This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
File: jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json)
Hash identifier: ASeZhpHlcQG5ulISVBijLarwVWchMEHtajdSuHa5qgc=
Subject key identifier: 9F:FD:08:ED:F0:09:3E:66:83:60:48:98:DA:31:E6:FF:8A:A5:32:51
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Certificate issuer: /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial: 0468
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
Manifest number: 0454
Signing time: Sat 24 Jan 2026 22:13:26 +0000
Manifest this update: Sat 24 Jan 2026 22:13:25 +0000
Manifest next update: Sat 31 Jan 2026 22:13:25 +0000
Files and hashes: 1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: O5HxxcKjP1EiJXmAcJ34i/ECkmTdCXdLj56t9EQY12A=)
2: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: ucXZf4eu0/AY5wwnvuYXaUOhU2IDoNXJmo5ZEBv0MfQ=)
3: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: 6vANpzfgkdA95BOGghUjzousLRYpV7ZyXI+Ad3LxlZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128 (0x468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Validity
Not Before: Jan 24 22:13:25 2026 GMT
Not After : Jan 31 22:13:25 2026 GMT
Subject: CN=69754405-d21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:57:8f:8c:87:64:e8:67:d3:79:ee:80:1a:
ef:37:6e:fc:4b:49:36:ab:bf:1f:df:65:be:89:2c:
f2:33:ec:ad:f9:73:f6:d8:c6:82:77:31:ed:0f:df:
d9:4b:30:fe:4e:d5:97:98:a7:31:b6:88:9d:ff:b0:
7d:cc:f0:33:fd:e2:08:e8:06:70:4b:0e:1b:f9:a8:
0d:2b:57:eb:fa:c3:f7:b0:d2:f6:4b:ca:ca:e9:73:
cb:5b:63:44:6a:7c:6f:9a:16:8e:1e:8e:76:ee:6b:
a2:83:b5:77:05:17:78:b5:78:a5:0b:f1:71:72:5e:
98:48:75:c4:f5:e2:d7:82:95:5a:04:00:eb:a6:c7:
f5:7a:63:11:44:76:2a:f1:e7:dd:d5:ec:ea:77:4b:
79:c4:d5:6f:36:b2:94:cb:72:1f:54:41:87:53:17:
b9:dd:19:00:30:d6:2b:ad:c8:67:27:4f:62:f2:be:
05:35:f9:1e:11:6f:6d:c9:7e:16:e2:ab:76:6f:01:
46:fb:c2:3b:5f:37:8e:bc:18:8a:74:01:dc:0e:3a:
64:10:0d:84:f7:6b:9a:41:78:72:a0:18:4b:1f:24:
e9:f6:a8:52:97:80:81:1b:d9:4d:60:6f:b4:9d:89:
1a:24:c1:50:d3:6c:85:36:8e:d0:01:9e:41:11:77:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FD:08:ED:F0:09:3E:66:83:60:48:98:DA:31:E6:FF:8A:A5:32:51
X509v3 Authority Key Identifier:
keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8b:ae:83:94:96:02:7c:b2:1c:f8:12:0b:42:54:04:ce:13:
71:07:a2:d1:e6:69:21:63:52:1f:ad:2f:8f:d2:5e:80:32:13:
91:b9:18:cb:62:6b:05:11:21:0c:64:ff:15:57:f1:ab:62:32:
74:4f:00:3c:c1:4f:4e:ad:80:ac:52:af:d2:0d:9e:e9:79:9b:
84:8c:1e:72:e9:98:af:22:b9:eb:7a:7d:cd:bd:bf:6f:e6:1d:
ab:99:88:9a:fb:14:62:0e:8e:bc:0b:8c:bd:7f:c6:2d:d2:6e:
bc:6d:af:ec:6e:fb:41:26:c6:ce:f7:50:25:00:3b:3a:e4:cb:
83:e7:c1:f0:c0:28:93:2e:ac:e9:56:13:90:4e:07:20:e7:b6:
5b:3e:1d:b4:14:84:a7:73:0e:de:46:36:ba:a4:00:08:69:de:
8a:7c:8f:4f:bc:b8:aa:5b:76:6a:8a:1d:7c:aa:c5:1f:6b:b4:
dd:95:1d:58:8d:0c:93:be:3b:62:a5:a8:8b:2e:95:c4:7c:b7:
32:93:37:e0:70:e8:f1:9d:84:3c:e2:5e:2c:e0:a6:20:15:d0:
c2:de:70:14:04:0a:20:1a:ac:31:ef:a8:b3:6b:18:60:fb:da:
ae:98:31:71:24:61:be:fb:04:62:67:06:75:9e:66:6f:00:3a:
40:03:8c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:48 2026 by rpki-client