This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
File: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft (raw, json)
Hash identifier: dfC0byKhrfjyyTnQBAIfR0U9/p/kmNAR8psDTtftGEk=
Subject key identifier: 71:25:C5:59:2B:2B:0B:99:8A:2A:75:8E:C6:5D:4C:6B:7B:E4:51:78
Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
Certificate issuer: /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
Manifest number: 71
Signing time: Fri 23 Jan 2026 06:13:12 +0000
Manifest this update: Fri 23 Jan 2026 06:13:12 +0000
Manifest next update: Fri 30 Jan 2026 06:13:12 +0000
Files and hashes: 1: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl (hash: LcDi13rDYQV+ScZYOSuxfCSuAsbGNf/QBRxE2Kj8sA4=)
2: F0458520DB1F11F0BA85C19B87D3641D.roa (hash: WA87UPJRq96s6OLP9jcJhBSDKr1z70JCl7NRHIyVd4o=)
3: 6C8EEADA8FE011F0A1C6120DC4F9AE02.roa (hash: 2rgWm34cnuxHOcyBHT+NDpf6UPxP1/T5rN2Gb9Zi9ZI=)
4: 0B4068BEC55D11F0B9FDE586C4F9AE02.roa (hash: d/+adXM53jhzhnOgosOvMBJYAel7wXf5omaL/+hpgK0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Validity
Not Before: Jan 23 06:13:12 2026 GMT
Not After : Jan 30 06:13:12 2026 GMT
Subject: CN=69731178-60e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:60:c6:d3:c0:8e:dd:83:24:56:e1:36:d2:
b5:fe:bf:9d:bb:68:a6:5b:0d:88:00:53:fc:81:bb:
86:41:0a:60:f9:60:f5:a8:7e:fa:bb:3a:18:f4:dc:
2c:8a:60:11:ec:48:19:d6:15:32:4d:09:58:1a:d1:
ed:b6:bd:c7:5f:25:ff:cc:76:63:9e:ab:17:40:94:
fe:80:48:8e:51:ba:54:19:9f:71:95:2e:af:a4:ba:
c0:78:37:41:57:b1:4a:a6:e5:db:e7:ad:e0:17:f6:
11:db:f3:95:2a:e8:67:e1:68:3e:c6:d7:8d:44:f9:
3d:ec:3b:dc:22:52:f7:f7:22:0b:c8:34:7f:b3:ac:
22:ca:2e:25:81:95:e0:cd:49:2c:f7:5b:b1:66:7b:
16:b8:f3:19:6c:74:a3:2d:0e:6a:ef:1e:75:c2:96:
63:7d:17:a5:1d:7e:e0:c7:d1:15:05:a7:aa:65:bd:
86:89:b8:4e:82:db:96:e0:46:21:24:ae:48:90:28:
8d:d0:3f:8f:e5:fd:79:11:c0:83:77:58:32:d0:a3:
9a:a1:79:9d:8f:14:5d:d6:eb:08:2f:21:80:c3:5e:
41:1b:da:e3:9a:75:52:26:66:82:45:94:22:a4:cc:
1c:f8:33:f3:1e:9a:4d:79:7a:3c:18:89:9f:1b:e0:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:25:C5:59:2B:2B:0B:99:8A:2A:75:8E:C6:5D:4C:6B:7B:E4:51:78
X509v3 Authority Key Identifier:
keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:07:d2:88:0e:d0:c0:15:9c:85:ff:74:1f:f7:7e:48:6b:24:
b4:b7:00:bb:de:c6:5e:76:68:d0:7f:78:30:d6:06:a4:a5:66:
