This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json)
Hash identifier: kMpgZ7vMjjxF11zoxMUqWY3ZEZubs6px0bL7thYkSW8=
Subject key identifier: 32:EB:BC:3E:DF:EB:2D:0A:EB:38:AB:0F:DF:A9:2F:D2:5B:35:56:C0
Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC
Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
Certificate serial: 02AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
Manifest number: 02A3
Signing time: Sun 25 Jan 2026 00:40:23 +0000
Manifest this update: Sun 25 Jan 2026 00:40:22 +0000
Manifest next update: Sun 01 Feb 2026 00:40:22 +0000
Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: 50Tz7mtOG6gGSrFo+pCVwKWsZ5uc/UDcem8fGsCR2uQ=)
2: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: 60cLUiwIo3OFkat+dtGQ2GzMMVBuPgmzgGRtVgQi3Xo=)
3: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: jU5Md8Gh4CBr/ZHApHJnxAlGLX6cvpq9zc86CFRKi+8=)
4: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: pYe0+bHqCYcW1iVEEt6tk6dblnlCH5OApr9vBfmnQiE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl
rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
Validity
Not Before: Jan 25 00:40:22 2026 GMT
Not After : Feb 1 00:40:22 2026 GMT
Subject: CN=69756677-f5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:e8:c9:97:2f:5f:a7:25:fe:f6:70:c3:fb:
60:a6:14:48:0f:19:5a:cb:1c:6b:d0:52:e0:83:bf:
40:e1:1b:37:bc:67:4d:dd:ed:c2:d1:17:66:da:75:
8b:d4:e7:95:54:b8:af:4e:5d:24:b9:1b:46:a4:a5:
76:fd:c0:2b:9c:20:91:d9:62:a3:3c:58:ee:ed:8c:
06:74:3d:5a:c2:8e:67:5f:aa:3a:e8:e4:67:bd:2c:
4f:0f:ff:e4:9e:48:9b:c4:ad:ba:cf:85:f1:6a:ff:
ba:b6:ac:97:29:50:69:12:8a:c9:04:63:4c:27:66:
fb:6a:9a:79:cb:22:39:2f:df:ca:bd:5f:3c:7a:39:
9a:e8:45:49:2f:3e:4c:9b:80:9c:a6:38:30:12:33:
89:9a:9a:bc:1c:e1:cb:18:3c:eb:a4:84:25:88:45:
86:a5:72:db:4b:59:81:b9:7b:37:6a:dd:d1:23:13:
33:3d:31:79:4d:c6:29:c9:2a:14:e6:36:d2:6c:bb:
4b:09:48:38:ba:3c:36:bd:6c:c1:c9:fb:74:fc:41:
15:f2:f1:ab:e8:14:05:80:b6:74:12:c5:fc:12:6a:
e1:1e:8f:cc:26:a0:dc:41:e2:33:f5:b7:f1:b3:23:
66:30:61:52:42:f8:e4:c9:22:48:a4:0a:b1:51:e9:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EB:BC:3E:DF:EB:2D:0A:EB:38:AB:0F:DF:A9:2F:D2:5B:35:56:C0
X509v3 Authority Key Identifier:
keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:76:65:88:aa:d2:42:34:94:db:9e:87:81:95:45:7b:3c:cd:
d5:98:cd:f8:a0:bf:0d:84:51:6b:1b:c2:31:d4:ec:be:83:80:
07:6f:95:9f:3b:25:df:12:7a:74:7f:0d:29:62:e7:b0:70:75:
ef:bc:8e:d3:b9:51:4e:21:af:09:b4:a8:93:46:81:94:fd:c1:
1e:31:8a:35:ad:8e:5b:87:bf:af:0c:7a:2a:d6:f9:30:a2:38:
57:b3:07:ee:12:bc:be:96:45:70:fa:64:32:a2:64:3b:a1:65:
d7:a2:9c:61:29:e6:b9:76:2d:53:47:36:12:38:9a:b8:13:39:
f6:c9:c2:f0:58:5d:8f:e5:73:ff:d6:ba:da:f8:43:5b:c4:3f:
98:19:c5:09:0c:d2:29:ad:55:94:e7:eb:23:a0:dd:ba:76:f2:
5f:ee:4e:24:fe:b8:e3:ba:5a:9d:bf:8b:90:a8:c0:46:05:6d:
23:b2:34:05:22:37:2c:53:f9:dd:66:1a:00:0e:3b:bb:e6:64:
89:d4:19:00:09:6a:4e:66:a3:77:4d:6e:0a:28:79:d0:17:d6:
bb:6e:f1:f2:29:e7:d0:29:49:53:dc:ce:9c:95:cf:3d:e8:39:
26:4b:56:6c:f9:80:1e:60:4b:34:03:b6:19:37:a7:52:89:4f:
39:ea:e7:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5
Q0QzRjlCREMwHhcNMjYwMTI1MDA0MDIyWhcNMjYwMjAxMDA0MDIyWjAYMRYwFAYD
VQQDDA02OTc1NjY3Ny1mNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvfnoyZcvX6cl/vZww/tgphRIDxlayxxr0FLgg79A4Rs3vGdN3e3C0Rdm2nWL
1OeVVLivTl0kuRtGpKV2/cArnCCR2WKjPFju7YwGdD1awo5nX6o66ORnvSxPD//k
nkibxK26z4Xxav+6tqyXKVBpEorJBGNMJ2b7app5yyI5L9/KvV88ejma6EVJLz5M
m4CcpjgwEjOJmpq8HOHLGDzrpIQliEWGpXLbS1mBuXs3at3RIxMzPTF5TcYpySoU
5jbSbLtLCUg4ujw2vWzByft0/EEV8vGr6BQFgLZ0EsX8EmrhHo/MJqDcQeIz9bfx
syNmMGFSQvjkySJIpAqxUenBSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLrvD7f
6y0K6zirD9+pL9JbNVbAMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG
MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t
OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q
Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9dmWIqtJCNJTbnoeBlUV7PM3VmM34oL8NhFFrG8Ix1Oy+g4AHb5Wf
OyXfEnp0fw0pYuewcHXvvI7TuVFOIa8JtKiTRoGU/cEeMYo1rY5bh7+vDHoq1vkw
ojhXswfuEry+lkVw+mQyomQ7oWXXopxhKea5di1TRzYSOJq4Ezn2ycLwWF2P5XP/
1rra+ENbxD+YGcUJDNIprVWU5+sjoN26dvJf7k4k/rjjulqdv4uQqMBGBW0jsjQF
IjcsU/ndZhoADju75mSJ1BkACWpOZqN3TW4KKHnQF9a7bvHyKefQKUlT3M6clc89
6DkmS1Zs+YAeYEs0A7YZN6dSiU856udL
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:19 2026 by rpki-client