This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json)
Hash identifier: 5X+H6qOKn7gjTiJrHGUlD/BoL/ZjEbmUdBSdxvk3Q/w=
Subject key identifier: 83:1C:6E:F7:5F:E1:08:EB:DE:7C:DA:4C:4B:AA:DA:B8:AF:32:26:22
Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Certificate serial: 0683
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
Manifest number: 067E
Signing time: Sat 24 Jan 2026 21:47:29 +0000
Manifest this update: Sat 24 Jan 2026 21:47:28 +0000
Manifest next update: Sat 31 Jan 2026 21:47:28 +0000
Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: PNos72DkmXPybhEBBHbNNKUO0wWy118/cJP3K3dJ/Ug=)
2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: otn7zJrk0PPbtnlH9qLQ0UvTzJRXUBW5NBaU6fJKloc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1667 (0x683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Validity
Not Before: Jan 24 21:47:28 2026 GMT
Not After : Jan 31 21:47:28 2026 GMT
Subject: CN=69753df1-9ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:fa:b4:7d:35:3f:b3:04:fb:26:96:da:ea:
a1:f0:a9:83:91:2a:89:8e:51:63:20:7c:31:aa:6c:
7e:e1:a8:8e:91:91:23:df:2e:18:3a:f8:69:b8:d3:
67:4c:47:2a:c1:52:07:7b:a5:42:73:15:9b:60:36:
af:26:28:bc:4a:e2:e2:a3:aa:e6:dd:61:96:be:89:
68:57:08:86:4a:1e:bf:4b:0e:58:b3:c6:53:80:f3:
4e:58:8d:87:02:f7:40:50:4f:65:54:85:76:0b:05:
d9:49:a1:f6:7e:d7:d0:20:62:3d:4f:6a:4a:85:c0:
14:12:92:d4:fa:87:72:22:c7:24:ea:e8:cf:3a:49:
0e:2b:16:92:b8:de:a6:7a:3d:5d:7e:e2:e1:f7:1c:
89:7d:fd:b7:b1:46:7b:01:88:47:6e:2c:e5:a6:80:
2c:38:b8:7f:ba:bc:98:34:c6:5c:3f:ec:a7:f6:24:
71:d8:7a:f6:31:44:f3:f2:cb:a4:e5:1c:06:8e:4c:
57:5e:19:c8:6f:22:51:b4:71:7a:cc:ad:ec:37:cc:
bb:1a:bd:57:2d:fb:4d:54:a5:1f:92:4d:f2:5f:00:
db:6d:8d:09:61:5f:bc:f2:d3:7d:84:63:70:7b:c0:
48:ea:d1:80:f7:db:90:3c:d1:14:f6:b4:b5:a8:7c:
e3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1C:6E:F7:5F:E1:08:EB:DE:7C:DA:4C:4B:AA:DA:B8:AF:32:26:22
X509v3 Authority Key Identifier:
keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:5f:d6:9d:c2:ef:51:69:bb:0f:85:f3:ae:7a:19:72:36:e7:
dc:e0:df:c0:76:c4:e3:0d:ec:25:3a:40:0b:5d:29:dc:71:78:
af:a6:e5:df:37:01:74:3c:33:9d:55:71:4c:75:a4:73:9c:d7:
b0:04:ab:47:80:14:51:cf:1c:f1:61:ed:ca:99:e1:80:77:51:
bc:c7:04:99:5f:50:4f:47:e9:3a:18:b4:96:99:de:68:16:da:
91:f6:09:a2:bb:d2:fd:5b:3c:ab:3f:ed:6b:c6:d5:a8:84:20:
bb:18:72:56:49:5b:b6:ef:c6:ba:a1:6d:6b:3a:d6:10:00:95:
00:b2:2e:dd:4f:8b:32:3a:dd:c5:c7:d5:d8:ae:57:0e:0c:9d:
44:8b:69:2d:8a:d0:eb:30:14:8c:e5:90:b1:2f:3d:50:fd:9b:
b7:c6:73:1f:d3:e0:08:41:3b:f3:95:48:5e:78:e6:3e:59:0e:
6d:fc:5e:5d:37:f3:fc:60:a2:d9:38:6c:b3:00:a9:92:e9:cd:
56:cb:7a:2b:6e:f1:e5:52:b0:92:ac:84:01:7e:37:b9:fb:1e:
a7:73:4c:10:34:a0:88:10:16:66:e2:4c:22:0e:37:13:13:b3:
d6:c7:44:7d:f9:05:22:76:1f:32:cf:2f:2b:63:e8:e3:23:ac:
22:34:50:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:15:20 2026 by rpki-client