This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
File: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json)
Hash identifier: FwnnLzm5v44/7hxOHzKilwGySbr/iy+Z2d7gZ0VpE88=
Subject key identifier: FC:47:17:52:41:C1:E3:DB:E4:AF:00:76:F4:A1:98:87:8F:57:48:0A
Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
Certificate issuer: /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
Manifest number: 33
Signing time: Sun 25 Jan 2026 06:37:12 +0000
Manifest this update: Sun 25 Jan 2026 06:37:12 +0000
Manifest next update: Sun 01 Feb 2026 06:37:12 +0000
Files and hashes: 1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: SnKVS3PcRtXy/spI+STqWNylewncuW5wrTpmWVgo9cQ=)
2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: AgPQ+g0vVS1AcBmkA5KDmZRoTP4TQytZY60/q5U1Jhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Validity
Not Before: Jan 25 06:37:12 2026 GMT
Not After : Feb 1 06:37:12 2026 GMT
Subject: CN=6975ba18-40b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:66:80:33:97:e7:d3:b5:b9:e7:16:a4:ec:
3e:ca:fd:fc:c1:2b:fd:d7:89:89:d2:0b:b1:5e:63:
0b:bb:57:25:95:1f:d4:29:1d:f4:65:31:04:55:e7:
73:ef:0d:6c:67:1c:97:ae:3c:8c:88:b1:d2:7d:1a:
84:10:17:35:19:53:be:b6:f2:65:98:a5:88:72:25:
54:60:84:8d:25:39:ba:4f:64:73:b5:99:28:51:c7:
3c:bd:74:aa:8a:49:4f:6c:f8:2b:87:34:75:70:96:
f9:f3:1c:f6:8c:1e:bd:c9:16:8f:31:8a:fd:ca:f7:
62:51:6f:5f:65:37:21:be:24:9e:37:d0:7f:79:49:
ec:dc:bc:6a:b8:de:d7:41:9e:8d:08:96:c3:0e:26:
11:3a:73:67:2f:e6:e9:8d:c9:2f:2e:e6:0a:f6:0d:
94:75:36:16:6d:44:d4:70:0b:bc:f9:59:37:69:6d:
f7:48:1e:18:71:58:d1:71:70:09:65:b2:ab:74:e7:
ca:c6:e3:9b:7f:36:93:13:b4:41:b4:a4:66:c3:3a:
45:94:08:14:9d:fb:90:63:81:db:20:03:fd:31:92:
b1:d9:76:d1:c6:d3:8c:be:55:fd:4f:33:9e:3f:37:
90:84:5e:71:13:8b:8c:ab:33:1c:e7:5f:f5:f3:ff:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:47:17:52:41:C1:E3:DB:E4:AF:00:76:F4:A1:98:87:8F:57:48:0A
X509v3 Authority Key Identifier:
keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:54:1d:c6:6f:aa:dc:45:18:64:e1:1b:4a:47:6d:cd:15:de:
df:c5:48:ee:d3:74:18:be:18:30:53:a6:11:2f:42:e2:03:b5:
24:05:60:c1:01:39:d1:e5:85:74:eb:ab:0f:95:ce:59:1f:73:
ce:ab:b0:b5:ac:2c:42:55:d5:27:92:19:4b:63:63:1d:57:e3:
62:7c:be:50:84:9d:84:cb:64:d6:7a:8a:52:e1:f4:a0:d7:9f:
f8:ee:25:9f:1f:2f:6d:38:c0:50:02:cd:64:54:71:00:da:ac:
fa:b9:27:16:23:b1:11:27:31:7b:d4:1a:b9:e6:5d:aa:79:25:
78:44:0f:6a:f0:54:fe:50:f3:1a:36:e6:5c:d9:50:43:b6:e4:
f0:14:4f:10:cf:a0:8d:9d:a0:83:be:12:66:ea:96:8a:ad:de:
cf:4b:25:6a:4b:39:65:b8:e5:c6:d6:30:ca:fa:f5:33:7a:2b:
9c:59:dd:db:b7:8d:71:6e:82:8f:16:59:20:1e:07:91:52:cb:
3f:cd:89:d8:a2:fd:72:ca:d1:b1:a3:63:4b:5a:3b:68:37:fb:
0d:03:af:14:48:61:5f:c3:5f:92:84:f8:93:46:54:07:25:e8:
77:4c:c3:08:e8:f4:dc:89:30:46:c3:57:d8:74:da:1a:31:4f:
33:6a:0b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:38:58 2026 by rpki-client