This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
File: rIf9aQzGskx4_D9x0y3eDbookNs.mft (raw, json)
Hash identifier: 6jTIp1iTbqXQNWZJ8yZV3oIUiNSrtAWKymKJEOlLSRQ=
Subject key identifier: 3C:7D:F5:B7:1B:8C:35:10:42:AC:F8:25:3C:54:66:D0:08:06:04:43
Authority key identifier: AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
Certificate issuer: /CN=A917C156/serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
Manifest number: 92
Signing time: Fri 23 Jan 2026 05:36:54 +0000
Manifest this update: Fri 23 Jan 2026 05:36:53 +0000
Manifest next update: Fri 30 Jan 2026 05:36:53 +0000
Files and hashes: 1: rIf9aQzGskx4_D9x0y3eDbookNs.crl (hash: QVYFJtlcpfZdNKqtOGs1orcSzhKvfNWIBqZyJ+Vd/Q8=)
2: 82B7AD281C2811F0AF6EDC47C4F9AE02.roa (hash: TOct4YZ3x0uVg6PIqVFGhW7Pj8+y8nCLAaZLvcpqBvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl
rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 05:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C156, serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
Validity
Not Before: Jan 23 05:36:53 2026 GMT
Not After : Jan 30 05:36:53 2026 GMT
Subject: CN=697308f5-dc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:89:6f:5c:78:00:25:ce:9a:11:bb:23:f2:
f3:64:f5:6f:0f:41:03:af:15:68:1e:b7:60:85:51:
c2:5a:0a:82:3a:6e:e4:24:36:b1:32:5b:f4:bf:4e:
b8:c4:84:4a:9d:6b:61:ff:4d:8c:2a:d1:99:c3:ac:
68:1c:67:79:4c:c5:03:5e:dc:7d:a6:44:44:45:9e:
9d:f1:c5:ca:6b:20:be:f6:70:72:e3:e6:3e:07:f9:
89:ef:1d:a7:08:b5:80:71:b6:be:fa:e0:0e:3a:50:
16:5d:0b:5b:44:f2:82:52:09:1c:4d:69:9a:d1:9e:
69:c1:82:78:a0:9c:3d:83:24:64:e0:46:b6:91:f9:
f2:b2:8b:57:85:9d:d2:46:56:15:e3:58:8b:dc:ab:
f5:81:8d:6b:d2:85:8e:cb:44:36:1e:ce:15:5a:9d:
da:a0:69:df:7e:97:47:24:a2:51:3b:ea:c9:7a:65:
c3:21:77:94:95:06:e9:78:ed:09:fd:d3:73:80:bb:
cb:34:9e:e7:24:e1:e7:91:27:23:dc:71:d8:4f:78:
1d:3b:bf:dd:2b:46:da:1a:60:b8:5c:45:55:f4:b2:
d6:b5:6d:f6:3e:fb:5a:8d:38:f0:7f:f3:a5:de:69:
e8:9e:7e:92:15:1e:52:a8:15:fe:51:e0:c7:b2:d3:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7D:F5:B7:1B:8C:35:10:42:AC:F8:25:3C:54:66:D0:08:06:04:43
X509v3 Authority Key Identifier:
keyid:AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:67:5f:80:70:80:9d:de:51:df:97:f8:44:85:16:26:db:d0:
60:93:19:cb:91:a8:7e:01:ae:e5:54:30:0c:b8:dd:ee:ba:33:
19:84:f2:45:f7:bc:0c:73:1c:7d:b7:f2:c0:85:33:16:52:13:
8b:2a:f8:da:69:63:cf:13:1a:5a:14:54:0f:6f:8b:6b:93:9f:
90:15:5d:10:84:f8:05:6c:a1:8d:bb:5d:a7:26:32:cc:95:f2:
d0:cd:d5:7f:24:af:e7:2e:ee:c2:f7:00:ce:89:a7:09:b6:6a:
60:ad:0c:86:bb:be:c3:b7:97:f0:a6:0b:ea:91:ea:19:23:c6:
78:e1:f6:56:7a:d3:19:b2:8c:d2:91:eb:b9:57:70:60:94:9a:
2b:17:88:d2:24:e0:61:55:15:ef:69:51:38:fa:70:e2:c8:92:
4f:a1:79:21:aa:3c:9b:ee:ba:1f:e2:46:c0:c3:c1:ef:3e:e4:
fe:2d:1c:43:a2:47:23:62:9b:bd:f5:9c:fa:34:17:87:e7:a0:
68:72:4b:84:30:b3:a0:e2:dd:da:0b:be:46:ac:89:0c:5f:c8:
cf:c4:07:eb:90:c8:c0:9b:7a:63:df:4d:f3:f5:e9:4c:ab:a2:
7b:40:37:35:30:7a:4b:fc:8d:eb:7b:9f:44:c0:45:dc:d0:24:
b2:74:1f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:59:06 2026 by rpki-client