This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft
File: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft (raw, json)
Hash identifier: ktZQ3uTUBn8Qu51fyFbJ54i3st/9R900IN5IBoKX9Xg=
Subject key identifier: DA:63:F1:E3:B2:6B:A8:3D:99:6E:35:8C:F7:3C:0D:89:B0:4C:62:6C
Authority key identifier: 9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4
Certificate issuer: /CN=A9164DAC/serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft
Manifest number: 43
Signing time: Fri 23 Jan 2026 06:23:38 +0000
Manifest this update: Fri 23 Jan 2026 06:23:38 +0000
Manifest next update: Fri 30 Jan 2026 06:23:38 +0000
Files and hashes: 1: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl (hash: hcFIr74hDm3NYP/DT6Oy+r7+Zxt2mzMmsLia0S4EqQQ=)
2: A8AFC432909711F0BDFBAA86C4F9AE02.roa (hash: ResLExXl8yuMXGOR84bDKNTRnpa/Fbrh1BqAV2RUGhU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl
rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164DAC, serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4
Validity
Not Before: Jan 23 06:23:38 2026 GMT
Not After : Jan 30 06:23:38 2026 GMT
Subject: CN=697313ea-2236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:ea:62:17:e5:b1:e6:59:f9:fd:86:49:7d:
2d:ee:aa:04:09:a4:fd:9e:95:c5:9a:47:53:68:1d:
6f:93:a6:0f:64:bb:d5:0e:49:70:71:6a:cd:39:2a:
67:7c:aa:4b:91:14:14:da:28:0f:76:a9:6b:2a:ae:
21:83:7d:74:0b:dc:d7:d0:77:3c:e1:74:0a:5d:39:
a9:ae:5d:87:a4:82:fb:b0:16:04:b3:33:b7:52:4b:
c5:be:8c:9d:e7:dc:63:78:bf:a5:1b:21:2d:90:ed:
89:7b:95:c0:96:8c:ba:69:98:1b:05:e0:5a:02:27:
6f:60:3d:90:1b:96:49:09:8b:40:14:40:e0:cf:3a:
a3:84:12:ea:dd:a0:76:1e:6c:a4:89:2a:fa:f5:9a:
56:45:01:3e:91:40:ad:62:83:bb:cf:b4:7e:df:5d:
26:d5:76:95:e3:db:5e:7b:91:62:7f:1b:63:87:cd:
95:5b:b9:78:65:d6:d0:b5:0c:b7:06:65:64:09:d5:
28:60:b8:0b:ef:e6:66:70:6d:d5:e8:db:44:36:d3:
9e:df:a8:b9:35:5d:0c:e4:83:33:73:18:62:ec:24:
63:17:60:9a:6c:c7:60:42:01:14:42:b7:2f:f6:f7:
9f:91:4e:51:39:21:b3:df:68:86:14:42:01:75:2b:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:63:F1:E3:B2:6B:A8:3D:99:6E:35:8C:F7:3C:0D:89:B0:4C:62:6C
X509v3 Authority Key Identifier:
keyid:9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:71:e5:f2:98:54:13:32:1f:94:21:c9:a5:d3:d2:94:03:01:
7a:51:fc:7a:04:1a:99:4f:92:7a:f9:c6:2d:2d:0c:61:14:a5:
6a:18:0b:6c:25:fc:12:d8:ce:d2:a4:4e:2f:30:a8:ec:75:80:
59:f7:29:ab:93:77:cb:b8:79:d7:b9:2c:c4:0e:31:61:d9:cd:
94:06:eb:fd:0a:c5:5d:80:e5:02:d9:47:02:75:a6:76:f1:37:
3b:75:3e:44:fb:c7:60:fe:f6:e4:3b:7d:ab:8a:e2:f9:54:b4:
45:4d:a5:f8:4d:ec:05:8e:69:6b:6f:e1:da:49:47:88:7f:8f:
5e:a1:04:2e:3a:31:72:8f:84:59:d5:85:65:81:03:aa:48:b2:
3d:f9:ac:fd:ce:ac:fb:a3:f4:74:f4:a9:3e:40:57:a4:52:8b:
6c:2a:52:7c:57:ce:4a:08:6e:93:69:58:ac:4c:22:e1:05:cf:
b0:ec:dc:f8:04:b1:87:fa:0f:45:a3:3a:a0:8e:54:3a:bf:b0:
10:88:21:6c:e6:10:0c:87:37:f7:80:3a:cb:77:87:3b:dd:95:
9f:b2:8b:a7:52:74:b5:90:80:c7:c4:ef:8d:2b:31:04:a6:77:
4a:e2:9a:31:fc:6c:cb:ba:21:1e:9f:01:18:f3:69:fe:83:08:
85:c2:1d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:48 2026 by rpki-client