before: Jan 25 01:54:28 2026 GMT
Not After : Feb 1 01:54:28 2026 GMT
Subject: CN=697577d4-f99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:09:f0:7f:1d:e9:cb:13:5d:6b:40:9d:af:
f8:c5:18:bb:a8:89:a8:e9:b6:36:5c:16:0a:5b:d3:
b3:29:c0:d8:d7:97:64:11:df:cb:c2:33:2d:75:51:
9f:ad:a5:49:fe:e6:f9:16:7f:3c:dd:e5:9d:c9:a7:
90:71:86:9a:85:56:9a:ec:28:5f:a3:84:d9:f3:9e:
09:a8:bf:15:2c:72:3b:51:56:83:e0:43:01:0c:25:
14:23:cd:07:ac:a1:56:9d:99:0a:fd:26:80:78:0d:
8b:c8:48:ac:3b:be:de:8a:ad:bf:26:64:98:12:52:
a1:0a:c2:34:ea:58:69:c3:c7:f8:c3:b4:0a:a2:89:
e1:3c:84:cc:eb:56:4d:9b:21:d0:23:72:6a:8b:e9:
e4:ad:e4:7b:fd:85:17:a0:fb:5a:2d:ed:f9:12:12:
47:9c:a6:9e:0f:32:ff:ea:cb:2f:43:50:55:f1:90:
8b:5f:be:e9:96:d1:5b:50:c5:94:12:2f:c8:78:71:
65:b2:f7:0c:84:45:60:c8:59:7c:da:9f:df:21:a3:
c7:50:51:4f:c0:73:b1:1d:b2:a5:db:f8:4d:81:ad:
0a:5d:ed:e9:48:ed:f4:eb:f4:5e:bf:34:90:ae:19:
41:ae:1e:13:43:16:18:ab:3c:7f:f6:c4:07:61:1f:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FB:CB:8E:B5:59:62:55:5B:AB:D5:57:82:15:BD:F7:1F:9D:27:6E
X509v3 Authority Key Identifier:
keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d6:94:53:20:43:cf:0c:8e:eb:c2:73:8c:cb:8a:2b:e3:c2:
c8:ad:69:e2:de:d3:7f:b5:6a:0d:7c:76:6c:e8:2f:16:fc:a5:
c0:88:f4:0c:46:7e:6d:7a:6f:7a:ac:7c:1b:72:6e:02:6b:71:
71:54:11:f2:bf:3c:c5:32:2e:a6:7b:62:28:11:d2:ee:32:80:
9a:ba:7e:4f:b8:db:67:b9:d6:3f:54:83:4f:24:77:40:08:3f:
c8:23:2d:65:19:20:9e:91:44:e3:57:23:d0:59:8c:8e:77:c0:
d7:ec:31:2d:eb:ce:4e:8d:29:75:e6:1f:e2:31:b9:f2:1f:25:
25:57:8c:0d:f5:45:2a:06:28:fe:07:f7:01:c0:e9:23:d0:27:
c4:9a:42:92:99:65:8a:26:b0:0f:5e:cc:99:54:55:21:e1:b6:
83:f0:ce:5c:26:b9:14:9b:b3:71:5c:cd:85:d0:16:52:99:dc:
e4:6b:a2:f5:5d:38:fe:2c:31:c3:e5:04:53:c2:7a:c5:79:50:
b9:fb:78:36:02:d0:d7:e0:57:51:96:e0:15:10:cc:a9:29:43:
44:fb:5b:fd:6e:18:0e:a3:1f:cf:0d:6c:05:d9:50:14:e3:71:
d4:3b:20:36:e5:2c:d9:01:b8:82:76:59:4d:67:da:35:9e:d5:
9a:40:d8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:08 2026 by rpki-client