This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
File: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json)
Hash identifier: KkUIJOvkgjSCUZX9fJBlh2/e/o6H1KPpqlrzm2T+2KM=
Subject key identifier: 09:3B:15:C5:B0:E5:24:A1:73:29:10:CC:5C:2C:29:E5:A6:26:3C:3F
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Certificate issuer: /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial: 04C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
Manifest number: 04C0
Signing time: Sat 24 Jan 2026 23:06:27 +0000
Manifest this update: Sat 24 Jan 2026 23:06:27 +0000
Manifest next update: Sat 31 Jan 2026 23:06:27 +0000
Files and hashes: 1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: iDeNoSN0rXaFnLM8a5STfA5ugynSymoOYDoRyA1JLwg=)
2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: H8OBeRqs2B2zDmPzaFX4iRN3UQF65d9TwV3ksnnmLrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1221 (0x4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Validity
Not Before: Jan 24 23:06:27 2026 GMT
Not After : Jan 31 23:06:27 2026 GMT
Subject: CN=69755073-2ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:ae:ad:b4:2e:bf:d8:67:87:3b:03:d1:e6:
f1:89:47:55:ce:6f:3e:17:35:d5:64:04:32:eb:67:
80:20:9e:28:e1:1f:b0:4a:fc:0d:6a:40:de:59:46:
c4:95:aa:9b:eb:ea:d4:f7:56:3e:90:c9:69:34:1b:
b5:e0:b1:b5:ab:6f:ac:aa:7e:ba:85:4d:b9:6e:4b:
ad:cd:dc:45:05:b7:c8:d8:a1:e4:49:ef:99:cc:5c:
3c:c7:05:a7:b7:ae:89:06:86:bf:20:93:fc:ff:2a:
fe:9e:37:de:cf:fc:0f:a4:82:af:06:f5:82:de:80:
df:6c:c9:46:35:44:93:f6:87:d0:81:3f:2e:ea:d6:
82:2a:4d:0f:a9:54:63:e5:01:60:51:f0:3a:74:c6:
99:e8:80:e0:13:b8:66:1b:38:e1:fb:c2:3c:79:62:
90:e0:6d:2d:4b:2c:c1:5a:d5:a0:ab:40:c2:47:4d:
c9:c7:ab:67:7b:1a:36:34:78:c4:dc:72:7b:16:bb:
12:ff:b1:e1:5a:05:c8:23:21:33:59:7d:11:e2:10:
04:ed:e1:ab:85:df:1c:08:66:39:41:34:a0:18:41:
9a:eb:82:3e:73:4e:d3:22:40:d6:3c:57:a0:6d:78:
6b:a7:7f:62:fe:f8:4e:a4:e2:05:46:6b:b8:d9:38:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3B:15:C5:B0:E5:24:A1:73:29:10:CC:5C:2C:29:E5:A6:26:3C:3F
X509v3 Authority Key Identifier:
keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:73:b8:5f:f6:00:07:0d:9e:4f:2d:da:fa:0a:3e:7e:a3:fa:
df:01:fc:04:6d:ce:74:66:61:4f:11:22:42:b5:fe:1c:61:e7:
28:69:e4:73:f5:c0:54:08:42:d9:66:11:10:e0:da:ee:0c:d0:
67:cf:a4:1a:2e:0b:43:f2:37:97:5a:50:3d:64:2e:01:57:fe:
c9:da:67:3c:b6:53:2a:a8:1b:1b:3d:98:af:66:ba:58:5e:b9:
f0:c2:3b:6a:be:78:84:3e:46:37:4c:91:9a:c2:9d:3d:8d:56:
0e:69:2b:71:12:fa:9a:c2:eb:0d:07:fd:06:f0:58:3a:04:b4:
40:ba:92:ac:34:74:2e:34:4a:5b:cb:9f:32:ba:57:b5:34:f9:
eb:b5:08:02:49:a2:97:5a:3d:a0:63:4d:c0:e5:86:34:4c:5d:
f4:63:1a:af:95:4e:5e:43:37:f8:d4:65:8f:92:42:12:97:a3:
61:ce:c0:d2:3c:52:48:57:65:96:94:de:80:44:eb:c8:b5:4d:
dd:7e:a7:4b:90:9a:7c:7d:3e:c8:7e:e3:e0:59:d8:89:c9:17:
8e:c6:d9:11:72:57:a3:1c:ba:73:6a:f8:6f:4d:64:f0:90:cc:
a8:6a:c6:ff:c7:d9:85:f9:3e:d4:6e:41:67:54:42:a7:8b:c4:
3d:47:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:25:14 2026 by rpki-client