f3:f0:ca:f3:50:82:fe:e0:91:fa:ec:97:80:49:e7:e3:80:9e:
43:0f:16:1f:eb:d8:ed:1d:70:7a:4e:a2:77:78:36:b9:87:f3:
c9:3c:74:b7:12:05:7e:03:37:29:91:7b:da:21:55:70:b0:aa:
d0:1c:e1:80:be:84:f0:98:2a:6b:e6:79:17:4d:c5:9b:f7:38:
26:d5:c3:c5:02:a2:24:c0:67:a7:9c:6f:ea:49:f0:6e:72:cd:
6a:49:87:1b:2b:d5:ed:59:18:67:4d:4a:e7:d8:c3:c9:61:25:
4b:b2:13:0d:eb:48:24:ae:ea:69:a7:fe:72:2c:f7:94:ad:e1:
4c:12:4c:6a:04:45:b0:0f:5e:cd:37:bf:8f:f7:38:b1:02:75:
2b:b4:2d:44:be:96:ff:3f:fd:c8:bd:dd:54:90:c3:64:ee:1d:
20:91:0f:9b:42:d5:85:b9:2c:d8:8b:ce:32:ff:30:04:91:42:
33:19:69:37:13:46:ed:62:8a:02:2e:24:96:7a:95:c4:02:44:
c6:4d:6b:f0:cf:57:f3:af:39:d2:b7:9b:9b:07:13:c0:46:7a:
be:07:61:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFDRTIxMTAvBgNVBAUTKERBRTFDRTBBREE2N0I0NDcxM0M2MUIxRkFFQzRGNUQ0
RDY3QTE1OUYwHhcNMjYwMTIzMDYxMzEyWhcNMjYwMTMwMDYxMzEyWjAYMRYwFAYD
VQQDDA02OTczMTE3OC02MGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi6BgxtPAjt2DJFbhNtK1/r+du2imWw2IAFP8gbuGQQpg+WD1qH76uzoY9Nws
imAR7EgZ1hUyTQlYGtHttr3HXyX/zHZjnqsXQJT+gEiOUbpUGZ9xlS6vpLrAeDdB
V7FKpuXb563gF/YR2/OVKuhn4Wg+xteNRPk97DvcIlL39yILyDR/s6wiyi4lgZXg
zUks91uxZnsWuPMZbHSjLQ5q7x51wpZjfRelHX7gx9EVBaeqZb2GibhOgtuW4EYh
JK5IkCiN0D+P5f15EcCDd1gy0KOaoXmdjxRd1usILyGAw15BG9rjmnVSJmaCRZQi
pMwc+DPzHppNeXo8GImfG+BpYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHElxVkr
KwuZiip1jsZdTGt75FF4MB8GA1UdIwQYMBaAFNrhzgraZ7RHE8YbH67E9dTWehWf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUNFMi81MUNEN0ZCQTcy
Q0UxMUYwODQyMUFBNDhDNEY5QUUwMi8ydUhPQ3RwbnRFY1R4aHNmcnNUMTFOWjZG
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ1SE9DdHBudEVjVHhoc2Zyc1QxMU5aNkZaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QUNFMi81MUNEN0ZCQTcyQ0UxMUYwODQyMUFBNDhDNEY5QUUwMi8ydUhPQ3RwbnRF
Y1R4aHNmcnNUMTFOWjZGWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpB9KIDtDAFZyF/3Qf935IayS0twC73sZedmjQf3gw1gakpWbz8Mrz
UIL+4JH67JeASefjgJ5DDxYf69jtHXB6TqJ3eDa5h/PJPHS3EgV+AzcpkXvaIVVw
sKrQHOGAvoTwmCpr5nkXTcWb9zgm1cPFAqIkwGennG/qSfBucs1qSYcbK9XtWRhn
TUrn2MPJYSVLshMN60gkruppp/5yLPeUreFMEkxqBEWwD17NN7+P9zixAnUrtC1E
vpb/P/3Ivd1UkMNk7h0gkQ+bQtWFuSzYi84y/zAEkUIzGWk3E0btYooCLiSWepXE
AkTGTWvwz1fzrznSt5ubBxPARnq+B2Fa
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:21:11 2026 by rpki-client