This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json)
Hash identifier: Y4jfhOXYhJZDFZ7EtUgbd7gANz8+8YOze/6qddwyKDg=
Subject key identifier: AD:20:AA:A9:57:E4:7E:C0:73:27:70:15:D2:A6:2D:75:94:1D:FB:9B
Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D
Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D
Certificate serial: 0C26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
Manifest number: 0C21
Signing time: Sat 24 Jan 2026 18:21:20 +0000
Manifest this update: Sat 24 Jan 2026 18:21:20 +0000
Manifest next update: Sat 31 Jan 2026 18:21:20 +0000
Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: ZAIXMEPr+UxFTHihBjOMeVQJAmzTQ7G3VWFVi5Ruogk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl
rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3110 (0xc26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182FE1, serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D
Validity
Not Before: Jan 24 18:21:20 2026 GMT
Not After : Jan 31 18:21:20 2026 GMT
Subject: CN=69750da0-ee62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:55:d1:74:ae:6d:7b:ec:6e:d7:64:79:2c:
23:dc:bc:10:62:8f:8b:4f:4a:e3:64:a2:46:b4:45:
dd:44:73:90:d7:a6:f1:b0:9e:75:d3:fb:7f:33:f2:
b2:0f:b9:d9:36:75:d5:ca:b8:d5:e5:5a:cd:46:0e:
92:a9:0d:d8:6c:b1:0e:46:26:dd:94:d8:16:f7:13:
20:85:c2:b7:b0:99:dc:ee:cd:56:12:68:fe:18:e6:
94:d9:87:ac:09:40:6a:02:a9:9c:b8:06:d8:1b:eb:
a3:8f:ef:df:52:23:9b:69:34:e8:7c:a7:52:d0:3d:
42:6f:c5:c8:13:94:1d:dc:ed:0f:9c:dd:93:d7:52:
7a:68:42:4c:73:b4:89:28:46:2e:95:5f:b1:26:4a:
fc:8b:ed:53:b4:5b:8a:4e:df:6d:ab:8f:9b:91:82:
a7:70:36:22:c1:16:47:77:b1:1b:6d:a9:fc:bc:5e:
12:15:8f:a7:7d:7f:90:4c:e9:46:46:92:05:83:92:
ae:35:08:fe:ea:72:61:e4:66:43:94:73:90:0d:3b:
fc:f4:b0:24:7f:ed:70:05:4b:6b:5d:02:65:2b:09:
d8:82:07:98:84:7c:93:18:6e:59:83:dd:51:38:01:
3a:3f:bc:5a:ae:93:e0:26:37:2e:cc:9b:bd:52:46:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:20:AA:A9:57:E4:7E:C0:73:27:70:15:D2:A6:2D:75:94:1D:FB:9B
X509v3 Authority Key Identifier:
keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a9:54:67:aa:fc:3b:da:cd:1b:ea:97:4b:ea:40:a1:a3:5f:
15:63:54:bc:ad:ad:5f:13:5f:1d:a6:68:32:30:af:a4:66:87:
32:06:6b:ef:80:26:49:ac:71:5f:13:bf:0f:3a:6f:14:18:bf:
38:3a:51:40:5b:c8:c5:08:64:56:c9:5c:7b:13:be:1e:ce:1f:
d9:cc:e6:7c:78:1b:c2:e4:32:9e:c3:4d:03:21:75:e0:24:5d:
b8:20:ae:28:d8:d9:20:1e:8e:2a:a9:87:27:de:29:49:46:1a:
da:e2:2d:2f:c9:24:e9:5f:0d:e1:f2:97:5f:47:73:f0:3b:03:
26:45:a2:ca:c8:d4:48:a7:ec:37:7c:ec:69:83:4d:a9:93:d7:
a2:16:05:53:ec:99:01:be:5f:8b:b9:3a:8d:a0:6e:14:91:fc:
c5:06:1e:01:43:d2:e3:8e:54:56:e6:9a:1e:ff:f0:9d:a6:28:
f5:c2:52:14:52:55:5e:93:b4:0b:2f:8b:de:3c:ba:32:fc:90:
3a:59:28:09:b8:7d:bb:1b:2f:47:50:13:d5:a7:f0:42:e9:dc:
d9:59:32:fe:80:5d:ab:de:19:a4:44:c5:e8:50:cd:b4:9e:49:
ed:b8:a9:76:7c:d7:fe:8b:18:42:43:18:90:61:27:cc:4a:18:
36:c5:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:47 2026 by rpki-client