This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
File: AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft (raw, json)
Hash identifier: xU8RPsihM2nc09SziICsyFzrCtQzcWlG4I0Tz4sM63w=
Subject key identifier: 67:FA:37:26:FD:52:3B:35:7F:D7:EE:B3:72:47:D0:0A:81:2C:EC:81
Authority key identifier: 00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C
Certificate issuer: /CN=A915E131/serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
Manifest number: 2B
Signing time: Sun 25 Jan 2026 06:43:05 +0000
Manifest this update: Sun 25 Jan 2026 06:43:04 +0000
Manifest next update: Sun 01 Feb 2026 06:43:04 +0000
Files and hashes: 1: AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl (hash: BDcMCUKKvJ/VcHVbxjdU/MdgGsulQEf1uKcQAPR9ZS0=)
2: 7CCDD124BEC811F09972220FC4F9AE02.roa (hash: kF3MsF0LKW2hpCo2tc4HdlJWfcSXM3xD20g6oUSt0Tw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl
rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E131, serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
Validity
Not Before: Jan 25 06:43:04 2026 GMT
Not After : Feb 1 06:43:04 2026 GMT
Subject: CN=6975bb79-d86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:42:4b:6f:d5:ce:86:67:6a:e5:c3:07:d2:
26:a6:a9:5a:96:b5:ac:30:16:83:31:72:bd:74:14:
07:20:49:57:c0:79:ea:d7:a6:45:97:26:5d:a2:b0:
20:43:43:09:7f:b8:fd:c1:06:55:28:ec:05:c8:ae:
55:2d:34:5c:9e:81:7b:ca:97:72:63:d3:f4:94:95:
86:e8:6e:7d:6e:db:bb:bd:88:75:b3:5c:ed:dc:1a:
28:fb:8b:fd:01:95:c3:eb:b3:c8:58:a0:1c:ff:a4:
f1:04:a9:0e:d1:a6:6a:e6:e1:e9:63:d0:6a:ac:9d:
74:94:0e:8b:71:6a:43:80:90:db:8b:d8:c9:6e:0a:
e6:11:a6:58:73:91:3d:2c:ad:a2:12:cb:02:b8:10:
b5:ee:04:6e:81:77:9a:b1:d9:ba:b3:93:fc:07:b0:
d2:36:b5:9a:76:4f:9f:82:22:61:d8:c9:8c:37:b5:
68:70:69:d4:67:95:f1:92:d9:95:16:16:e4:80:a3:
59:f6:4f:c2:32:a9:df:85:c2:e3:64:49:a4:e8:ec:
0a:84:f1:af:3a:6f:0e:c5:d1:17:b4:d7:c2:0d:60:
65:53:f7:9d:be:f3:22:b4:56:e2:94:b6:d3:39:73:
e8:17:5a:e1:c3:4e:93:31:3f:3b:b9:14:7e:a7:e6:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FA:37:26:FD:52:3B:35:7F:D7:EE:B3:72:47:D0:0A:81:2C:EC:81
X509v3 Authority Key Identifier:
keyid:00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:c7:18:57:f9:02:26:b2:d9:5a:3b:ae:f9:2d:0b:8a:85:71:
9e:e0:56:ed:39:d1:8e:aa:64:ab:06:87:59:e5:82:09:7b:4e:
db:6c:a4:45:42:92:80:cf:76:ba:2f:6e:17:c8:98:ca:e8:a3:
6b:43:f7:b6:44:73:4c:79:85:21:6b:4c:06:bb:0c:99:d3:60:
8c:bd:1e:5b:48:b8:0f:76:bc:7a:23:11:3e:13:74:af:31:8b:
4b:fc:a1:97:78:1c:cc:56:49:09:9e:48:83:3f:8b:7e:26:d7:
fa:0b:07:8d:5c:1c:da:5f:7f:6e:e1:2a:6a:fe:ca:be:1b:92:
71:f9:d3:76:d5:ed:21:e7:e2:08:b4:fe:f6:71:e2:60:1e:d4:
ce:a7:c4:92:61:15:50:fb:46:1a:f7:55:02:5e:7e:f3:7a:42:
5d:fe:2d:cd:41:00:b8:ef:60:ae:02:f3:24:d2:34:77:fa:58:
fa:d4:f5:ee:e7:23:80:c6:46:15:42:06:1b:6e:1a:e5:cd:2e:
d0:5a:29:1a:2e:f0:30:9f:2b:cf:ae:cd:ac:0b:3d:d0:72:6b:
84:8a:b5:27:c1:06:ba:a3:e7:0a:f9:55:05:a7:41:5b:7a:c9:
a4:7e:71:b5:dc:df:dc:e6:75:2e:fe:b2:0b:1f:56:68:bd:f6:
1e:fe:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:51 2026 by rpki-client