This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
File: S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json)
Hash identifier: /QWn+9K5xvL+7nZyflUU4c6Mb11Y3brf0OTtQPBIecE=
Subject key identifier: A7:12:D1:80:62:FC:74:87:5C:38:3B:94:49:D0:E5:E8:57:47:AE:73
Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
Certificate issuer: /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
Manifest number: 0222
Signing time: Sun 25 Jan 2026 01:26:55 +0000
Manifest this update: Sun 25 Jan 2026 01:26:54 +0000
Manifest next update: Sun 01 Feb 2026 01:26:54 +0000
Files and hashes: 1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: D23eFfxx9O7CHyaxHryKM7g+t5C+fGMlV0m9MsQojys=)
2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: h6q23QMfBwFmxIMVTA6ARQak7Qs7wYbVCQBIj8uPZPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FF72, serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Validity
Not Before: Jan 25 01:26:54 2026 GMT
Not After : Feb 1 01:26:54 2026 GMT
Subject: CN=6975715f-3449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:b1:9c:2d:05:74:19:7b:24:8f:39:30:2e:
d3:65:59:56:54:6d:9a:7c:5b:0a:6d:4f:67:74:ce:
0b:08:ef:b1:32:32:da:58:7f:13:6b:30:52:c4:cc:
09:61:5b:ae:ae:e9:c0:d1:e6:8a:59:95:19:94:ac:
a5:ab:3e:14:35:13:23:a2:e5:36:d5:97:4c:aa:39:
68:5c:1f:af:48:30:8d:71:9d:7d:9c:27:dd:23:41:
b7:6b:7a:65:f0:a9:30:67:6f:5a:bf:11:85:1f:ab:
0d:1d:bd:88:68:c8:13:61:f1:e8:a0:90:13:30:3e:
83:d5:84:4f:ee:fa:d5:5e:a8:c4:4f:cc:fc:fb:b3:
63:b4:4a:8a:7e:bd:69:7e:af:ad:c0:aa:a8:4a:18:
72:3f:4a:d5:d5:5f:f5:78:f4:d6:14:8a:dc:80:97:
dd:04:cd:45:32:90:94:e9:55:e4:c3:eb:41:f4:cd:
08:e0:bf:44:18:bd:7e:c8:5d:57:4e:9f:fc:c5:d8:
88:12:d7:41:93:c9:78:d5:26:3c:ba:81:79:52:75:
1c:19:00:5f:b7:98:7b:9b:98:95:e3:e0:00:75:8a:
db:2f:aa:92:50:45:a8:73:93:f0:0d:31:ee:4d:d1:
20:96:7d:f3:93:01:1a:ec:42:fb:34:3a:19:1c:e4:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:12:D1:80:62:FC:74:87:5C:38:3B:94:49:D0:E5:E8:57:47:AE:73
X509v3 Authority Key Identifier:
keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:11:5b:54:9e:87:7f:96:a9:98:d9:f8:c2:f2:d6:ce:2e:73:
4b:14:b2:d2:73:9d:b7:a9:c4:67:ad:b5:3d:b6:57:a6:72:9b:
0b:34:19:03:d3:5c:b6:9c:35:0d:a7:5a:35:97:09:30:33:be:
25:60:7d:d5:23:ee:94:7b:d6:eb:c2:08:ac:b5:e4:c6:79:71:
60:b8:bc:b3:91:6d:1c:25:34:8e:b5:ea:47:d8:1d:9f:45:2e:
b8:05:fe:86:d9:40:fe:a3:f0:71:bc:56:07:fe:eb:a9:90:c2:
60:4b:94:36:5d:30:f6:5b:82:b7:b1:b6:4a:84:51:5a:4a:59:
b4:03:cf:e7:64:15:d9:36:77:a1:76:c4:0f:51:a1:8c:68:a8:
9c:36:a9:90:50:09:a5:c6:7a:08:2f:12:10:54:cb:13:00:ca:
3a:ff:17:1d:9d:45:c0:ee:66:7a:36:fe:a3:f4:d5:94:51:63:
74:9c:6e:03:53:50:2a:e8:1b:f7:b3:3c:04:7a:72:87:9f:54:
67:2a:27:d5:2b:3c:09:8e:bf:1d:5a:ea:17:af:c5:74:a9:89:
d0:78:ac:b8:ce:c0:30:b5:7e:90:e5:00:3a:5f:a0:d1:0a:98:
ec:8e:d7:27:32:9d:04:d8:6f:5a:f2:b4:36:ab:7b:06:b6:2f:
6e:a7:8a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:21:32 2026 by rpki-client