This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json)
Hash identifier: /UxhHdOkvrTdUwn6UfNNGi7pg+0awZ7j3HRBN4Lcj3I=
Subject key identifier: 64:8E:B6:48:0C:B1:57:B8:C7:13:DE:E2:FD:A4:8C:44:2C:D9:16:D7
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
Manifest number: 0669
Signing time: Sat 24 Jan 2026 23:13:06 +0000
Manifest this update: Sat 24 Jan 2026 23:13:06 +0000
Manifest next update: Sat 31 Jan 2026 23:13:06 +0000
Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: eBT8zXopEJD0hEKB1SQv7Kyv1s618w4vwofchDrnZvE=)
2: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: vMGnwA2xpq4QvpCNqaKRAPZGxsbB0A1fJfOxfbC2oj4=)
3: F2706122D16E11F08E21851DC4F9AE02.roa (hash: 1g/LYub57mHA3FKdRrewudn4T1lvhyuClXZ61Nv+ZNw=)
4: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: sYy/5q9YDB/cIRu+BDtkJ8+lJ/FCCk8GJXN6Q05+XyA=)
5: E6C709BAEADD11F088D8AEF6666F56BC.roa (hash: rP8vwuNVrV+XZ94mS6lCZynoh25REFwHFSgqyDq/aEE=)
6: C5C77866584111EE85E40820C4F9AE02.roa (hash: pdM+P+02WfirDBU7ez3rFKthQlrXbj54VyWDtVJ3HCs=)
7: C55784DE584111EE85E40820C4F9AE02.roa (hash: x8Fnq8EKLvBxDSGqIJ7xq0nW22TsvsoXDLqk5JiiEI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388
Validity
Not Before: Jan 24 23:13:06 2026 GMT
Not After : Jan 31 23:13:06 2026 GMT
Subject: CN=69755202-2ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:0e:81:7d:67:cd:94:ac:fd:99:5d:52:e9:
60:cc:b0:71:61:b1:9b:34:82:cf:9f:11:66:c1:c0:
d8:92:da:1b:6f:14:64:60:92:44:fa:a6:45:a0:e0:
2d:ee:46:4b:b5:37:cd:aa:fd:05:95:d3:74:3c:42:
6c:a0:d1:0d:92:5e:b5:f4:64:48:06:07:33:fc:c5:
08:6c:03:38:76:20:bb:6d:61:be:a4:7e:cb:93:65:
ca:6c:aa:c3:d5:03:f7:89:12:5a:97:b7:38:9f:a7:
cf:39:22:de:d2:5a:2c:f7:7d:bf:3a:28:98:7d:7e:
c0:6f:c7:6a:8d:16:0f:a1:a0:a5:b0:2e:24:11:7f:
60:8a:f1:a9:7b:93:70:05:bb:88:ab:c1:60:b3:7b:
f2:f9:ea:06:ed:6d:1c:c4:3e:fb:af:a2:6e:78:fe:
84:e0:ec:9a:f1:4a:ca:68:d7:4c:bb:b6:d5:a0:3c:
d4:7f:f8:70:90:0d:9f:a1:2a:22:06:ad:6e:55:9c:
d6:d1:d5:94:91:91:34:6e:c9:7d:38:4e:d6:ff:7b:
68:d5:90:84:9a:c0:e5:48:1c:ef:c7:84:5d:01:7b:
44:00:11:62:6b:4b:cf:45:fc:f3:9e:d7:81:78:4d:
96:ca:21:d1:c4:e7:7c:1e:c9:25:9a:a2:f7:21:83:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8E:B6:48:0C:B1:57:B8:C7:13:DE:E2:FD:A4:8C:44:2C:D9:16:D7
X509v3 Authority Key Identifier:
keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:ad:68:b0:38:fd:59:7b:9a:90:d7:9f:c5:fa:24:93:5a:64:
41:1c:dc:de:ff:b9:5e:0a:0d:b0:5f:0e:b1:2a:32:04:77:ee:
a4:db:84:c0:53:3d:a2:7c:43:f4:6b:ab:c2:ad:9a:7d:de:d7:
7c:10:85:1b:33:06:85:eb:2b:08:12:7b:ac:4f:ea:1b:37:95:
ea:d6:aa:68:69:70:68:bd:83:61:fc:c6:09:28:d8:b1:65:2f:
9d:87:f3:a9:08:3e:da:3c:b6:00:c8:70:99:54:d0:7e:89:7b:
28:88:b6:f1:4d:d8:c6:82:f2:86:4a:57:1f:d5:de:4c:43:24:
73:39:54:bc:33:59:8a:8b:24:2b:67:be:a9:3c:09:6e:0f:12:
03:ab:10:5b:7f:76:4a:b2:e2:67:71:3e:aa:ed:5d:ad:3a:23:
71:71:e5:70:87:fa:6b:cf:4c:8b:7c:66:8b:dd:4e:1d:2f:c4:
21:a5:56:4d:08:91:ca:ce:48:6f:27:4b:f2:58:f2:36:0f:4c:
45:11:47:fa:09:e9:d1:d3:ef:80:29:ee:83:e5:c8:92:41:47:
63:78:61:25:72:67:b5:27:26:3d:7f:33:d2:58:16:32:e1:c8:
51:68:b8:b1:65:19:81:9d:60:7c:4a:3a:1a:b0:29:e7:d7:45:
51:0d:af:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:04:06 2026 by rpki-client