This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
File: CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json)
Hash identifier: +N+LnYBXOE8flyP0nMJ8UWaTD/+97uip/Qqo1tE4sHY=
Subject key identifier: 43:A2:3D:A8:BC:3B:BD:A6:A5:7E:8A:97:E5:5A:35:3F:90:C2:F5:5C
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Certificate issuer: /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial: 194E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
Manifest number: 193C
Signing time: Sat 24 Jan 2026 16:12:39 +0000
Manifest this update: Sat 24 Jan 2026 16:12:38 +0000
Manifest next update: Sat 31 Jan 2026 16:12:38 +0000
Files and hashes: 1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: tozW0XdALYxNFthjY5FRSa8yG4hsn+DvP89Ktao/6Pc=)
2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: LY7vLpDfVXZjs8mY5Lmcq8YY4mbx+XwbeXcZe9sNvfM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6478 (0x194e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Validity
Not Before: Jan 24 16:12:38 2026 GMT
Not After : Jan 31 16:12:38 2026 GMT
Subject: CN=6974ef77-eb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:23:79:bf:ea:6c:0a:fc:cd:e2:30:f1:d5:
3d:d8:7f:f3:73:c5:d9:12:cd:27:f1:e9:c8:06:8f:
46:e3:d2:ad:47:c1:92:91:e4:95:91:8e:4c:2a:12:
b0:9d:f7:38:b9:c5:65:ee:80:28:ac:be:27:aa:08:
04:d0:5a:4e:09:13:43:a4:8c:22:ce:69:77:aa:81:
1f:c6:9c:75:64:e2:69:a3:92:71:a3:83:ac:d4:97:
ef:88:da:37:67:c0:6d:7b:c6:f8:10:6c:15:13:f7:
35:10:d0:4c:5a:52:16:da:ea:2b:cf:eb:61:b1:21:
e4:46:dd:86:e5:40:39:ad:e1:a7:73:fe:d4:75:47:
a7:ff:37:1a:f3:7f:1a:e1:14:23:63:e0:c0:3c:20:
95:eb:da:33:1b:de:16:ff:14:6b:f9:5c:5b:81:9b:
3b:cd:da:2a:58:3e:28:14:50:25:1a:4b:dd:68:66:
f4:51:86:44:30:d4:7a:ee:68:55:13:83:9c:82:23:
57:aa:0d:e1:53:e9:be:d2:88:37:f9:65:ff:60:e2:
71:a0:4e:8b:bd:3d:53:0b:8d:54:3f:f4:d6:54:cc:
e0:a3:d1:76:0a:10:e6:4b:ec:59:30:54:cd:70:df:
08:32:1b:09:9f:33:67:1d:cf:0e:8d:ca:f5:42:dd:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A2:3D:A8:BC:3B:BD:A6:A5:7E:8A:97:E5:5A:35:3F:90:C2:F5:5C
X509v3 Authority Key Identifier:
keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:97:bd:46:3c:dd:3d:21:12:05:73:1c:e7:3f:24:95:cc:7b:
61:49:46:7a:cf:c7:03:fb:e8:b8:00:2d:b0:ae:ef:51:59:1a:
fd:b6:84:2b:f6:20:95:94:fe:4b:82:73:b9:7b:25:cf:8b:50:
a9:7f:fa:53:21:1f:f2:f4:04:b8:82:57:f6:5a:32:11:6e:ce:
b6:a7:ff:20:19:ae:51:8d:92:7d:56:61:65:50:4e:02:ec:5d:
81:95:25:80:91:bc:c9:c6:5c:c9:06:d7:ac:23:44:69:81:48:
3c:6d:8f:b9:ca:d0:12:49:c5:bb:3d:ff:b4:83:49:9e:bf:de:
78:68:56:a9:b8:46:2a:13:47:29:0e:e6:9c:18:a9:8f:90:7a:
4a:a0:2d:47:50:2b:70:16:80:96:78:36:06:f8:63:79:82:09:
48:4d:b8:18:89:bc:2b:79:83:9e:76:18:42:15:5d:ca:12:db:
42:a7:dc:39:28:5c:d2:db:a2:e4:c5:7f:2e:fa:ad:e2:ef:a4:
de:62:09:5a:00:07:b4:df:34:fa:6d:fc:fc:b7:cb:51:47:a8:
91:27:1b:8d:7a:88:15:13:6a:bb:3c:b2:62:8f:38:45:56:52:
e5:17:57:58:35:7d:4e:f0:37:91:db:ee:76:ac:99:d6:43:42:
e8:e1:1b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:32 2026 by rpki-client