This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json)
Hash identifier: 1jyuH2snXU3V1xhDYVyXpsn0Ef14XIW4taKbit3cas8=
Subject key identifier: 7D:36:DD:52:A5:88:4E:95:C2:66:5C:32:A6:7B:B7:59:36:65:6F:D6
Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
Manifest number: FC
Signing time: Fri 23 Jan 2026 04:26:09 +0000
Manifest this update: Fri 23 Jan 2026 04:26:09 +0000
Manifest next update: Fri 30 Jan 2026 04:26:09 +0000
Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: /xarktfXauxSLMAYLiRmf3gry6+ACfjxpoX6JLcxjKg=)
2: A647525E853B11EFB513D149C4F9AE02.roa (hash: t1q6Mmlrz8mXbc1Vz8T8WidohHPsBk0Fmm5bZBubtH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Validity
Not Before: Jan 23 04:26:09 2026 GMT
Not After : Jan 30 04:26:09 2026 GMT
Subject: CN=6972f861-f74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:79:78:8c:68:db:42:ca:12:d9:f4:41:12:
69:f1:04:73:c6:59:86:63:58:ba:55:9d:f0:4f:83:
51:df:d7:6e:a1:0d:36:d1:8a:fd:d2:4c:75:d4:57:
38:9e:b3:19:8c:52:65:f7:8a:90:c6:b1:77:4e:66:
35:78:1c:44:07:74:28:46:37:e6:dd:42:b8:41:ea:
be:70:1d:c4:c5:94:0b:14:bc:5d:e2:1e:c4:76:8e:
75:ac:e6:ed:11:de:c1:cd:8f:48:bb:78:ee:a3:ed:
40:3c:b7:18:3b:ff:83:a6:26:d5:62:7a:78:89:11:
fb:32:b6:96:f7:41:79:33:b8:ed:44:c5:23:ea:3b:
20:c3:36:51:37:ce:73:82:fa:4d:67:62:1c:02:c4:
37:1d:d8:a1:ce:1e:05:3b:66:08:1c:dc:8e:6d:4f:
40:ff:61:ad:ef:91:58:9d:87:9e:4d:04:49:4c:e3:
aa:56:44:ef:96:03:48:cb:37:13:9c:74:24:15:8e:
d7:3b:e1:fc:53:89:71:85:1d:63:58:bc:2d:a3:4f:
af:26:58:7b:12:f5:51:6f:48:5e:93:99:30:e2:0a:
6f:4b:4f:ef:a1:bf:4c:f4:6a:a0:48:f6:d5:0c:2d:
d8:bf:46:03:0e:d0:e1:d7:1e:0d:81:8a:ec:00:15:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:36:DD:52:A5:88:4E:95:C2:66:5C:32:A6:7B:B7:59:36:65:6F:D6
X509v3 Authority Key Identifier:
keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ef:1d:49:e3:73:26:3b:09:d7:1b:9e:8e:b7:ab:61:0d:40:
2f:66:a7:0d:6d:5f:60:19:ff:7b:7f:d0:1a:47:83:de:4d:ae:
99:a3:45:99:71:fb:56:19:28:9a:b9:94:d3:24:dc:2e:98:ea:
e9:88:c4:54:4b:da:21:95:bc:ca:2d:40:bc:94:a7:78:79:eb:
22:3d:67:cb:74:74:61:92:9b:2b:cb:8a:1f:4f:ca:ea:d8:c3:
d2:be:52:87:54:ee:f3:78:29:7f:d3:35:82:cb:ee:3d:25:78:
06:ab:dd:94:75:01:df:56:ec:7b:aa:04:7b:0f:54:06:0a:cb:
45:2a:c8:3a:64:6f:b0:be:cb:fd:03:de:65:98:fb:b1:60:12:
c8:d9:27:f7:1a:95:40:4b:9d:05:2f:ac:9b:5e:33:5f:1c:51:
98:cc:0a:e7:39:dc:aa:4a:ac:68:2d:fb:93:0c:3b:9a:01:ee:
8a:50:20:4e:7a:ce:64:b8:22:c3:ea:1a:76:9c:7c:84:1e:b2:
29:a6:1a:b2:a1:81:cb:c1:08:5d:5e:fa:f9:0f:fa:9f:4b:be:
0f:52:c3:ad:b0:11:12:ee:35:9d:d8:78:da:af:81:c6:2c:05:
75:45:28:2b:aa:ed:05:04:ef:e8:55:28:d1:b9:12:95:e5:9b:
06:ad:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:29:15 2026 by rpki-client