This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
File: rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft (raw, json)
Hash identifier: F2HmRi0SId/UA72RSXCcIi4/IOU90GpuqhCr3V0Jhhc=
Subject key identifier: A9:8B:A5:E0:91:88:76:F6:A6:35:E3:1D:46:0D:9A:FC:6E:7D:F8:5E
Authority key identifier: AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7
Certificate issuer: /CN=A9171155/serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
Manifest number: 45
Signing time: Fri 23 Jan 2026 06:24:30 +0000
Manifest this update: Fri 23 Jan 2026 06:24:29 +0000
Manifest next update: Fri 30 Jan 2026 06:24:29 +0000
Files and hashes: 1: rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl (hash: 1o4R1D/CmmmtLtIPWqOYcysgq9K5VcFSJkVn803Pq+A=)
2: 134623AC931511F092E28818C4F9AE02.roa (hash: iROhbsxSxTl+6rqtSvLAjrMVa4sfvVVCQefqUmfddwg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl
rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171155, serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7
Validity
Not Before: Jan 23 06:24:29 2026 GMT
Not After : Jan 30 06:24:29 2026 GMT
Subject: CN=6973141e-5105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:c2:01:e3:2d:02:d7:29:a2:12:18:ba:cd:
27:9b:f2:c5:54:41:11:ec:41:58:f1:8f:1c:1c:d7:
47:78:25:f4:d4:6b:d2:8e:f3:81:3d:f0:a7:e3:ee:
c3:d4:5b:1f:fa:b0:47:de:5e:8a:af:0b:fe:27:c4:
65:d6:ca:6e:f7:9a:8e:fe:58:2a:0c:eb:3e:07:7d:
9c:cc:2c:11:e3:6b:a6:0f:af:e9:8f:ab:6e:83:10:
38:a4:86:92:97:e6:86:63:57:e7:44:02:6b:ff:1c:
08:ee:bb:bf:ab:a6:75:8d:74:14:6a:99:4a:70:0a:
38:91:b9:e1:7e:c7:27:b1:51:41:94:13:9c:9f:cf:
96:0c:e5:1e:c4:1a:77:bf:ae:d7:03:96:fa:38:30:
66:7d:3b:7e:75:d7:38:e9:b9:51:e5:eb:f8:21:3f:
e1:ad:94:37:cc:41:88:1b:36:3d:99:9d:7b:97:45:
07:1e:27:45:55:e8:12:c1:87:1c:b1:54:86:18:c4:
71:f6:bb:69:9b:83:94:a1:f6:4e:c1:58:80:3d:cf:
d0:db:ae:db:f8:9f:7e:c2:5b:80:e1:43:68:79:e2:
53:f9:29:c7:91:28:19:6a:9b:30:5e:08:66:af:e0:
66:1f:4f:2f:dc:91:aa:6b:3b:ae:ed:01:7a:99:2c:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8B:A5:E0:91:88:76:F6:A6:35:E3:1D:46:0D:9A:FC:6E:7D:F8:5E
X509v3 Authority Key Identifier:
keyid:AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:cf:5f:1e:c2:5b:02:61:9b:d4:3f:66:17:ca:8c:8f:10:78:
e8:ad:9c:6d:e8:5e:f9:81:29:b0:b7:14:fe:e8:c5:82:85:3f:
2e:e1:3f:5b:9f:97:98:30:08:32:1b:69:8e:6f:06:12:a8:1f:
e3:76:a1:39:c2:0a:25:12:b3:e4:06:87:0d:c3:18:0d:5a:af:
1c:bb:33:7e:f6:9f:cf:7c:60:76:3c:ef:38:74:b0:f7:95:ff:
32:e0:ad:10:b4:8a:f7:dc:d5:1e:3b:3e:08:51:09:f4:05:13:
58:3a:4a:9f:b7:03:64:d3:45:fe:78:d5:53:bc:b3:66:5c:cf:
00:8a:80:7f:44:dc:f9:5e:e2:03:c5:87:c0:c5:05:47:e6:9f:
b3:62:34:11:1d:a2:25:b3:f8:cf:c8:be:60:ea:f4:92:6b:61:
07:3d:79:85:24:55:21:53:a2:04:01:bf:d7:23:d9:23:bf:60:
32:6e:38:a6:d1:ea:28:ea:ec:2a:7d:bc:3b:2a:ac:5d:ef:f1:
73:6b:34:67:44:6d:2e:16:4e:48:f4:dc:da:a9:e8:b2:f8:e6:
f8:84:e4:ae:f7:3d:19:76:23:f6:6b:1a:bd:97:3b:c6:e2:ae:
c0:87:f4:b1:bd:91:0a:25:b9:a2:4f:07:d6:a9:24:31:c9:3e:
ec:47:97:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:39 2026 by rpki-client