This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
File: t_uD0cnC98OLcAJxRkrCM2Ti59c.mft (raw, json)
Hash identifier: 2IhpNX8oIgQ8Qc3xZwcfAQBf6cSMB4JTN3zVn0qk+PM=
Subject key identifier: 10:A8:6D:04:92:1E:B0:AA:5B:C4:72:2E:A2:76:2A:44:EF:78:A1:9F
Authority key identifier: B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7
Certificate issuer: /CN=A915E38A/serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
Manifest number: 2C
Signing time: Sun 25 Jan 2026 06:44:34 +0000
Manifest this update: Sun 25 Jan 2026 06:44:33 +0000
Manifest next update: Sun 01 Feb 2026 06:44:33 +0000
Files and hashes: 1: t_uD0cnC98OLcAJxRkrCM2Ti59c.crl (hash: Z/gbGhe9rT/ujRJBD0TqOlDknyluy+mld/0m1WQl6WQ=)
2: 4AD34C1AC05A11F0B864644DC4F9AE02.roa (hash: hF8DeZYpmqlhlmu2g+0RpyAdwYJmeUUmrRx6H3p2TpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl
rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E38A, serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
Validity
Not Before: Jan 25 06:44:33 2026 GMT
Not After : Feb 1 06:44:33 2026 GMT
Subject: CN=6975bbd2-10b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:7e:7d:5a:78:27:44:52:80:30:51:82:29:
90:3e:52:54:dd:89:74:c2:58:f8:5c:10:86:f0:21:
70:b2:45:a6:49:e0:5f:40:83:e3:76:15:1e:73:2a:
7b:41:9b:15:8e:a2:99:1f:cd:b9:86:1c:74:54:e5:
00:25:c9:01:a4:5c:bc:ad:12:47:a7:13:3b:16:a6:
3a:c6:15:51:26:5a:55:38:f1:e5:23:65:b2:ec:8c:
f8:04:4a:90:bd:da:ed:6f:d5:d8:65:d0:89:1d:73:
8e:69:c1:e2:f8:8f:80:7f:24:a4:51:d5:31:93:30:
c1:57:70:3d:ee:d6:06:89:22:1b:b0:7a:6e:14:c8:
2e:51:ad:55:77:ba:93:34:c9:c9:38:de:05:88:ff:
46:69:59:af:fa:8a:e0:9c:1d:86:56:85:fe:d7:88:
21:64:d6:31:1a:28:8a:7b:66:97:83:20:b2:d8:36:
25:6a:b5:73:b3:10:b4:57:bf:95:e4:77:31:0b:47:
52:66:7f:29:a8:51:96:d2:06:88:eb:cc:c0:f4:3c:
7a:1f:12:64:66:4b:01:96:b0:74:5d:59:60:f4:c0:
8e:c2:26:28:33:d6:88:16:12:ba:bf:cf:6b:4b:4c:
88:bb:a3:4c:b4:8e:6a:dc:9c:85:a1:c3:0c:1d:fa:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A8:6D:04:92:1E:B0:AA:5B:C4:72:2E:A2:76:2A:44:EF:78:A1:9F
X509v3 Authority Key Identifier:
keyid:B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:18:a9:a1:4f:6d:03:da:cc:a0:c3:68:03:cc:ad:02:dd:84:
51:f6:da:ea:da:62:d2:35:0c:62:28:45:d5:6d:63:35:06:ac:
ef:6a:12:af:f8:85:2c:7e:c9:fc:04:b1:cc:7e:f6:e4:fc:9b:
6f:02:86:c7:ea:7b:dc:ca:87:03:ee:b7:2b:df:61:10:d7:f5:
ba:4f:87:0f:43:20:26:3c:24:42:bd:90:84:26:1d:f5:c7:1a:
e6:68:ea:af:21:d5:37:55:4d:e4:e9:27:fe:bd:a4:e5:9b:e7:
8b:1c:ca:d8:2f:90:af:d0:59:3a:16:70:71:66:60:8c:62:dd:
5f:a4:a8:13:93:c9:7e:9e:0a:45:58:13:41:f0:c4:fd:97:b8:
07:43:e8:fa:1a:40:2b:a1:5e:f0:28:a4:4c:5f:dc:f3:93:00:
d6:58:04:ad:52:0f:a3:24:30:44:9e:46:3d:fd:e4:79:3d:ef:
f4:8a:c7:6b:90:d5:46:b1:e6:0d:25:62:93:f9:13:8d:b6:23:
b2:e9:99:ed:bd:fc:a1:84:46:7b:bb:3e:1b:a2:fe:d4:67:96:
3c:7e:73:1b:f1:e9:e1:5b:27:d2:0b:5e:24:75:70:1f:05:47:
7f:aa:47:3d:3d:8e:a4:29:bb:8e:93:bb:83:0e:3b:19:f1:f8:
8b:2d:b7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:20:12 2026 by rpki-client