This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
File: 7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json)
Hash identifier: I0kxoTuL99Ka90WrEVge5q7pnl+rGDoKb2Yrsi33IM4=
Subject key identifier: 4D:8C:28:3E:5E:51:11:6C:A7:E3:7E:40:59:69:91:F9:9A:83:04:BA
Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F
Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
Certificate serial: 03B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
Manifest number: 03AA
Signing time: Sat 24 Jan 2026 23:54:17 +0000
Manifest this update: Sat 24 Jan 2026 23:54:16 +0000
Manifest next update: Sat 31 Jan 2026 23:54:16 +0000
Files and hashes: 1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: rKTmEb+CIHzcoXIsgMhcnjlyY+A6HUMePNzIRWDA8Z4=)
2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: 5H3doinpQy2aJUR8V/Iyn/j6ZGC3RyvpumpsTRmuHeE=)
3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: lc1pPdhpDyedJmN9wKoMqneYMH913sVIQlr9uEAlmPc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl
rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 946 (0x3b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
Validity
Not Before: Jan 24 23:54:16 2026 GMT
Not After : Jan 31 23:54:16 2026 GMT
Subject: CN=69755ba8-0c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:82:f9:1a:a8:d6:09:a2:b3:9e:38:b6:13:3a:
58:6d:2e:62:9d:05:43:3e:07:cf:61:27:85:3b:c1:
a1:5f:0a:3d:16:65:c7:2e:9e:3c:af:a9:1f:ed:a3:
86:f4:32:9b:ad:42:9d:cc:6b:12:7c:87:65:d6:a6:
63:e3:cc:73:26:bf:20:f2:32:a1:d5:08:2b:00:82:
b8:3a:8c:0b:d3:e4:8d:57:36:0a:fa:0c:2a:2e:ce:
37:d2:bb:06:29:7f:8c:f8:2d:fd:54:7c:9a:a8:6b:
6c:39:91:58:a9:3a:7d:4f:a8:40:5f:4c:ff:a4:fd:
44:b3:42:8c:2d:6f:6c:42:6e:19:19:31:03:64:d6:
56:77:4a:38:aa:17:eb:ec:65:fb:57:fa:8d:8b:cf:
ef:86:22:a1:9b:45:74:3d:e9:c7:a7:bc:3d:db:a8:
99:57:0f:c2:d9:96:2b:01:19:86:70:7a:2c:fb:90:
a6:c4:98:10:b1:82:c1:22:6a:31:83:04:03:fb:3f:
91:34:b1:79:8a:b6:2a:cc:c1:59:de:9c:9e:76:37:
d0:98:57:98:80:bc:65:1d:91:ad:76:e1:2a:f6:fe:
3e:23:4c:18:a0:fe:02:09:e1:b1:d0:9e:9b:a4:20:
41:9a:9b:1b:a2:6a:d8:e0:b7:06:49:b8:ea:ed:b0:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8C:28:3E:5E:51:11:6C:A7:E3:7E:40:59:69:91:F9:9A:83:04:BA
X509v3 Authority Key Identifier:
keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:4b:43:cb:7d:75:7b:2b:77:c5:98:15:75:c2:ad:4a:11:36:
10:da:7d:11:61:d1:ff:9f:0d:be:d5:f1:dc:a3:30:7e:1f:35:
ed:86:e8:12:b8:3c:33:0d:8a:95:9f:af:36:3b:f2:50:38:a4:
fe:30:b2:06:b9:da:b0:a8:db:74:ac:cc:e0:06:8b:42:e5:8f:
a8:33:47:da:5d:54:fe:6e:94:c4:1e:32:68:a4:b5:a8:60:17:
9d:89:35:08:ea:39:16:26:44:48:c2:7b:cc:0b:d0:28:f0:60:
b6:a2:4d:16:7a:5b:04:6b:b2:ce:06:ec:e7:1d:da:70:6e:8a:
1d:70:b0:22:65:41:58:a5:05:c6:64:3e:22:c8:03:51:13:f8:
94:22:82:d0:8c:a0:0d:c3:99:cd:99:a9:28:e1:8e:8a:bb:6f:
11:c8:b6:2b:69:75:2d:63:4f:7f:50:f0:d6:c4:b4:ac:04:d7:
ca:c7:a4:a3:a2:f7:72:26:b3:3f:ef:52:13:dd:6c:6b:ab:0f:
13:af:07:99:77:24:33:ab:80:ff:81:fe:cc:80:7a:72:8a:0c:
36:0e:b7:f4:e8:90:f2:32:bd:d6:88:aa:77:d9:ca:d4:45:77:
84:55:16:d2:1b:bf:84:70:a7:62:a0:c1:d0:6d:31:74:55:de:
c2:5a:4c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:35:59 2026 by rpki-client