This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json)
Hash identifier: DAzqWx9yZSNQa6MiJeTv3xG97uV0fwxihShz8mCL0jI=
Subject key identifier: 44:A4:54:57:70:A0:7F:73:F8:31:EC:C2:33:04:BF:F2:D0:BA:F6:8E
Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F
Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F
Certificate serial: 09E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
Manifest number: 09DF
Signing time: Sat 24 Jan 2026 19:21:43 +0000
Manifest this update: Sat 24 Jan 2026 19:21:42 +0000
Manifest next update: Sat 31 Jan 2026 19:21:42 +0000
Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: fq2jwKVh5X29S3oIGDlNfDYYOr2/IZNkWpnmey8tSSk=)
2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: y29+eLqwD1TM2B3iSaNDq0mQUyWoEIqAhmsup5cKXZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl
rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2534 (0x9e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F
Validity
Not Before: Jan 24 19:21:42 2026 GMT
Not After : Jan 31 19:21:42 2026 GMT
Subject: CN=69751bc6-dbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:d4:41:4a:d2:6d:67:fb:07:32:f7:a2:9d:
f7:79:6c:b3:99:87:f5:74:6b:70:87:e4:c4:93:02:
27:2c:5e:d4:0c:4b:ce:9a:fc:81:e7:6a:02:f4:d9:
d0:f6:51:06:46:43:57:ed:ff:d1:2c:f6:64:6f:48:
aa:58:b9:cd:86:f3:59:57:49:7d:3a:2d:9a:e7:3c:
fc:13:16:71:3b:cc:45:8f:0a:c9:92:a0:89:95:01:
56:3a:83:f6:b9:00:73:4b:61:c6:7b:07:dc:3d:b9:
a5:70:45:8c:44:db:1a:8c:fd:21:5f:e5:16:91:3b:
d0:71:5d:f1:64:87:3b:9c:d4:fd:1f:7e:06:0c:d5:
b3:c8:97:7e:57:ab:8d:2c:6f:40:dc:0e:2b:60:31:
e3:9c:63:c3:60:3a:87:a3:e5:8b:32:0d:5c:bf:99:
9d:13:3c:38:f2:fa:9b:54:fb:e6:c3:e0:3f:b6:e4:
c6:f8:a9:8b:d4:8f:a0:d5:10:bf:48:86:4c:59:c4:
ed:d6:0e:6e:49:40:63:d8:72:3a:10:de:37:00:cb:
43:02:66:93:3e:fe:ca:c6:e9:20:d0:af:c9:43:ea:
e2:c2:f1:3a:b2:6c:41:26:e4:82:eb:14:2d:13:ce:
a0:af:35:a5:74:fb:c7:72:05:c5:17:f3:f6:4e:a3:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A4:54:57:70:A0:7F:73:F8:31:EC:C2:33:04:BF:F2:D0:BA:F6:8E
X509v3 Authority Key Identifier:
keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:cf:c7:5f:25:fa:11:ab:66:84:ab:fd:64:d7:6b:fe:fc:5a:
7c:64:f8:c9:ff:36:20:9f:bd:76:0b:29:a4:18:46:95:a4:35:
89:e5:22:d8:4d:42:aa:a2:7e:03:21:56:1c:4a:f1:c8:56:ff:
73:c3:77:d4:ef:a0:38:77:bf:58:be:5f:43:2a:7c:82:f7:93:
fa:83:1f:b3:2b:52:18:29:1b:51:cf:94:1d:36:c8:73:ee:c7:
dd:54:22:d4:a8:fb:6c:a2:5b:2b:89:cf:3e:11:38:36:ec:bf:
4e:db:e4:e6:d2:d1:02:88:04:0e:ff:1e:52:6a:fe:d7:98:39:
61:5f:37:4a:b4:4e:7b:33:1a:2b:52:02:7e:6e:da:6e:00:26:
e9:19:e2:d4:44:ea:e6:66:27:2f:2c:34:93:72:23:75:ee:fc:
6e:79:9a:08:1f:c5:00:cc:8b:59:8c:59:30:02:29:78:5a:e2:
ad:75:a2:9d:44:6c:be:21:24:68:84:a8:63:bc:95:e2:b1:17:
69:6d:d0:e5:30:19:ce:7e:39:21:4c:92:c2:6b:99:74:00:90:
55:dc:39:19:c1:aa:70:f8:26:f8:eb:a4:8e:3c:0e:75:95:7b:
66:02:e6:ea:ad:d2:ff:a7:44:d6:c7:d9:1c:98:2d:fa:e8:55:
ad:8d:eb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:16 2026 by rpki-client