This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
File: 1AwbOf4FNm7Ysj4IgLaet198kOI.mft (raw, json)
Hash identifier: EvORfpIuX2TTotGKVQoW1+93JQtTqn1JattfYnl0Dg4=
Subject key identifier: 67:1C:90:1D:72:C5:97:14:CC:46:27:9A:11:07:75:5B:6A:E5:D7:77
Authority key identifier: D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
Certificate issuer: /CN=A9171A26/serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2
Certificate serial: 0B7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
Manifest number: 0B72
Signing time: Sat 24 Jan 2026 18:40:46 +0000
Manifest this update: Sat 24 Jan 2026 18:40:45 +0000
Manifest next update: Sat 31 Jan 2026 18:40:45 +0000
Files and hashes: 1: 1AwbOf4FNm7Ysj4IgLaet198kOI.crl (hash: lGv2akap0ValjdNnYRAHj33+gPsgAquFIXt5bm5X4X4=)
2: 5C9BC9D045C311EA9DE6F237C4F9AE02.roa (hash: MFAkJWqLTCFjc2AZoDqXIN5GFKdjipOlXptUILZsE5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.crl
rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2938 (0xb7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A26, serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2
Validity
Not Before: Jan 24 18:40:45 2026 GMT
Not After : Jan 31 18:40:45 2026 GMT
Subject: CN=6975122e-617f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:de:c6:2e:f1:37:64:c7:d8:8b:14:d3:c4:
e8:74:2e:cd:57:bd:f0:79:2c:b9:b0:d5:22:19:ab:
e5:69:d8:43:17:2c:9f:d7:4a:2c:45:03:d8:92:b8:
25:7c:22:96:03:d2:f0:33:a5:a3:27:88:cf:47:2e:
b0:26:a4:32:85:ae:6b:14:d3:f0:26:53:66:5f:d2:
fe:26:24:2d:21:1d:d9:a4:c6:28:1a:82:ed:34:c6:
2c:72:d9:48:d1:c4:e4:5f:a9:37:f9:2f:3f:d4:58:
24:33:47:1b:a7:a5:65:5d:7d:fa:48:a6:14:b2:b0:
d3:88:23:10:b4:b7:98:63:f9:16:06:b8:ea:3f:91:
eb:54:e7:bc:96:3d:b2:0a:6a:56:0d:64:d0:e6:7f:
e4:dc:51:3b:14:81:36:68:21:af:8f:a2:46:98:a7:
6b:33:1b:56:1e:38:28:92:81:79:6d:62:6c:41:8d:
e3:e3:f0:86:2e:eb:cb:9f:e7:75:1b:3d:3c:fd:a4:
ba:e5:52:81:05:76:6d:07:3d:9a:e7:2e:72:4e:ff:
7c:c1:18:1b:f7:8f:bc:79:3e:33:9c:48:b3:e4:63:
aa:e6:d3:12:02:b0:1b:d0:fc:80:28:f5:b5:6a:be:
4c:cc:25:93:70:76:04:bc:60:cb:dc:5b:a1:20:32:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1C:90:1D:72:C5:97:14:CC:46:27:9A:11:07:75:5B:6A:E5:D7:77
X509v3 Authority Key Identifier:
keyid:D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:15:c9:c4:ba:1f:79:af:cf:d1:1c:43:14:47:21:29:55:86:
d8:f4:bd:bd:75:a1:64:43:b5:f5:c3:72:ff:60:0e:06:ad:bd:
f2:bf:fd:e0:6c:d8:c8:81:f3:c7:d8:b6:80:67:de:fc:fb:75:
01:ab:fa:25:3d:83:0f:13:13:e1:e9:f8:ed:30:6a:ec:72:7f:
1e:38:71:3f:05:24:2d:d3:e8:ae:de:04:d7:53:b0:1a:ea:af:
8a:f0:87:61:f2:cc:6f:c8:5a:bb:d4:27:f8:d6:16:d0:6b:e1:
d0:e5:c6:68:63:ea:91:70:18:b6:89:4a:56:b9:e4:a5:3b:c9:
86:23:78:a5:ba:44:81:11:9c:5e:7e:29:1e:5c:a9:93:c6:69:
f7:94:79:54:d2:a4:42:df:1e:65:a2:0b:4c:ae:e1:92:29:76:
48:97:d4:26:2f:ff:96:ac:bf:46:0b:bf:68:5c:a7:27:24:1f:
dc:1e:80:d8:3f:a4:74:87:e6:ec:2f:43:68:aa:19:63:43:50:
17:ba:2d:1b:49:ce:5a:73:99:7e:05:d2:40:a7:09:47:e4:cd:
1c:23:52:76:eb:12:81:bf:d7:d3:cc:40:ac:f1:ba:fa:ed:93:
39:c4:b6:d0:ae:09:c6:0e:31:99:f0:7d:3f:36:9f:d0:5c:ed:
94:11:36:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:52 2026 by rpki-client