This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
File: 5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json)
Hash identifier: o4MQ6/vhQX65WcGMs4xxB8JGAZCmMt5KZUvbC+B7XBU=
Subject key identifier: 88:6A:38:08:D7:1C:37:DE:B4:41:E3:20:9B:40:70:B1:15:8D:40:AD
Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
Certificate issuer: /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Certificate serial: 0CF9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
Manifest number: 0CE7
Signing time: Sat 24 Jan 2026 17:50:35 +0000
Manifest this update: Sat 24 Jan 2026 17:50:35 +0000
Manifest next update: Sat 31 Jan 2026 17:50:35 +0000
Files and hashes: 1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: JRZ5cuQ0MIg4kYSXbTogY0UWihu1X9h6noBAhTdGKpg=)
2: 6B6223B294D011F08FAC1420C4F9AE02.roa (hash: CYogDkkcuThBt0m18SN49Ve4wWE9zs9AU2x6u6Qm/Cc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3321 (0xcf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Validity
Not Before: Jan 24 17:50:35 2026 GMT
Not After : Jan 31 17:50:35 2026 GMT
Subject: CN=6975066b-0978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:a8:a3:6f:3a:98:8f:f8:89:98:c9:cd:e3:
d7:59:96:a0:9b:82:1e:5c:8e:5b:f3:9b:88:bb:02:
62:11:ad:42:b8:68:b4:23:92:ed:d3:5c:52:91:1b:
55:3a:0d:6a:55:89:cf:89:35:f8:1d:ef:75:a8:e2:
33:e0:b8:7e:e7:b8:eb:e1:18:3c:9e:df:9f:dc:d6:
8f:aa:dc:47:06:e1:4d:4d:6e:94:dc:fa:95:92:22:
ee:0b:fd:12:f6:f7:12:f4:63:69:b8:0d:71:48:13:
a3:cc:be:c3:49:0a:65:55:d8:33:1a:63:42:ef:ba:
0f:39:ae:fb:9a:46:91:9b:e1:40:b6:78:49:d0:0b:
c4:87:be:9d:5b:df:27:f0:77:e8:ba:44:ef:d5:c7:
fd:4e:a3:05:81:34:de:fb:c0:9d:8d:68:de:d6:41:
b7:b2:e5:fd:db:32:e2:1c:b0:2f:0c:d7:0b:e4:94:
26:8a:22:bb:04:99:4b:d4:0d:8b:5f:55:dc:ca:d2:
80:a1:8e:bd:13:05:df:07:97:51:63:b4:ee:a8:75:
c5:97:ae:46:f7:79:72:1a:f3:eb:9f:f8:cd:da:4f:
e4:6a:b2:6d:76:21:99:c8:00:0e:bc:61:8d:7b:89:
8b:76:95:a2:57:c1:34:35:75:4b:e6:81:34:d8:76:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6A:38:08:D7:1C:37:DE:B4:41:E3:20:9B:40:70:B1:15:8D:40:AD
X509v3 Authority Key Identifier:
keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:28:68:7c:14:57:f0:56:0c:31:bc:fb:fd:f7:4b:88:45:b0:
9e:5b:e0:be:77:25:87:7f:94:3e:8f:43:71:2d:17:cd:c3:72:
3c:41:eb:57:6c:59:a0:73:ca:de:d3:ae:8c:7c:93:55:b7:f2:
ef:4a:5b:01:7e:6b:e1:01:3a:f7:db:0a:b0:81:26:30:62:5f:
7d:fc:f0:c8:a8:6a:ef:90:1d:87:fd:00:17:07:e8:f1:5b:e2:
07:12:93:7d:fb:3b:be:77:08:ce:5f:bb:95:02:cb:6a:e5:b0:
97:37:b5:ef:41:26:86:12:33:af:fa:33:23:ff:4f:86:e9:f0:
06:8d:49:05:15:a7:70:1a:62:7c:62:8e:44:d8:29:86:fa:df:
da:ab:6b:74:77:ec:2c:66:98:56:b2:39:06:7e:d6:2a:2c:0e:
1e:b0:2b:b1:04:0c:63:9e:5e:57:70:a0:54:ee:ff:71:94:60:
81:88:af:82:96:1f:c4:7f:1b:a1:02:4d:49:a6:00:d4:be:1c:
d8:0b:61:3d:5b:92:6a:f9:90:0b:b0:c1:a8:6c:82:17:11:a9:
7d:82:12:7c:a6:5b:01:19:e9:c5:f4:47:01:6f:d9:5a:09:5c:
65:5c:a3:ab:db:1f:60:a6:d2:ed:eb:06:09:f8:ac:20:2e:6a:
e7:7d:30:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:52 2026 by rpki-client