This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
File: Du4Pv3hqd39MJ0FT91NvPfiflJI.mft (raw, json)
Hash identifier: 2NaSAaC4Df6kBg+a7/464OJMjOuGk7kpq4BIDGlmW7M=
Subject key identifier: 42:60:46:2E:6E:11:AB:66:F5:72:84:2E:DD:D1:67:26:38:A8:F9:E7
Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
Certificate serial: 0C7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
Manifest number: 0C74
Signing time: Sat 24 Jan 2026 18:10:28 +0000
Manifest this update: Sat 24 Jan 2026 18:10:27 +0000
Manifest next update: Sat 31 Jan 2026 18:10:27 +0000
Files and hashes: 1: Du4Pv3hqd39MJ0FT91NvPfiflJI.crl (hash: /woiV/gY5LnkYS+BCMwcAf61WtYtLR1TpZ9bY7Ekxq8=)
2: 9C749C7C140811EABB746522C4F9AE02.roa (hash: PSYdfl98cedaU/3qMpT/EpqxaVey0RuTtf7go0CLQak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl
rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3197 (0xc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177285, serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
Validity
Not Before: Jan 24 18:10:27 2026 GMT
Not After : Jan 31 18:10:27 2026 GMT
Subject: CN=69750b13-4739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:5e:fc:49:d2:77:d7:bc:25:b5:a9:57:2d:
6f:d2:bd:62:7d:f2:20:ce:28:2f:29:eb:f5:84:47:
5c:7c:0c:21:fa:58:70:75:36:8a:4f:0a:ec:b8:dc:
33:78:f2:bf:11:da:3b:7e:0f:8c:5d:03:5e:71:bf:
dc:74:e2:de:2d:72:bb:88:b7:0d:4c:4b:b1:b3:e2:
ea:5d:3e:79:51:93:ce:eb:2d:24:6f:84:be:1d:34:
26:c2:96:5f:16:74:80:08:90:80:64:b4:28:8e:d7:
47:3d:48:f4:0b:a6:b2:99:17:97:cd:a5:69:7a:c1:
28:8c:c8:02:14:0c:21:fe:e4:cd:c8:82:86:34:c4:
4d:4f:ea:b2:24:e1:37:bf:c8:ce:81:13:f7:a9:14:
21:c1:fb:64:72:5b:c1:db:bc:ab:52:62:96:fa:7b:
45:69:fe:25:2b:30:c9:47:79:f1:81:d1:06:36:99:
77:e3:e5:47:1f:e6:fd:7c:61:61:e5:42:ea:f8:65:
1a:20:e2:bf:6f:b3:79:e2:9d:be:11:2f:0a:27:cc:
e4:fa:ab:ef:64:e1:be:40:72:32:e8:02:15:e5:77:
d0:ec:62:88:c8:d3:f5:68:ba:65:d8:c6:76:80:08:
52:aa:6b:8f:c1:97:c0:52:a3:d1:42:f0:dd:b0:84:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:60:46:2E:6E:11:AB:66:F5:72:84:2E:DD:D1:67:26:38:A8:F9:E7
X509v3 Authority Key Identifier:
keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:2d:62:4f:51:90:65:bb:17:cd:d3:cd:50:53:47:72:25:67:
07:c5:91:be:3f:95:8b:72:f8:55:ea:f2:34:f4:92:20:3b:8b:
3b:5c:9f:2c:a9:e1:86:b8:58:4f:5c:f0:2a:f1:02:fc:b1:56:
aa:6e:f2:53:8f:69:21:9e:c6:97:37:e5:9e:b3:30:d4:6a:ed:
64:5c:cd:62:14:88:d8:d2:b4:4d:fd:9f:a8:6e:f8:9b:7a:45:
45:c3:d2:ae:ec:2c:e5:85:0f:7a:7e:23:78:bc:da:40:de:ea:
5c:66:c2:ad:d5:87:b9:64:79:af:6b:83:22:d6:8c:98:2a:d6:
3b:ed:93:ac:18:db:23:8b:b5:42:f3:e2:0e:9d:ed:34:15:58:
0e:90:bf:81:b4:23:4c:37:b0:b0:e7:41:1a:b1:74:38:1e:df:
d6:b3:3d:75:6c:79:47:ad:71:f1:9f:39:ca:0f:66:de:21:e2:
3e:c8:9e:8e:73:51:62:3a:20:18:40:ee:55:c3:de:fe:c0:2e:
e4:ba:af:c5:f2:a9:61:56:40:73:10:e2:bf:ff:3a:ff:56:c7:
78:ab:dc:0a:e0:74:35:cb:a2:07:1b:08:ae:21:4f:2b:14:e1:
48:dc:85:2f:3e:fe:e6:f2:46:d9:19:bb:72:ad:cc:06:85:b8:
f2:0e:b2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:35 2026 by rpki-client