This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json)
Hash identifier: zcex0BKwoyXVFcPjvfonnXq4oPzjTbuIexTYdAcaj8A=
Subject key identifier: 0D:30:F5:C5:12:7B:61:2E:47:C2:78:76:9D:D3:C6:D9:87:68:6D:45
Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
Manifest number: FE
Signing time: Sun 25 Jan 2026 04:40:34 +0000
Manifest this update: Sun 25 Jan 2026 04:40:34 +0000
Manifest next update: Sun 01 Feb 2026 04:40:34 +0000
Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: 5BndkCpy8Y0uLmUnIR5OXc7ko+5QaDqxrerkj39N+5I=)
2: 5F46824EDFEE11F09230591F586F56BC.roa (hash: +HzykRElAivaqJFkb12WFFYpLgi3wZxcjhAF1/JC3xQ=)
3: 90C06632E59811F0B79FD920496F56BC.roa (hash: mIrTGUcycuuZeuCddW2iOQRr7UqM2beJ2HOVK6YXv/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:40:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Validity
Not Before: Jan 25 04:40:34 2026 GMT
Not After : Feb 1 04:40:34 2026 GMT
Subject: CN=69759ec2-9ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:ca:81:f7:07:76:e1:e1:e0:89:18:9e:4c:
71:a3:55:f4:3d:1c:bc:33:b2:d8:cf:52:b0:bc:92:
65:f6:b5:8f:ff:80:8b:dd:12:7b:21:f5:b0:da:21:
fb:df:e1:5c:93:9e:fd:4c:f7:4e:82:bd:78:89:71:
3c:d6:d2:37:e5:03:dd:94:50:18:d5:3b:4b:e5:9b:
db:1d:59:5b:24:f6:f4:a8:f7:a8:d3:a3:84:69:46:
a6:b9:c5:d5:f5:22:ce:47:1e:e9:8a:49:fa:22:e1:
69:61:80:96:74:02:d1:c5:06:86:cb:1d:cc:84:f3:
31:7f:4f:7f:5d:b8:bd:28:4a:47:b6:c8:28:d8:bd:
88:cc:de:10:59:15:7c:2e:47:00:6f:ac:e2:f1:33:
fb:dc:03:27:97:79:5e:5b:07:7b:51:cf:25:98:7e:
66:87:ff:38:d2:c1:31:7d:ba:4b:f1:08:ae:dc:02:
a3:58:22:d4:ac:31:58:22:f3:b1:70:85:e4:70:8e:
ac:ff:53:0c:d2:d7:96:70:7d:2c:59:a4:71:d6:3e:
57:d3:38:0f:e2:b8:94:27:c8:00:4b:66:8f:4a:52:
23:e3:db:e3:38:22:85:55:fd:4c:70:5b:4c:bd:a0:
a1:2f:a6:2a:1f:f4:f3:b4:80:89:c7:fd:3f:0c:af:
4f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:30:F5:C5:12:7B:61:2E:47:C2:78:76:9D:D3:C6:D9:87:68:6D:45
X509v3 Authority Key Identifier:
keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:a2:42:d6:4d:c2:04:9e:43:6c:c7:55:88:38:4c:1d:ff:cd:
1d:c1:11:de:5a:e0:84:81:87:c8:68:89:81:b0:bf:01:0a:7f:
64:f0:fb:01:b9:91:b7:d0:c6:a5:f2:92:c1:48:25:4c:6e:04:
47:ff:2c:3e:ca:46:68:9e:76:40:20:75:bd:f9:b3:25:49:9c:
50:66:16:5f:9a:5a:5b:f9:64:be:9b:7b:39:da:c7:fc:dc:fc:
02:5b:df:0f:25:ac:f1:a8:06:53:73:2c:11:69:07:b7:81:f8:
ea:61:23:45:2f:36:16:34:f2:52:c5:9a:ce:22:b9:78:5c:4c:
c0:74:4e:af:1f:2c:55:26:fe:da:88:4d:d0:a1:ce:09:87:6c:
d4:0b:87:d8:b8:87:64:96:28:0e:5f:01:cc:d2:40:b1:33:13:
3e:22:16:c6:e0:5c:40:22:5b:7f:c5:45:74:1c:9f:02:fa:16:
01:42:a9:a5:25:59:8f:d8:e6:ce:64:cf:e6:da:b1:d8:37:df:
55:33:fc:2d:60:35:73:fb:5d:3a:c9:b2:d3:c2:7d:1e:55:2f:
24:95:f5:59:b0:7b:a9:86:99:b0:53:10:ea:6e:bd:11:3f:a2:
2b:b6:f1:d7:be:33:ff:7e:de:b1:0c:00:65:ba:54:ac:3a:39:
7e:55:df:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:25:54 2026 by rpki-client