This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
File: MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json)
Hash identifier: gHrjDwdOxFkxnNDNrnsI+btOKfSCqEUtraqVo4laihU=
Subject key identifier: CE:28:3F:F5:9F:BB:8E:CA:C6:12:C4:27:B3:D4:41:AB:BD:FC:20:14
Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8
Certificate issuer: /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
Certificate serial: 01BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
Manifest number: 01BA
Signing time: Sun 25 Jan 2026 02:25:44 +0000
Manifest this update: Sun 25 Jan 2026 02:25:43 +0000
Manifest next update: Sun 01 Feb 2026 02:25:43 +0000
Files and hashes: 1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: WeTDZtFYI82HjFbZ5KeaZLMvBchhb4InXRu3l7mLOcM=)
2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: 8DrAWcH1CiFZf57NBIX9LNcFjqWRNtaQ37ck4VIkxk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl
rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:25:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172E1E, serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
Validity
Not Before: Jan 25 02:25:43 2026 GMT
Not After : Feb 1 02:25:43 2026 GMT
Subject: CN=69757f28-8257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:d9:54:02:83:8b:a7:b3:96:00:48:6d:83:
15:33:f6:8d:e2:88:2f:6f:60:e4:c8:ef:f2:5e:a0:
10:93:bf:ab:da:73:96:24:70:98:85:d1:69:e3:e2:
7d:fc:16:eb:8c:d1:52:59:a7:ad:ee:90:f0:f9:a3:
78:57:4b:bb:17:7e:f7:3e:0d:90:86:85:76:3d:f6:
4c:f8:7a:8b:80:1a:6e:51:74:a4:52:27:96:02:2f:
80:75:16:7e:d1:55:48:9c:cb:73:53:25:f9:c9:99:
04:f5:9c:5b:14:6f:f2:9a:e8:6a:73:16:46:95:b7:
20:c8:43:14:60:9c:f8:f7:db:71:f5:db:90:f9:c0:
f8:c0:66:e4:f9:79:24:7a:be:44:dc:26:ad:06:49:
22:87:75:8f:e5:05:fc:37:94:12:fd:b5:99:a2:d8:
08:8f:73:40:1c:3e:8a:e9:b9:1f:c7:76:74:77:eb:
a5:10:f8:59:c0:94:78:31:40:9f:de:c0:f2:66:5a:
41:3d:5d:29:42:23:fe:3c:2f:26:2c:64:3c:a0:17:
f0:20:89:73:38:0e:40:2b:29:27:db:88:68:a2:d4:
97:01:12:ea:a0:f2:4b:27:d7:da:2a:14:da:70:cc:
fc:f7:8c:25:b6:eb:3a:22:cb:a5:8e:b5:ae:83:ca:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:28:3F:F5:9F:BB:8E:CA:C6:12:C4:27:B3:D4:41:AB:BD:FC:20:14
X509v3 Authority Key Identifier:
keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8d:9d:d5:9d:17:5a:7a:ae:6d:f6:48:8c:08:7c:33:73:43:
e6:60:d0:cd:d2:1c:e5:02:89:77:c5:6b:77:a4:72:b1:f7:6a:
86:be:83:ac:6b:6b:00:54:72:1c:60:30:38:ab:8b:fc:09:aa:
e5:89:71:82:c7:ee:c1:26:e3:97:0b:fd:11:16:ef:a5:31:93:
3d:23:3e:f3:3f:6b:de:ec:f6:d0:d0:24:4a:1e:59:2c:f9:ad:
b1:2b:ae:eb:c3:98:68:77:30:39:92:a2:f2:db:4f:4f:5d:c5:
6a:9f:aa:69:89:fa:99:4a:fc:61:17:96:30:c1:ad:a5:62:12:
4e:44:50:0a:cd:f0:80:ad:2d:ce:7c:45:80:73:8b:aa:4e:2b:
68:46:23:b9:79:69:3b:71:ad:78:43:cd:17:fa:88:0e:8c:8d:
8b:10:e0:c4:7b:85:5e:b4:50:42:32:46:38:7f:12:cb:c5:bc:
56:7f:75:f7:97:89:33:8f:c8:22:ca:72:83:93:97:ab:80:f7:
6b:ec:11:18:d1:6c:78:72:b4:30:bd:c3:61:07:79:36:28:2b:
98:4b:e3:62:cb:79:51:ac:3e:ed:24:9d:06:4e:27:51:87:c0:
b6:ee:1c:0c:30:51:0e:9e:2f:e1:b1:4e:f4:d1:03:73:71:19:
b3:f5:56:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:30:13 2026 by rpki-client