This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json)
Hash identifier: lR1GSKzfznb/lbozSNbPgDbkK/I4CfCvZeNSn2FUuZU=
Subject key identifier: B7:04:C6:92:A3:56:2D:7B:23:F7:3F:A7:8B:A6:36:DD:A2:73:2B:38
Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27
Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
Certificate serial: 12B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
Manifest number: 1B1E
Signing time: Sat 24 Jan 2026 16:47:51 +0000
Manifest this update: Sat 24 Jan 2026 16:47:50 +0000
Manifest next update: Sat 31 Jan 2026 16:47:50 +0000
Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: +QSBl3EaLsC/ZJcQvZSp6+j9qyH6xegYrVHBI1wN8GE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl
rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4793 (0x12b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
Validity
Not Before: Jan 24 16:47:50 2026 GMT
Not After : Jan 31 16:47:50 2026 GMT
Subject: CN=6974f7b6-7887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ec:4b:3e:01:c5:36:7e:4d:4c:bf:63:50:d7:
b6:9a:cb:48:01:6a:6c:3f:00:73:3a:15:64:fa:09:
f9:64:ef:3a:dd:bd:8e:2e:d4:36:7e:17:72:78:04:
8a:b8:3f:8d:35:d7:ee:0a:4d:7d:ef:73:1e:dd:6d:
30:34:d4:fd:e5:f8:86:5c:df:50:eb:50:0b:0d:1c:
60:b2:62:ec:3a:ec:74:cf:cb:b4:8a:7f:9f:f3:d9:
3e:9f:7d:59:73:ee:a9:c7:fe:a1:1b:4b:eb:94:35:
b2:29:22:98:03:1e:13:c4:47:57:36:4f:1b:3d:0f:
03:31:ae:9d:98:a7:8a:23:00:85:be:4f:0f:ed:c9:
4b:cd:70:a8:db:56:0a:25:da:57:dc:4b:40:d5:8f:
b5:5f:7a:01:01:00:6b:70:ce:a0:2e:e3:0b:8d:06:
13:95:06:8f:40:7f:18:7d:88:df:4a:72:af:02:06:
c7:d1:1b:d7:25:67:2e:e7:75:1c:53:21:15:7f:2b:
8c:a7:ee:02:ab:e5:97:32:c9:55:b3:2e:8c:c7:05:
70:b2:dc:8f:c4:a8:41:90:45:d5:cf:61:16:38:ac:
aa:63:1a:53:14:27:c8:40:9b:2b:ec:62:4c:ee:85:
8e:67:ec:66:df:94:dc:48:d1:d6:77:87:fc:cc:e7:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:04:C6:92:A3:56:2D:7B:23:F7:3F:A7:8B:A6:36:DD:A2:73:2B:38
X509v3 Authority Key Identifier:
keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7c:2e:3a:86:91:7f:9c:48:05:23:47:0b:dd:7d:82:85:52:
83:b6:ac:19:d5:7f:9a:fd:4e:27:dc:76:4f:5d:5e:ff:ef:2a:
78:0a:01:ae:3b:7c:6e:2f:ba:8c:04:43:15:4a:d2:cd:f9:6a:
ed:ea:a2:91:9d:4a:0a:79:60:6a:d0:bb:ab:1f:7e:18:52:e6:
c0:ea:16:38:ab:df:df:cb:f7:92:60:ab:87:fa:f2:db:dd:47:
46:39:f8:b5:b7:13:28:d8:53:0a:19:2e:cb:10:04:fb:29:e1:
95:6c:0d:0b:d9:0f:21:53:88:46:b9:ed:ef:9b:f6:64:38:c2:
2b:33:d9:4f:3d:3b:a8:ab:21:23:9c:27:65:5a:0a:28:dc:01:
89:4e:ec:45:aa:22:ba:fd:37:8c:3a:6d:76:ba:ef:36:59:f4:
05:ef:3a:91:ce:92:bb:b1:6f:e8:b7:99:1e:44:a8:3e:69:9a:
c5:f9:90:00:5c:89:25:6f:8a:f4:d6:88:a2:e8:65:93:7e:37:
41:c6:14:97:27:74:42:b8:d7:a1:36:f2:32:e9:89:85:43:84:
3a:b0:45:9e:dd:4e:5c:64:68:22:d4:57:40:bc:8c:2b:62:28:
e3:6e:46:07:a9:c1:7a:43:69:b3:6c:bf:bf:fb:3f:4d:35:7d:
31:aa:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:29:52 2026 by rpki-client