This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
File: JZaec6mNmfQurIlCbGuUk8hdMxo.mft (raw, json)
Hash identifier: /oxpabKKG4AqKe2xzmeLhw787RpD6CklzshXuYkCGK4=
Subject key identifier: CE:A1:9E:F2:82:D2:C2:90:C8:5B:8F:8D:EB:57:4D:95:22:B1:51:F1
Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A
Certificate issuer: /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
Manifest number: 01B5
Signing time: Sun 25 Jan 2026 02:24:28 +0000
Manifest this update: Sun 25 Jan 2026 02:24:28 +0000
Manifest next update: Sun 01 Feb 2026 02:24:28 +0000
Files and hashes: 1: JZaec6mNmfQurIlCbGuUk8hdMxo.crl (hash: ynSzTlnVZrQ47ITFXLZ9kBCqiI14enzeC4T/aYHTQxE=)
2: 06BD1FD4D76F11F0A9A4AAFE78D3641D.roa (hash: ewWeev4YUI3dE6otxnE32uUrvsrjdS3y026oghavMGU=)
3: 07C2DDD0597011EE9C188A29C4F9AE02.roa (hash: gKjXag0sfARiLyE6YNWzcV2bYu/wNp5XI3N1jUN8tAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl
rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175911, serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
Validity
Not Before: Jan 25 02:24:28 2026 GMT
Not After : Feb 1 02:24:28 2026 GMT
Subject: CN=69757edc-f130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:8a:d3:72:37:7e:0f:65:bf:9a:87:9a:db:
33:0b:04:f7:48:91:9c:19:70:ef:9b:a5:e2:69:5a:
c6:5d:c1:f0:13:f4:15:c7:15:25:95:d3:e7:7f:ec:
76:52:a2:13:ae:cd:57:7f:fc:91:b7:2f:db:75:f4:
e6:f7:c6:0d:2c:4f:14:af:44:b8:5f:2f:fb:35:2b:
66:37:91:4f:81:e3:be:ab:59:3f:9f:87:1c:fe:1e:
09:39:c4:7f:de:65:e7:44:68:ed:4b:58:91:03:10:
03:40:29:79:90:de:98:04:10:6e:44:ec:ac:30:31:
36:d5:77:c0:af:55:d1:ef:11:7f:c5:b6:03:bb:68:
13:7a:ce:cb:7d:47:eb:01:c8:ea:29:fc:d6:cf:c8:
49:49:61:17:0b:93:3f:27:1e:2d:fd:28:3c:77:e0:
76:f6:1b:74:5b:d1:a2:e1:ab:87:e3:27:f2:fc:56:
70:97:86:a8:26:54:f7:df:87:43:f0:d5:3e:51:84:
78:40:d3:23:69:53:8a:bb:eb:83:1a:47:2e:8c:4d:
ef:6b:1f:cf:0e:20:fc:a3:e2:d1:bc:02:98:8d:73:
78:09:d5:33:d2:0d:e5:ac:57:ca:53:12:02:e8:87:
41:e7:c1:22:97:d9:55:a3:4c:3a:5a:7b:da:8c:63:
8c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A1:9E:F2:82:D2:C2:90:C8:5B:8F:8D:EB:57:4D:95:22:B1:51:F1
X509v3 Authority Key Identifier:
keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a0:6d:49:50:c9:83:a9:a7:ae:a9:bd:fa:27:20:81:5f:70:
26:d0:77:a1:52:97:a8:74:69:50:df:e1:46:bc:b1:35:2e:32:
da:0e:ea:db:34:e7:64:92:b0:41:2f:5c:3b:c4:45:09:ba:48:
6a:45:90:0b:17:53:08:dd:4a:f1:70:1e:4a:6a:6f:29:45:01:
1a:77:a3:de:49:d9:d0:bc:1d:38:1f:3c:32:5c:d0:99:58:13:
b2:0d:7c:40:1f:1e:28:b2:e2:13:70:41:f1:e4:42:31:75:0b:
af:de:f8:be:49:a0:3b:a6:a9:35:4c:af:d1:e6:d5:6b:07:76:
c4:4d:de:f9:8c:e9:0f:06:6c:5e:c9:53:06:2a:c2:e1:f1:2d:
66:8c:dd:17:ec:2f:4d:fc:32:76:d5:9e:45:5d:7d:59:85:f1:
88:2a:80:37:12:8b:5f:52:5a:c8:df:0e:95:17:ee:f6:90:fa:
9c:74:9e:c5:11:e0:99:83:42:e7:0f:18:f9:1d:75:c2:9c:ba:
28:70:aa:73:b1:56:6a:35:03:00:69:a4:87:46:0a:0f:f1:5b:
d6:01:d2:94:15:b9:31:4a:e2:c5:6b:cf:60:92:29:cd:8a:f7:
69:cc:59:6f:83:af:3c:cb:1c:e1:6a:20:62:c3:5c:b9:b0:95:
d9:9c:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:27:16 2026 by rpki-client