This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
File: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft (raw, json)
Hash identifier: SdqA3eEcI8SuLASzBEi1yjT8OYQSc1dqEOJbGw/Q3Bc=
Subject key identifier: 52:52:26:0A:F8:FE:ED:E9:AA:B9:84:DF:7E:CC:54:AE:72:0B:D3:EA
Authority key identifier: D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66
Certificate issuer: /CN=A918049D/serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
Manifest number: 2F
Signing time: Fri 23 Jan 2026 06:36:30 +0000
Manifest this update: Fri 23 Jan 2026 06:36:30 +0000
Manifest next update: Fri 30 Jan 2026 06:36:30 +0000
Files and hashes: 1: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl (hash: cOzWyGun5vbsHC2H4Hzx9zeAYHwWExgGK8SGeaeTsU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl
rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918049D, serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66
Validity
Not Before: Jan 23 06:36:30 2026 GMT
Not After : Jan 30 06:36:30 2026 GMT
Subject: CN=697316ee-5134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:ff:7b:89:45:e8:67:18:12:42:ac:df:fc:
50:99:6d:08:83:7a:9d:93:f5:fe:e3:ea:f6:50:54:
54:a5:f9:1f:ad:f7:d1:15:cb:2b:ad:7e:09:f8:41:
26:5c:81:ab:7a:01:8b:1d:21:d3:45:37:5b:bd:08:
06:5e:da:02:0b:b1:9c:43:26:db:dc:c6:a5:2a:9b:
74:5b:91:24:f1:d7:97:4b:d8:60:ae:8f:a0:18:f6:
f2:e5:35:7a:b9:b4:66:bf:be:6c:47:a8:bd:1d:cf:
2a:10:f1:a7:b5:25:5a:e1:69:f4:00:23:7e:67:ae:
bc:49:80:60:5f:95:1b:7a:9b:20:dd:e1:68:23:86:
e6:c7:69:16:55:49:c1:20:3a:cc:cf:2c:8c:50:76:
24:b3:ea:e8:1e:7a:33:5f:2a:db:f2:47:90:3d:c9:
c9:8b:af:d1:c4:15:8a:6b:fc:db:f6:28:e0:f6:66:
03:cb:3d:bc:e3:26:99:b3:3c:02:6b:a3:3a:56:34:
ce:e8:b8:4e:39:8c:62:78:7c:43:e2:1d:fa:72:05:
ad:5a:f2:64:79:c0:91:78:5c:11:22:78:fd:46:80:
d0:b8:be:bd:5e:e8:9f:82:1d:11:14:9d:2f:49:e2:
95:ca:1f:37:a6:b2:cd:2a:ab:9b:0b:03:cc:26:d6:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:52:26:0A:F8:FE:ED:E9:AA:B9:84:DF:7E:CC:54:AE:72:0B:D3:EA
X509v3 Authority Key Identifier:
keyid:D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b9:ff:29:d4:25:6e:48:76:3a:a5:74:c0:17:05:ce:a9:7f:
d3:7f:d6:04:d1:a6:8b:f3:52:ca:a6:65:48:a3:e0:3b:c3:9d:
31:d9:cb:1e:6b:16:58:03:81:59:17:88:41:cc:e1:61:43:73:
70:4b:ed:b2:47:f5:66:f1:05:ac:fe:25:1c:4d:05:43:b4:4b:
aa:16:0a:bc:ae:49:c1:c3:13:83:d1:0c:f0:1e:35:2c:dd:c2:
d2:c4:86:1f:ae:83:73:54:a4:07:57:5f:76:7e:02:1b:18:44:
c5:24:04:39:55:5b:7e:c0:b3:e6:f2:42:cb:82:2f:cb:3f:99:
cc:97:12:ea:2e:b7:6f:34:9d:db:a5:01:97:e9:8d:d9:93:66:
f9:47:86:40:06:24:50:10:41:9d:2e:c2:ae:5b:42:d0:2b:37:
90:88:6a:b3:c8:24:13:83:1d:2b:58:4f:85:b4:bf:46:58:bd:
7d:a2:90:47:a0:2e:06:9b:4b:97:ed:fa:04:a8:53:e7:eb:a3:
89:f8:d8:43:52:7e:a3:e4:8a:5b:86:fb:13:be:aa:e1:9a:98:
b8:be:c0:2f:31:c6:e5:94:65:35:e2:9b:2e:1c:10:7f:0e:0f:
25:56:bb:75:e2:ee:2b:88:15:db:72:80:2d:e3:5c:56:a5:91:
2d:32:c5:5d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MDQ5RDExMC8GA1UEBRMoRDhBRkY1MDNGRThDNUJEMjI2NkFBMkVDQUJFNTUyQ0E3
NTE0N0Y2NjAeFw0yNjAxMjMwNjM2MzBaFw0yNjAxMzAwNjM2MzBaMBgxFjAUBgNV
BAMMDTY5NzMxNmVlLTUxMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2MP97iUXoZxgSQqzf/FCZbQiDep2T9f7j6vZQVFSl+R+t99EVyyutfgn4QSZc
gat6AYsdIdNFN1u9CAZe2gILsZxDJtvcxqUqm3RbkSTx15dL2GCuj6AY9vLlNXq5
tGa/vmxHqL0dzyoQ8ae1JVrhafQAI35nrrxJgGBflRt6myDd4WgjhubHaRZVScEg
OszPLIxQdiSz6ugeejNfKtvyR5A9ycmLr9HEFYpr/Nv2KOD2ZgPLPbzjJpmzPAJr
ozpWNM7ouE45jGJ4fEPiHfpyBa1a8mR5wJF4XBEieP1GgNC4vr1e6J+CHREUnS9J
4pXKHzemss0qq5sLA8wm1j81AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUlImCvj+
7emquYTffsxUrnIL0+owHwYDVR0jBBgwFoAU2K/1A/6MW9ImaqLsq+VSynUUf2Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwNDlEL0I1N0NBNTU4QjJD
NjExRjA5MTM0QkE2REM0RjlBRTAyLzJLXzFBXzZNVzlJbWFxTHNxLVZTeW5VVWYy
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMktfMUFfNk1XOUltYXFMc3EtVlN5blVVZjJZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw
NDlEL0I1N0NBNTU4QjJDNjExRjA5MTM0QkE2REM0RjlBRTAyLzJLXzFBXzZNVzlJ
bWFxTHNxLVZTeW5VVWYyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBALm5/ynUJW5IdjqldMAXBc6pf9N/1gTRpovzUsqmZUij4DvDnTHZyx5r
FlgDgVkXiEHM4WFDc3BL7bJH9WbxBaz+JRxNBUO0S6oWCryuScHDE4PRDPAeNSzd
wtLEhh+ug3NUpAdXX3Z+AhsYRMUkBDlVW37As+byQsuCL8s/mcyXEuout280ndul
AZfpjdmTZvlHhkAGJFAQQZ0uwq5bQtArN5CIarPIJBODHStYT4W0v0ZYvX2ikEeg
LgabS5ft+gSoU+fro4n42ENSfqPkiluG+xO+quGamLi+wC8xxuWUZTXimy4cEH8O
DyVWu3Xi7iuIFdtygC3jXFalkS0yxV0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:15 2026 by rpki-client