This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
File: et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft (raw, json)
Hash identifier: JdetQoUSKACc1HBloz22aMun04Ob8rPrG0+S+lX7yoE=
Subject key identifier: 3E:0C:C2:B7:A0:41:EA:A2:79:DF:41:DE:97:26:FD:47:9F:92:21:94
Authority key identifier: 7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1
Certificate issuer: /CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1
Certificate serial: 0735
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
Manifest number: 072E
Signing time: Sat 24 Jan 2026 21:08:10 +0000
Manifest this update: Sat 24 Jan 2026 21:08:10 +0000
Manifest next update: Sat 31 Jan 2026 21:08:10 +0000
Files and hashes: 1: et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl (hash: B/TbNRzDbi6NbXGn+TPFIymxJ7t3lgBVX8SOUdGTIIE=)
2: 210E6234639E11EB81185C31C4F9AE02.roa (hash: lpW0NjdmrOMG9GEGghvuTfgytfrpOcK9mbpw3h0K59c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl
rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1845 (0x735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E1CC, serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1
Validity
Not Before: Jan 24 21:08:10 2026 GMT
Not After : Jan 31 21:08:10 2026 GMT
Subject: CN=697534ba-dbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:e5:7f:c2:9b:47:5d:a0:2e:04:d4:05:9c:
ed:f6:3a:d3:cc:85:f5:7f:04:28:c4:17:32:05:75:
3d:f1:ef:d2:65:4c:ba:e1:fd:52:c6:2a:60:ac:13:
44:70:94:18:12:74:1e:f5:3f:92:48:e0:2c:4b:ef:
4b:a1:43:e1:4a:2d:ca:f9:ba:e6:28:13:1b:e2:26:
a6:93:ae:82:d2:d7:9a:27:0c:e8:87:80:ae:86:c2:
89:d8:99:d8:ae:4e:50:fd:e1:5d:bf:c3:47:c6:ac:
bf:0f:51:dd:5d:20:37:14:0c:ae:e9:93:52:33:55:
36:e7:97:03:75:30:12:f1:6f:a3:a2:dd:93:72:f9:
1b:4d:bd:dd:82:36:9c:60:47:80:04:40:d5:53:9e:
36:02:c8:7f:23:fd:ab:62:a4:bb:a8:08:bf:8f:a8:
67:03:9e:6f:25:98:06:2d:74:b7:f2:66:45:a0:0d:
f2:34:ef:5a:f6:f1:cb:5a:e5:73:8c:b3:18:a1:75:
59:13:39:d5:ec:d4:98:ca:a9:78:28:38:85:92:e7:
0f:49:92:33:10:cf:f1:83:a5:ac:12:8f:09:a4:55:
c4:12:30:a5:0c:b7:0c:7f:71:e6:b1:9b:a0:20:57:
71:de:86:b6:bb:f4:48:f5:24:e9:c0:ea:9d:66:71:
e7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:C2:B7:A0:41:EA:A2:79:DF:41:DE:97:26:FD:47:9F:92:21:94
X509v3 Authority Key Identifier:
keyid:7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:57:38:b6:89:9c:47:f2:f8:2f:c4:a9:f4:71:fa:d5:6a:2a:
a4:59:0e:b3:02:f1:94:d3:78:7b:68:a7:0e:a1:87:1f:28:a0:
4e:fc:5a:ad:dd:d1:84:d0:9b:a2:89:7f:3f:d0:e1:5e:44:8a:
76:12:1c:69:41:8c:e8:22:8d:9a:85:38:3f:fd:04:47:61:dc:
1a:3a:1f:31:33:9e:54:75:6f:39:d5:d1:49:38:02:7a:c7:07:
69:02:43:9b:e6:c8:5b:f3:21:a9:8d:4b:7f:bb:49:ef:6c:47:
a2:08:f8:b3:b4:f1:2e:0c:48:d3:16:2b:79:95:55:aa:84:97:
71:62:23:12:5f:3d:91:bf:8c:e4:55:fb:40:ec:e7:00:ca:bf:
fd:63:5a:f8:72:02:41:23:b3:ba:ba:1f:b0:5e:6f:3e:84:cd:
30:96:2c:bc:4b:1e:69:65:1e:08:27:93:fc:ef:d3:2e:17:83:
cc:8a:fa:a7:ee:8d:0c:81:cf:c7:1b:fa:d1:f3:ac:a0:99:76:
05:fb:9c:f7:48:e0:f2:93:e9:4b:47:fb:64:bd:d2:0f:fc:53:
65:43:77:e7:28:10:af:df:c7:b1:22:54:82:73:c1:b9:c1:16:
f8:97:b5:95:51:48:02:25:9b:1e:34:10:cd:b4:da:f3:dc:e3:
18:f2:d1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:58 2026 by rpki-client