This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
File: 2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json)
Hash identifier: 8rXOT7VjjNaQDlPjLhAUL2mYbhGSK3PNdrpeQo5hH4w=
Subject key identifier: EE:29:BB:F5:E9:FD:89:0F:65:05:C7:DD:54:38:25:76:1C:61:81:3A
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
Manifest number: 01CB
Signing time: Sun 25 Jan 2026 02:19:53 +0000
Manifest this update: Sun 25 Jan 2026 02:19:52 +0000
Manifest next update: Sun 01 Feb 2026 02:19:52 +0000
Files and hashes: 1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: fW2YkryWr3lZXXSkhI6dOgTcwKKuMimYK3uAAS96r8w=)
2: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (hash: rX9KVe2qszOUPjT1pbGC+LrjEbspt/xxl2Uq6dePAdc=)
3: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: lULpYxQ3gZ5K9JeyYCVmHd0kWgLx0IwVRgcAaZxSkdk=)
4: 585745526BC111EEA163E774C4F9AE02.roa (hash: Ks2Urn2far+/DcyQBS8MOk0s9n2RR8VYAIzSipmPvMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Validity
Not Before: Jan 25 02:19:52 2026 GMT
Not After : Feb 1 02:19:52 2026 GMT
Subject: CN=69757dc9-740b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:60:da:97:8a:df:9b:8b:18:37:ee:bf:f7:
30:7a:11:93:92:5d:85:1c:f9:44:04:fe:75:ad:ea:
fb:77:f4:db:c9:ad:67:9b:58:5c:d6:db:91:84:f1:
27:ec:41:f0:22:80:9a:6f:50:66:64:79:41:86:1c:
22:7f:a1:9b:0d:46:8f:c6:63:50:49:be:2e:fe:ad:
f5:e4:81:73:09:19:33:85:59:a9:19:f7:1a:48:7b:
7a:3f:48:81:88:41:28:67:90:04:5f:3c:d6:a8:31:
6b:31:97:22:b3:c8:dc:c0:c5:98:85:ae:f0:4a:d7:
1d:ed:3f:b9:f7:d3:99:d7:43:7c:db:98:e0:58:c3:
e4:83:b9:62:8a:0e:15:99:d9:1b:95:b2:18:ec:c3:
42:58:4b:8b:70:64:06:de:6f:d8:e6:c9:ed:6e:cd:
df:be:1d:e5:b6:18:0a:1d:ba:4d:f9:1b:2f:06:66:
05:41:c7:ed:79:fd:f6:ed:9f:c9:99:2a:51:42:e7:
06:8e:56:2d:43:2f:bd:86:04:fb:06:5c:de:39:84:
b7:83:91:bc:e6:f4:7e:a1:05:a8:11:63:52:67:04:
14:5b:8c:e6:e4:6f:3b:2a:59:a3:b4:7e:c5:96:39:
81:5a:25:e4:b2:42:2b:b6:63:68:d4:de:6b:99:61:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:29:BB:F5:E9:FD:89:0F:65:05:C7:DD:54:38:25:76:1C:61:81:3A
X509v3 Authority Key Identifier:
keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:b5:89:25:b1:46:79:30:d4:69:0d:d8:0b:49:76:51:86:11:
dd:54:5c:65:6e:68:0b:2e:ec:6e:ab:54:fc:df:cb:c8:b3:a3:
ea:87:07:f3:d9:0d:44:21:c1:be:af:52:04:6a:26:06:08:64:
3e:0a:8a:d8:59:50:b4:61:78:ea:9e:db:64:3f:90:0c:23:1d:
6a:c2:29:e9:eb:4d:11:45:b9:0d:97:29:e0:80:ee:02:eb:99:
23:6e:24:48:47:c2:af:39:f6:ca:71:9d:b5:59:56:3a:f4:62:
86:0a:a0:17:1e:a7:60:94:34:8d:c9:e7:42:a2:db:48:dc:49:
bf:ee:f3:c3:68:21:17:12:1f:91:2a:f2:7e:c1:5a:e8:87:5f:
59:73:5a:dc:e5:13:c5:78:3b:2d:65:17:a5:da:e0:3e:dc:c3:
24:a2:c7:3d:3d:84:ee:f6:e2:b6:c4:7b:1e:4e:6f:6e:12:c9:
8e:fe:85:e0:83:96:1d:dc:16:a0:4d:7a:5d:40:a1:65:30:e9:
f3:80:77:fa:d2:64:e6:bc:ad:44:c4:2e:74:42:a1:96:25:99:
d7:93:a6:f1:ca:5c:8f:62:1f:6d:74:0a:e3:b7:05:cc:25:01:
68:b6:1c:1e:8b:01:3f:d4:d8:9e:f2:44:3a:f0:c4:bf:d6:60:
d7:f3:6d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:22 2026 by rpki-client