This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
File: dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json)
Hash identifier: In0Qw6opCGIUhTZxg133htr0adGNHyGW53olns7BR2A=
Subject key identifier: 67:D8:3E:F2:02:AC:BC:D3:D1:6E:9A:19:F0:39:05:4A:F3:8E:20:05
Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
Certificate issuer: /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
Manifest number: 0127
Signing time: Sun 25 Jan 2026 03:54:38 +0000
Manifest this update: Sun 25 Jan 2026 03:54:38 +0000
Manifest next update: Sun 01 Feb 2026 03:54:38 +0000
Files and hashes: 1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: XTSwsmMfQ2+VyuiC2apGOYarjoDkWkAK497cwHTcM+g=)
2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: BbrjGfo0UoZCcLf+k7hQstWYPdgNNbc+IXBk8J2BWwE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Validity
Not Before: Jan 25 03:54:38 2026 GMT
Not After : Feb 1 03:54:38 2026 GMT
Subject: CN=697593fe-c8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:99:b9:57:75:40:07:db:8d:c5:fb:f4:f7:e9:
06:a0:7e:42:e4:0a:bf:11:82:13:2c:1e:e4:e4:57:
3a:54:67:e0:aa:18:3f:14:0f:77:d9:10:8b:15:6d:
2a:c9:d2:85:07:97:e8:7a:47:5b:5b:2b:a3:c6:ec:
05:15:38:2d:28:ba:b1:c3:8e:d6:d8:33:77:cb:6b:
ac:3f:ad:da:bd:78:b0:33:7e:82:1d:c3:02:5c:4e:
f9:ad:41:87:ab:e6:d8:9a:e9:27:c8:24:a8:6d:b9:
38:d0:95:3d:b8:b9:11:d3:f1:0d:5d:77:8d:c6:3a:
ab:36:d0:55:b8:38:40:06:4a:59:c8:09:9c:7d:3a:
1b:7b:28:6c:14:2a:93:cb:26:a1:59:18:5f:eb:a8:
09:5b:63:a3:bf:2f:15:99:1c:4d:79:28:56:ef:09:
84:b2:ab:e1:27:48:8e:c9:96:01:5a:ee:c3:ef:48:
b4:2a:ce:d9:60:d8:e8:09:43:e3:5f:79:63:83:ad:
6a:3b:8a:44:bc:d3:f9:a9:0d:89:a0:fe:a2:fb:7b:
9f:59:8b:2b:d3:34:cb:d6:10:98:32:00:7f:14:17:
3d:90:61:bb:2b:cd:c9:9d:42:80:60:91:64:9f:c7:
d6:4f:7a:94:d7:bf:a5:99:f8:3a:e4:30:2a:74:fa:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D8:3E:F2:02:AC:BC:D3:D1:6E:9A:19:F0:39:05:4A:F3:8E:20:05
X509v3 Authority Key Identifier:
keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:07:ef:18:b9:d8:d9:43:a0:c6:26:77:4d:ab:b8:5b:f1:b2:
8c:e5:75:01:e2:5a:7e:47:e4:be:08:5f:75:6c:f4:7b:34:92:
7e:b2:6a:9d:9a:c3:71:b4:48:0c:34:25:ee:4c:57:23:75:3c:
70:fd:d4:a7:20:5f:68:92:13:91:1d:5b:f7:7f:7f:ee:07:f4:
8d:4f:54:5e:81:8a:67:be:ba:29:85:c5:a8:25:62:46:65:bb:
9e:54:7e:89:34:59:43:db:47:3f:d6:72:ac:10:ef:44:23:dc:
a7:6e:4d:b5:c2:48:00:65:06:c4:f9:2a:fe:26:52:7f:0f:24:
d3:58:a7:5c:46:94:5b:59:0d:97:b4:cf:94:4e:66:f1:45:f1:
81:16:7f:2e:14:fa:07:f0:86:c5:ce:06:37:9a:52:f8:72:58:
a3:7d:fb:69:3b:48:b0:4b:9b:39:d4:e8:7f:c4:96:fb:45:fe:
f7:13:46:15:08:ce:39:82:2b:bf:59:cb:ec:e4:68:e1:30:01:
9f:5f:e8:fd:3a:b0:7c:88:bf:1b:62:87:34:1b:8a:dc:45:e0:
5b:4f:75:40:b5:6f:b6:48:ff:89:5b:a8:04:bd:02:31:14:09:
49:49:93:b8:59:6a:f8:bc:55:56:96:2f:bc:9d:d9:48:49:16:
23:2e:89:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:15 2026 by rpki-client