This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json)
Hash identifier: DyzPz34Wy8+Cnke1kMJFfmyAejeFGp9tBBGOFLmp07g=
Subject key identifier: 08:5D:87:E5:C7:9C:8B:BA:82:18:F7:A5:77:86:ED:6D:1A:25:90:84
Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65
Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
Manifest number: 021F
Signing time: Sun 25 Jan 2026 01:35:15 +0000
Manifest this update: Sun 25 Jan 2026 01:35:14 +0000
Manifest next update: Sun 01 Feb 2026 01:35:14 +0000
Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: Mjgd+62XFj3YRr0nhXCFFhF9LL8EFXPOlQ4+33ewAw0=)
2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: DR6m9dTiQf0MQdfmKjC6TTSnRd3qda76E3er8flKLDE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl
rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065
Validity
Not Before: Jan 25 01:35:14 2026 GMT
Not After : Feb 1 01:35:14 2026 GMT
Subject: CN=69757353-a8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:8d:6d:dc:e9:7a:d2:e6:b6:dc:ad:37:45:
63:32:75:33:12:c9:72:a6:03:17:c6:f1:c9:18:d4:
0d:5c:81:ba:d0:d2:86:46:cf:e7:47:21:12:fe:64:
98:b8:47:05:ec:e8:bf:9e:d0:3f:68:30:5f:21:80:
ce:73:ba:db:85:1a:48:97:5c:66:0e:e5:9f:51:ff:
84:2b:b3:fb:ab:fa:1a:fe:8a:1a:33:55:bd:66:68:
ec:f2:a2:e7:fb:ab:9b:8f:86:fd:72:87:79:96:f2:
87:55:3e:46:9e:62:0e:96:9f:4c:64:65:54:37:bc:
b9:c7:a5:95:f8:fe:ec:03:f5:2c:cd:4e:de:49:a2:
75:95:30:b4:fe:44:35:63:14:e6:17:56:24:36:d0:
3f:44:35:6e:4d:4c:99:6e:19:05:4a:a2:61:22:79:
2a:40:84:c5:7c:d5:0f:55:5c:46:8b:90:bb:75:44:
c0:38:fa:2e:b8:63:f0:d6:34:c3:6f:79:c4:bd:7f:
13:c9:c9:40:b4:cd:b3:49:45:6a:ee:f1:3f:01:0f:
b1:59:ed:dd:81:0d:2d:37:14:95:2b:f3:b3:11:6e:
12:9b:67:dc:c4:d1:0a:64:19:b4:e8:b0:0f:3b:4f:
dd:a5:3c:cf:cb:65:fc:46:61:fc:2d:b5:5e:1a:51:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5D:87:E5:C7:9C:8B:BA:82:18:F7:A5:77:86:ED:6D:1A:25:90:84
X509v3 Authority Key Identifier:
keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:8e:6f:24:c5:a8:f7:37:a7:ef:48:10:02:6c:23:45:68:6d:
7c:fa:e9:ec:f5:c6:00:6f:45:a3:41:a7:6a:83:fb:9c:71:92:
76:49:dc:cf:94:e4:a1:04:d4:e7:c7:f1:44:69:b2:6a:d2:87:
6a:1b:09:a9:54:ea:ca:23:9d:5f:42:30:f9:bd:93:b4:59:db:
bf:80:2a:6f:09:cb:e5:02:1f:f4:cc:3c:69:c1:db:2f:fb:00:
c0:f1:08:dc:28:d5:c3:c0:7c:35:e3:34:83:2a:e6:de:7a:65:
27:bc:ac:ad:3d:77:8a:80:14:74:ac:95:f4:1a:2b:67:49:3b:
0e:ab:5d:6c:b5:01:e1:e9:ff:70:e6:88:cc:a3:76:59:82:8b:
9e:d1:9d:3b:cb:d0:fe:7d:33:59:0f:8c:6b:76:02:7b:b1:86:
30:c9:6d:1b:b5:53:49:1f:a4:d0:2c:1e:29:dc:be:84:13:1b:
6e:91:c7:b0:63:8f:52:a8:35:61:61:12:04:46:67:f4:3a:30:
0a:6b:f6:f4:d7:67:51:7b:a8:20:b0:b0:f0:8a:70:48:6a:f3:
8a:81:39:3b:75:ab:ba:b9:b9:64:5f:ff:6b:d2:dd:4a:61:ed:
7d:9e:53:0b:56:df:96:d6:05:57:1b:b9:50:78:4f:ec:7c:72:
6b:bc:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:05 2026 by rpki-client