This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
File: T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json)
Hash identifier: fcOBWRIiVujLx6TUfL/8niAvKXG8LcdC6xg3Na0kg68=
Subject key identifier: EB:C6:DC:63:25:BA:87:E8:05:CF:47:36:9F:D3:EA:0B:27:C5:DA:91
Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Certificate serial: 0D04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
Manifest number: 0CFC
Signing time: Sat 24 Jan 2026 17:45:10 +0000
Manifest this update: Sat 24 Jan 2026 17:45:10 +0000
Manifest next update: Sat 31 Jan 2026 17:45:10 +0000
Files and hashes: 1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: upf1GsGKqc2KoWdbj/vBbkf1kvHeBZQpzJ5ClP+9UC0=)
2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: TQudNrBg1tAuuiY/zVaf2qIyDj5AjTY8tAQkyrZyuYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3332 (0xd04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Validity
Not Before: Jan 24 17:45:10 2026 GMT
Not After : Jan 31 17:45:10 2026 GMT
Subject: CN=69750526-c524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:71:f3:57:7e:d4:b1:08:91:e3:1f:b9:53:
0f:64:18:40:74:5c:72:69:7e:d2:c8:20:a1:ad:a2:
9a:b9:de:3a:6e:e6:06:75:07:78:f8:14:2a:1a:bc:
43:83:52:2d:70:4c:22:e5:03:11:ee:b5:44:b0:d6:
9c:ad:15:44:cf:a8:d4:3e:c0:aa:09:1d:aa:45:69:
8d:99:3a:df:a7:51:a7:be:91:c8:4a:07:9d:8c:ea:
c2:f1:c9:c1:b0:9d:f1:16:4e:b4:9e:b5:ce:c9:1e:
fe:25:a0:08:b5:6b:f2:f6:3d:35:b9:ea:8e:be:c4:
b2:13:77:4d:86:a3:78:45:39:da:d6:49:da:9e:db:
2a:f0:64:96:53:f4:1e:5d:c8:66:a1:ce:8d:f7:1a:
a2:c4:9f:0d:19:67:1e:3a:dd:c4:4f:d5:ce:76:b7:
26:1c:ed:14:6b:e3:3c:10:90:62:7c:6a:53:63:0e:
99:4d:57:ee:e3:bd:88:30:81:08:5a:82:dd:8c:5f:
9d:89:d9:b9:1c:43:21:15:7a:f1:2e:9c:4f:1f:9e:
db:b9:40:e7:d1:db:37:d8:dd:8f:dd:2e:97:93:12:
ad:9a:72:c8:3f:f8:ef:ce:dc:b2:0d:22:13:25:d9:
c8:d7:f9:55:29:f6:8b:e8:7b:4c:d1:73:70:95:fe:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C6:DC:63:25:BA:87:E8:05:CF:47:36:9F:D3:EA:0B:27:C5:DA:91
X509v3 Authority Key Identifier:
keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:79:3d:41:d9:2a:6f:71:52:13:5e:7b:05:5f:46:da:e4:02:
dc:47:e8:6d:b8:6c:12:6c:a7:f0:1a:1b:40:fa:e8:79:16:be:
6f:f4:97:81:0b:0e:6b:1c:24:b8:e3:9d:23:32:94:4a:24:56:
6c:3f:6e:83:a7:3a:16:86:82:53:b4:3b:52:5e:1b:9a:9d:cd:
2e:77:ce:33:73:a0:b0:1b:71:45:72:4a:42:94:43:65:b2:80:
f4:72:3b:43:3e:f1:82:ff:ed:b2:0b:af:92:0d:97:2e:85:d2:
34:36:1b:f5:dc:00:da:ce:ac:bd:e5:88:e8:40:ba:73:6a:cb:
be:20:35:a9:a4:70:52:65:a1:6d:56:dc:f0:84:f7:4e:f0:99:
5b:b7:4a:78:7a:54:70:b4:02:41:d4:22:c4:1b:1c:ba:e7:71:
2c:97:8d:b7:56:a2:ba:19:b3:9b:2f:69:13:fd:34:e8:ed:a0:
f4:a2:e6:db:bd:ce:93:78:eb:e9:c7:db:cb:e3:2d:1f:a6:0b:
69:5d:e2:03:53:8b:c7:d2:34:e0:89:83:90:fe:df:10:f2:39:
be:8c:0e:b3:3d:0a:a1:50:97:ac:e0:3d:33:34:3b:8d:b4:17:
b1:05:30:ae:26:81:8a:f2:2b:40:80:1e:0e:26:e1:a2:0a:44:
50:a2:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:36 2026 by rpki-client