This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
File: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json)
Hash identifier: g9oPTIBBojhWnLaliQggCc1j9v4hwz5QL9RAP/MT0AI=
Subject key identifier: FD:85:41:5A:07:2E:F4:3B:A7:D0:4C:F4:20:E7:88:9E:E8:C9:20:00
Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E
Certificate issuer: /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
Certificate serial: 217F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
Manifest number: 217F
Signing time: Sat 24 Jan 2026 15:44:45 +0000
Manifest this update: Sat 24 Jan 2026 15:44:44 +0000
Manifest next update: Sat 31 Jan 2026 15:44:44 +0000
Files and hashes: 1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: gnRO0P7wg+t15VQA5JIoayY/14UEs6lb+v5RbA+F3Gs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl
rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8575 (0x217f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
Validity
Not Before: Jan 24 15:44:44 2026 GMT
Not After : Jan 31 15:44:44 2026 GMT
Subject: CN=6974e8ec-e5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:b1:3e:5d:48:5f:0d:75:a5:1f:70:35:6e:
ce:4e:ab:26:65:d4:15:06:a9:53:22:8b:04:ca:2a:
f5:87:ae:38:5a:fb:1f:d1:da:75:fa:2c:ef:a5:d4:
aa:df:f6:77:2c:b4:48:c7:4b:bb:28:49:df:c8:f4:
54:44:c5:fe:f3:67:2c:c0:6d:42:3e:47:c9:2f:c2:
74:70:1b:ad:d1:41:15:c0:42:c1:65:24:75:d2:28:
ec:d3:16:ce:a3:ca:f9:d6:e6:00:e1:a1:82:7b:1a:
91:d1:01:4a:99:c6:04:e8:e6:80:02:06:ed:b2:20:
22:73:46:0e:d5:fa:4f:1e:e4:25:5e:83:37:03:a6:
f4:cf:b4:a4:af:ff:fd:ab:13:b7:2b:e5:ff:8a:cb:
e5:55:5e:7e:c2:b7:32:5b:c8:dc:06:dc:cc:65:66:
bd:04:34:33:9e:07:ca:f9:bc:9b:14:72:17:33:4d:
df:f3:b1:34:53:10:3c:be:4e:fe:26:5b:4a:bc:15:
53:aa:1a:21:6a:a9:73:44:50:f6:38:c3:d7:7e:57:
51:5e:e0:7e:f7:48:62:75:ea:17:94:11:be:25:e9:
cc:98:aa:bc:1d:ee:3d:a3:10:a0:2f:f7:1f:47:2f:
52:56:34:f7:28:38:4d:82:30:3c:8a:65:84:c8:ee:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:85:41:5A:07:2E:F4:3B:A7:D0:4C:F4:20:E7:88:9E:E8:C9:20:00
X509v3 Authority Key Identifier:
keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:b7:14:2a:df:6f:4a:0d:bd:ee:fa:36:d8:9d:e4:50:34:64:
bf:bf:4c:47:15:82:72:a7:25:b9:9c:70:49:66:80:a1:82:65:
ec:04:49:92:93:71:a7:a4:d7:ad:e4:1a:c1:4e:36:63:ae:be:
72:62:56:0f:31:03:39:2e:f6:8e:4e:5c:00:85:a0:f3:54:32:
16:ee:a8:49:21:06:8d:3a:d6:e5:dd:ad:ff:f5:3e:b8:2c:bc:
25:41:3a:54:3d:6b:b2:ba:a1:6b:d8:ac:4f:8e:98:8c:17:e4:
4e:77:f5:86:1e:15:36:0d:ce:a7:a8:ff:4a:4b:07:ec:b9:6b:
f2:a8:18:79:e1:60:76:53:8a:15:00:9f:0c:87:b4:94:a8:5a:
3d:b5:d8:36:8d:cf:b5:f7:45:6f:f3:b9:5b:7c:83:8c:a6:41:
96:3e:5d:35:29:46:c9:a9:14:21:9f:81:27:89:7a:90:0c:1c:
96:37:dd:c8:4f:b3:4e:f9:08:a0:cf:ba:df:4c:d2:37:04:12:
f2:2f:8c:ff:f9:05:e1:bc:cc:b1:a9:11:c7:39:32:b0:f0:de:
0d:52:34:c8:dc:89:ea:a6:39:44:ae:b8:98:ee:35:9a:de:bd:
ae:cf:75:f0:a4:b6:e6:74:68:88:42:6c:dc:d8:eb:d8:9a:f6:
dd:ff:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:27:28 2026 by rpki-client