This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
File: ej19N0jHiYbCxeULUBO-tgq0etw.mft (raw, json)
Hash identifier: FNOO/vD9fldNxOy/rANKHPYEgL3tVzkkZL+KB7rUE0M=
Subject key identifier: F9:55:5E:4A:9E:5E:8A:84:DE:F2:BE:5B:EB:62:23:48:3A:3D:C5:14
Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC
Certificate issuer: /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
Certificate serial: 02CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
Manifest number: 02B8
Signing time: Sun 25 Jan 2026 00:38:23 +0000
Manifest this update: Sun 25 Jan 2026 00:38:23 +0000
Manifest next update: Sun 01 Feb 2026 00:38:23 +0000
Files and hashes: 1: ej19N0jHiYbCxeULUBO-tgq0etw.crl (hash: aBTDAw+aZ67VihTbwDmW11XO+pI+HT29a1W6YQsrsUY=)
2: 3303481C820B11EFA5FD6818C4F9AE02.roa (hash: 2H0Eld64nbCRlxYzVx5jvhl/a/kjGOkQyNiInr2D6fU=)
3: 66751A7C729211F0B01C9076C4F9AE02.roa (hash: Co9xDCgNDS9o8SEzHolP1f58DGoWkILAQoEBynF1Tc8=)
4: E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa (hash: oPhIXC+OF1ykzvnTk4LHIrBmTOI6SazQOAcqVDzTk04=)
5: EA61BF885BA011F0B7D9FB0DC4F9AE02.roa (hash: yBvWFxkJxlD3BcWZvBUya2FQ/w1n1QnKpsiNpS3l1kM=)
6: 28144924820B11EF8B053D18C4F9AE02.roa (hash: L95ijgoOHfXB5kg1UlOb7GIC1yp0yWNX0oJUBtsn6Nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl
rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714 (0x2ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D79, serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
Validity
Not Before: Jan 25 00:38:23 2026 GMT
Not After : Feb 1 00:38:23 2026 GMT
Subject: CN=697565ff-d933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ca:4b:4e:3a:09:4a:e2:ff:88:99:be:3d:fc:
34:0d:f0:53:73:e6:ef:34:05:0f:24:11:f5:1c:36:
c1:a9:c2:4f:03:43:cd:bc:f6:9d:ae:0a:fd:a7:3c:
ed:c4:09:19:f7:e3:62:d4:82:40:84:f8:c7:0e:d5:
4a:2f:a5:90:b7:1e:5c:47:ed:d2:0d:60:fa:65:b1:
c5:ce:d5:e8:89:76:68:05:18:02:4d:aa:23:37:ec:
0c:3a:9b:8c:e0:07:10:a5:bb:c9:d1:fc:b0:24:14:
0a:93:d7:07:a2:50:ff:1b:40:26:56:65:94:97:c7:
5e:c7:33:20:42:5f:cf:d0:a5:b1:8b:34:86:b6:dd:
99:74:db:e9:b3:14:66:53:e7:4e:c4:f4:66:94:bb:
d2:68:1a:bc:45:a2:22:67:bf:3c:2e:75:1e:9d:5f:
ed:1d:1b:c9:c1:b4:b1:51:ba:81:23:cf:cb:e3:dd:
7c:07:85:b9:06:5d:a2:33:f2:5c:81:11:cf:89:4e:
de:1f:45:14:ba:d3:a5:c7:89:63:27:0e:17:ea:d7:
79:10:29:5c:a5:14:98:cd:3c:0d:3c:8c:40:28:e3:
20:dc:86:44:dc:c6:e9:2f:71:28:39:f2:43:44:da:
19:a1:9a:6a:23:51:cd:2d:aa:12:d9:82:e1:f1:8d:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:55:5E:4A:9E:5E:8A:84:DE:F2:BE:5B:EB:62:23:48:3A:3D:C5:14
X509v3 Authority Key Identifier:
keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:b0:58:6e:11:c4:4d:4c:86:93:5c:ec:3f:10:6f:77:6d:1e:
33:21:c8:78:79:b8:e3:ec:69:2a:92:67:7e:16:cb:3d:57:17:
4a:03:e5:ff:1d:35:87:b0:7b:e4:6d:b2:2b:60:80:c7:bc:bb:
7f:d4:8e:b1:43:27:17:24:be:8a:86:3e:51:be:cf:4d:26:2c:
1f:0e:c1:26:e8:93:b4:e2:44:60:c5:59:63:76:96:fd:25:61:
cd:7a:8b:5b:23:4c:e7:26:c2:18:45:2e:7f:0b:15:f4:c7:ca:
52:cc:8e:c4:f2:c2:a8:fb:52:a8:2d:43:a8:f6:0c:8c:b4:29:
3b:08:8f:54:38:be:b8:47:35:65:91:ef:60:0c:e4:27:cd:8a:
7d:11:30:6e:f6:f3:cc:92:98:ef:76:f7:ae:02:2e:a7:bd:ff:
bc:47:28:b8:ea:ce:dc:9a:09:34:6b:25:bd:e0:64:b2:01:f0:
f5:ec:7d:f3:90:32:04:f6:80:4f:83:eb:cb:45:b3:3d:6a:55:
23:2d:fa:4f:e7:aa:0d:e6:4f:e9:e7:03:ba:2c:e5:7c:9a:88:
a3:55:97:ff:4b:c1:4b:a4:db:c0:b2:16:ca:a6:25:18:4f:fb:
eb:e1:9a:e1:fa:ab:02:4a:ea:bc:f4:ef:7b:53:fc:39:c6:7d:
44:25:b7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:12:42 2026 by rpki-client