This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
File: EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json)
Hash identifier: tnPYosqhKyuNt+Rah9IDJYdZs/9pFJyx1R/tJ4laQBY=
Subject key identifier: 89:67:FA:9F:69:71:19:C6:2D:B8:0A:68:FC:46:9E:19:F1:8E:0D:AB
Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
Certificate issuer: /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
Manifest number: 0110
Signing time: Sun 25 Jan 2026 04:09:06 +0000
Manifest this update: Sun 25 Jan 2026 04:09:05 +0000
Manifest next update: Sun 01 Feb 2026 04:09:05 +0000
Files and hashes: 1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: pRA3IfLTHHSxzCYlBgKiNa+zTrGScxJOfmqEZGg73J0=)
2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: UXnC/XoVUkLq/3kEuo54UNzjcpY8CVmcAHE/kWC3Jds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Validity
Not Before: Jan 25 04:09:05 2026 GMT
Not After : Feb 1 04:09:05 2026 GMT
Subject: CN=69759761-aacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cd:fd:40:55:d7:d6:bb:32:be:72:ab:7e:ea:
71:61:2e:1a:eb:84:33:8c:2a:fb:93:8f:c8:c7:cc:
e1:be:09:80:d0:a6:22:e0:44:0f:82:de:b5:ac:7a:
0b:2b:ad:81:dc:ba:58:93:f2:ab:72:26:bb:62:b5:
c6:02:70:04:ee:96:ba:22:88:ae:cb:ac:d1:7a:ed:
74:21:1d:65:1a:8a:26:08:58:45:be:29:a5:a8:9b:
35:4e:71:03:9f:af:ef:87:63:aa:74:d5:b5:e3:fd:
67:c1:2d:73:fe:f2:03:be:57:fa:f8:0b:06:95:83:
08:55:62:e4:b8:62:a6:e3:d7:1b:1f:3b:44:17:0b:
1e:81:31:66:ae:4e:dd:06:cc:2e:17:e7:50:d0:f8:
3d:be:53:59:f1:7e:10:33:d7:ee:74:99:3b:d5:b3:
70:c6:c7:ac:23:73:4b:5c:c3:dd:6b:91:d8:2f:db:
26:1d:64:9e:19:d4:f5:ab:34:a4:a1:06:54:11:d3:
c9:45:d5:b4:08:f1:fe:cb:aa:8c:ab:7b:69:90:38:
39:d4:51:89:0e:94:77:39:9b:be:dc:59:2c:72:78:
8b:48:8e:52:0f:aa:57:04:1a:75:8a:f9:c4:47:7d:
87:60:ea:77:2b:54:76:6a:13:23:63:bd:30:73:83:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:67:FA:9F:69:71:19:C6:2D:B8:0A:68:FC:46:9E:19:F1:8E:0D:AB
X509v3 Authority Key Identifier:
keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:00:c0:1e:b9:24:bc:bf:1f:d7:fb:2b:50:be:40:15:48:b3:
ce:6d:fe:a2:3e:61:5f:5d:42:02:cb:6e:e5:b4:03:62:a1:fd:
35:8f:4a:2b:54:0d:48:59:35:d4:52:36:21:97:ed:a6:68:c9:
27:d6:1a:47:6e:d4:c4:98:ad:27:31:c8:6b:73:4c:a1:50:d5:
b5:0b:8f:23:4b:58:f7:4d:3b:d0:f2:ac:58:a1:e4:d8:34:19:
5e:92:f9:b8:57:ca:b6:da:83:21:7e:50:6d:60:0d:c2:50:23:
5e:b5:7d:ef:e6:f4:fc:d9:68:bd:b2:3b:91:bb:f4:f0:2e:5a:
ed:52:01:f3:b3:9d:82:f5:84:ee:65:28:0d:2e:60:08:89:8c:
ac:9e:95:0f:0a:1e:95:d5:eb:bc:06:e5:04:2f:20:9c:6b:16:
eb:cb:ba:05:d6:0f:f2:b3:93:c5:cb:05:83:21:90:17:c8:d5:
9d:c4:93:e0:da:dd:fd:cb:9d:9f:e5:08:90:2d:23:3f:87:81:
98:84:0d:0e:96:63:d7:f1:8c:82:00:65:56:e9:a3:53:20:7d:
45:d7:01:e9:89:d7:0e:72:78:14:45:3b:2f:ae:42:1e:ea:3a:
d2:b6:1a:4b:3d:c0:be:b1:ed:17:97:28:3d:e8:f0:22:cd:04:
dc:b9:a2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:02 2026 by rpki-client