This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json)
Hash identifier: i4PAM8MroTQ7eNpF7PiC9H8+/d+OcfFiurDggUU1M+8=
Subject key identifier: 1C:37:AD:4D:55:F1:82:20:82:DC:40:DB:0F:20:19:28:1C:81:09:59
Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72
Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
Manifest number: 0182
Signing time: Sun 25 Jan 2026 03:00:25 +0000
Manifest this update: Sun 25 Jan 2026 03:00:24 +0000
Manifest next update: Sun 01 Feb 2026 03:00:24 +0000
Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: 5Q2RHSHsbeVemBoi4cV+YM2CzKMb9YD3Xsd4ZDaEWaQ=)
2: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: vjgahSKHgAt0pKH9ZvyBQssVmzZCnj8JvOvCUHQg/Eg=)
3: 78321A66068D11EF92608943C4F9AE02.roa (hash: t3FRQePlchRMM21FbtXsaZzbDzSWRANgfDaLHDn0f9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl
rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
Validity
Not Before: Jan 25 03:00:24 2026 GMT
Not After : Feb 1 03:00:24 2026 GMT
Subject: CN=69758749-b815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:22:24:cc:49:48:f3:87:33:44:91:92:0c:
8f:49:8d:85:a5:f6:e5:05:53:b9:3c:4e:65:5b:b1:
24:74:ef:ce:6b:b0:57:b2:a1:88:2c:53:2e:c1:be:
60:31:f0:1e:6d:3a:85:6d:81:1c:7c:a2:92:71:91:
66:39:8d:86:99:e7:54:8f:6a:0a:e7:14:72:ae:fd:
29:b0:a9:00:d5:28:22:06:3e:cb:1f:27:da:ea:c4:
c8:79:cc:14:0d:64:5b:92:79:c3:27:95:ae:67:af:
27:1d:d2:df:bf:7f:ee:7f:50:1c:81:43:e9:4c:f9:
1b:41:3f:8f:33:84:03:a9:29:d0:51:59:ef:b4:a6:
52:86:2c:fa:54:82:d4:a0:18:33:97:30:fa:e8:0d:
68:2c:89:0f:00:1e:ec:07:a6:25:5e:f5:27:1c:64:
4a:0c:69:14:d2:9a:a1:f7:b6:2e:48:4b:a8:9b:57:
8f:53:4c:6e:ef:f5:db:bb:af:a4:35:9a:49:c9:3f:
ee:30:35:27:a4:cd:44:0f:f9:24:3c:95:e6:a4:f0:
58:33:68:f3:f3:7f:7a:b1:9d:7d:e3:6c:d6:49:91:
76:6b:e1:2f:d8:eb:4f:9b:04:4d:96:f5:2f:0e:aa:
65:0f:37:94:e8:28:9d:e0:75:b8:38:c7:1e:98:a5:
4b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:37:AD:4D:55:F1:82:20:82:DC:40:DB:0F:20:19:28:1C:81:09:59
X509v3 Authority Key Identifier:
keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:50:1e:1f:f7:77:c3:33:3f:f4:2b:70:fd:03:61:16:be:ab:
a5:cc:b3:62:01:cc:a0:f8:b2:82:cf:b6:07:bd:dd:9a:ba:f1:
ee:b4:18:48:0e:74:23:70:44:88:93:cb:bb:0e:99:33:3a:30:
bd:16:ce:28:c5:4a:15:cc:77:25:5b:02:32:e5:e3:96:5d:35:
25:20:b8:2f:87:bd:81:dd:e4:f7:61:f2:88:57:f0:76:e1:83:
bf:f8:a9:a2:4e:bd:f3:c7:2c:87:06:09:11:46:14:9e:00:8d:
80:26:dd:d4:b1:49:d2:47:d7:72:24:98:d8:cc:2a:b8:e1:43:
1c:39:84:f6:45:aa:27:b5:5e:e6:c2:87:85:39:59:15:58:e3:
32:ec:03:51:4d:3c:9b:71:21:9e:d6:94:63:dc:2e:f8:f3:68:
aa:f6:2d:54:8d:a0:38:0d:3d:23:41:47:a0:de:72:c6:95:f9:
e0:da:01:ae:c7:24:2f:24:4f:f8:ee:86:ab:85:2b:09:35:95:
7c:ee:69:b2:b4:b4:6a:09:cb:84:26:6f:5c:57:87:37:4d:97:
8b:a6:6b:ec:c7:ac:f2:f5:22:77:0c:ab:04:39:08:85:7e:27:
c6:1d:f5:c3:c6:61:62:b2:de:f3:c8:30:0a:b6:e6:55:8b:14:
46:86:9e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:59:54 2026 by rpki-client