This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
File: 2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft (raw, json)
Hash identifier: ZLCrTX/H7YQKvuvAhfFbtRHypOGwnBbe0rsh0S+6a/0=
Subject key identifier: DE:A1:3B:96:F8:13:78:73:C7:4D:94:FA:A1:8D:08:DA:9C:13:9B:4D
Authority key identifier: D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F
Certificate issuer: /CN=A91758EC/serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
Manifest number: 66
Signing time: Sun 25 Jan 2026 06:11:04 +0000
Manifest this update: Sun 25 Jan 2026 06:11:03 +0000
Manifest next update: Sun 01 Feb 2026 06:11:03 +0000
Files and hashes: 1: 2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl (hash: FklEy5gEB+Ru+SITysl7dIbclmry2gqX2xXJaZXadQ4=)
2: 312F0E7E6E1C11F0AB99F682C4F9AE02.roa (hash: TPTw4itouUrT3zWp67Qh/kFVGTIQgN0gjeYV7fEtXi8=)
3: 9DA6D1866E1C11F0B7ED1D84C4F9AE02.roa (hash: Ab7z11j/JWV2srLlnZVUsiX2l5YoRDQg2qGXrcUnimg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl
rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758EC, serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F
Validity
Not Before: Jan 25 06:11:03 2026 GMT
Not After : Feb 1 06:11:03 2026 GMT
Subject: CN=6975b3f8-3a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:f5:71:4d:b3:25:c1:ba:eb:6f:f8:99:c9:
84:22:d6:7e:09:e3:50:4e:c5:7c:6d:dd:70:71:28:
e7:e8:2d:10:ec:af:50:04:02:e1:9b:20:0e:a8:31:
28:f7:1c:65:31:04:55:49:85:f6:88:d9:06:4f:2a:
72:ab:43:d2:6e:5e:f8:cd:59:dc:7f:38:7c:f8:4f:
aa:b9:fe:d2:ad:70:b5:6d:d4:f4:45:f2:e3:c2:92:
b9:1f:bd:1b:25:c1:62:20:9b:19:17:7e:23:d1:76:
28:1d:6e:75:d2:30:e5:ce:93:59:cd:ac:ac:11:72:
66:19:b9:ab:bc:4b:14:10:81:5a:72:b4:16:ca:d6:
47:5a:f6:3c:bb:76:e1:75:df:1f:c8:cf:6c:6d:51:
eb:85:5b:a9:cb:bb:2d:be:c8:78:b7:3a:33:01:11:
96:f0:d8:18:5b:3c:9e:b2:05:c5:83:e6:ec:5a:97:
4d:d8:f4:a9:b2:c5:e4:1f:0c:eb:d4:78:da:2c:e1:
91:cb:1d:14:1f:c4:51:53:bc:a9:50:f3:d1:d3:81:
af:4d:9d:ac:25:53:ac:55:6b:fa:f9:4e:59:98:98:
05:1e:f3:c9:a6:70:a8:8c:49:bb:6e:c4:ef:ef:83:
59:25:96:e2:0c:48:ad:02:8f:94:2e:b9:bc:72:97:
7c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A1:3B:96:F8:13:78:73:C7:4D:94:FA:A1:8D:08:DA:9C:13:9B:4D
X509v3 Authority Key Identifier:
keyid:D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7f:23:7f:73:2c:95:89:44:55:be:53:f1:61:89:aa:ff:30:
f4:03:07:bb:50:47:6c:12:8a:28:c3:59:db:da:05:03:ee:a6:
01:63:1a:a2:0e:74:4b:e3:2e:d9:f4:5e:bd:3a:2e:79:39:42:
89:1a:6d:3e:8d:8f:56:95:5f:40:81:4b:b7:94:b0:b2:74:1d:
64:e6:84:12:0b:e8:33:c9:59:ca:41:2a:b5:8a:f8:fb:92:8c:
de:09:3e:d2:0b:dd:5a:3a:11:cc:a7:a7:f7:eb:f9:83:51:fe:
b6:ba:a5:2d:e0:b7:07:c2:00:4f:16:e6:2e:75:02:4d:21:4b:
14:ea:3b:19:c9:71:08:f1:fa:59:b1:8e:b0:71:b8:0c:8b:fd:
c3:17:a7:04:2b:06:78:9d:f3:63:48:03:6b:dd:67:db:cb:f9:
dc:dc:fd:4c:c3:2d:54:c7:9e:fa:ac:f2:b6:ce:1c:86:cc:b3:
e6:5d:0d:22:c0:17:d8:62:1f:42:0c:ad:e3:de:91:37:ce:f8:
c8:b8:24:b0:cb:71:20:db:8f:b7:dc:99:cb:ba:cd:19:98:4e:
89:3a:7f:bb:7e:91:bf:eb:43:ac:c3:4d:ce:4d:91:e1:79:55:
70:ce:2d:b0:2b:d7:d5:96:a3:ec:e2:79:47:24:33:05:a9:2a:
fd:3d:f5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:20 2026 by rpki-client