This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
File: rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft (raw, json)
Hash identifier: 2Tg6mKlG45SfqXGMDI0RDM11UqujHPDMpXvoMQt0He0=
Subject key identifier: 40:93:9A:67:E6:1A:F2:DA:E9:08:FF:36:23:30:E3:3B:61:31:08:74
Authority key identifier: AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75
Certificate issuer: /CN=A9172FC5/serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
Manifest number: DD
Signing time: Sun 25 Jan 2026 04:48:59 +0000
Manifest this update: Sun 25 Jan 2026 04:48:59 +0000
Manifest next update: Sun 01 Feb 2026 04:48:59 +0000
Files and hashes: 1: rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl (hash: Cj8upYHufdkZRLrfEMaTF34u5pmEQtKOC9X9T2xjslw=)
2: 15B99EFC016111F0B1B6A34EC4F9AE02.roa (hash: u84W1M8BSH4Fa+WJxMh9/IQCwGN476f0YWGryaIG1g4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl
rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:48:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172FC5, serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
Validity
Not Before: Jan 25 04:48:59 2026 GMT
Not After : Feb 1 04:48:59 2026 GMT
Subject: CN=6975a0bb-2875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:67:76:1a:39:70:6a:35:81:92:9a:51:1f:
e5:bf:af:1f:31:3f:9b:d8:6f:6d:fe:b6:e4:33:70:
65:ac:1a:70:6f:15:66:5e:d2:06:0a:5b:b6:59:a5:
72:40:70:d6:91:a5:75:f9:dc:53:f8:99:1b:1e:7a:
da:d2:c7:ba:ad:dd:ad:cc:a2:9f:ff:a2:ea:f6:d6:
0d:5a:45:0e:b2:4f:48:a6:86:ed:0d:a0:aa:82:e5:
73:bb:c2:15:ad:e6:3d:22:d0:0f:6b:b7:a3:12:3b:
3f:07:34:e8:dc:5f:af:66:1a:ed:4e:7d:18:22:87:
c6:9e:64:0b:19:f7:49:52:69:64:30:86:1c:07:db:
88:b6:e7:1a:46:10:4e:f3:51:66:a1:70:28:12:15:
ec:e7:ca:fe:43:36:f7:da:81:cc:e2:07:01:06:8a:
27:6f:df:07:cb:2f:ac:a4:5a:73:fd:a8:a8:1f:62:
84:9c:69:0a:1d:76:65:46:76:60:e7:26:07:3e:7f:
9a:72:dd:80:b6:82:84:11:29:04:34:7c:fd:e1:cf:
ad:20:49:c0:d1:8f:1c:62:b3:43:f8:6f:19:ed:39:
dd:1e:d2:4e:ce:97:4c:51:54:ac:d0:95:e1:94:b1:
a2:4b:6a:96:4f:25:72:8e:4e:f2:e4:15:b5:e5:fc:
eb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:93:9A:67:E6:1A:F2:DA:E9:08:FF:36:23:30:E3:3B:61:31:08:74
X509v3 Authority Key Identifier:
keyid:AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:97:59:be:95:91:0c:1f:f1:f4:74:56:80:a2:cf:9d:d3:46:
63:31:2e:8c:99:54:2e:0c:7e:85:d0:c8:44:88:28:41:f2:5e:
cc:88:d1:df:b2:74:55:83:47:97:ce:f8:c7:09:32:b5:37:ef:
6c:83:46:40:31:d6:c0:a8:b3:e1:60:ed:42:91:91:5c:6e:0f:
87:18:07:90:89:13:c5:32:1d:13:fc:2d:b7:f4:ec:93:6c:bb:
04:3f:7c:61:eb:db:db:af:ce:9a:71:2d:53:38:d7:3a:46:14:
9a:7b:2c:a5:56:79:80:2a:2b:94:7b:3e:86:24:81:2f:7b:fc:
52:80:b5:7d:fb:8d:3f:bb:a9:23:e8:83:d1:8a:7d:bb:bf:79:
8a:1c:a2:11:30:a5:ca:50:22:80:5a:5f:41:52:08:1e:4a:c3:
f5:3a:dd:0f:57:b4:68:44:1b:0c:bf:22:40:0a:77:c6:b4:c4:
48:8d:b7:08:c5:d9:4b:4c:e4:0d:16:47:42:e2:4d:fa:2e:70:
44:67:51:c2:52:67:a3:fb:fa:f6:3d:81:29:db:b2:06:de:6b:
60:79:a5:8b:cc:5b:cb:42:30:cc:91:61:f4:a3:e6:e4:3a:24:
b1:92:9e:39:bf:98:aa:a2:85:7b:8b:b4:e0:f8:37:74:8f:b2:
75:12:77:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:39:21 2026 by rpki-client