This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
File: ctH2ecltIFwtRxyUqA3vYNkRJhw.mft (raw, json)
Hash identifier: QHwqmkOfdEEbNqOAZytMCHhUih2HGoF8TNj43kNvRG4=
Subject key identifier: 04:0B:50:A2:C7:21:2F:F4:35:C5:8A:57:3E:3E:EC:83:4A:E3:33:BA
Authority key identifier: 72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C
Certificate issuer: /CN=A918E85E/serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
Manifest number: 0151
Signing time: Sun 25 Jan 2026 03:26:09 +0000
Manifest this update: Sun 25 Jan 2026 03:26:08 +0000
Manifest next update: Sun 01 Feb 2026 03:26:08 +0000
Files and hashes: 1: ctH2ecltIFwtRxyUqA3vYNkRJhw.crl (hash: ++ysycC5m5bci1x4F7wGlnuK9DDTLJoQFaPlI+LiP7U=)
2: 255842A2EFF411EE853CC833C4F9AE02.roa (hash: 0a/19rU1zoR8HPG3b9KrbOC4Srzy59tAkTtlFRC+aqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl
rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E85E, serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C
Validity
Not Before: Jan 25 03:26:08 2026 GMT
Not After : Feb 1 03:26:08 2026 GMT
Subject: CN=69758d51-1cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:f7:36:db:53:bc:8e:40:88:20:8a:3a:9a:
e1:2b:43:34:88:8e:82:69:f1:bd:e6:e3:54:82:14:
b3:aa:cd:b3:ea:b4:a8:21:80:72:b4:83:b1:2a:71:
95:00:ce:f5:76:96:41:6e:2b:d7:32:b7:4c:d2:1c:
3d:a2:b0:26:68:9d:65:33:25:5e:19:31:6b:a3:74:
c8:24:74:a5:fb:f1:d6:11:98:22:4f:c1:e4:32:e3:
48:86:b5:c8:eb:78:fb:a0:80:a3:f4:13:50:77:65:
7d:02:c3:bd:e0:d4:9d:92:7b:9d:38:67:db:e9:44:
ea:12:8e:8e:7c:3e:a7:3b:92:a5:e5:1e:bf:51:b5:
5d:95:49:5c:92:ff:2d:79:4b:67:c5:7e:16:31:c8:
0c:44:59:38:c0:64:eb:ab:1e:75:ac:47:fe:c9:66:
d9:9c:c4:bf:a4:03:8b:14:16:5c:a1:3b:5a:15:a4:
de:1d:1f:0d:b6:29:1d:ad:e6:75:9a:98:d1:1a:3b:
74:08:bf:d8:a2:f4:8b:19:82:91:2a:ea:b0:fb:dc:
de:e9:44:92:35:ad:b7:10:2a:26:1a:87:aa:f2:3d:
91:db:95:68:44:8d:5e:1c:5e:46:41:17:51:3b:07:
05:89:86:6f:10:f4:1c:11:a2:9c:9f:0c:22:94:0f:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0B:50:A2:C7:21:2F:F4:35:C5:8A:57:3E:3E:EC:83:4A:E3:33:BA
X509v3 Authority Key Identifier:
keyid:72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:79:c4:d7:d5:2e:40:79:17:b7:fd:ab:38:85:93:63:03:83:
7c:e8:25:95:e6:f2:7c:28:4b:00:6f:f0:2b:e3:cf:9b:50:4a:
01:ea:fc:ef:1a:44:1a:89:c7:85:75:10:8a:ed:50:18:71:bd:
2c:4f:0c:bd:bc:1a:df:b2:2d:35:b3:26:8e:81:92:46:4d:ff:
f8:7c:4c:0c:1e:d8:50:5f:3a:cb:81:37:f7:84:d7:ca:e1:e8:
92:8d:ca:51:79:12:52:4a:95:0d:1b:67:4d:98:23:7b:0d:78:
29:01:93:74:a5:23:d7:37:2e:c2:1c:8f:68:04:67:69:c4:41:
c6:e6:9e:37:38:d4:e4:d1:b2:3d:f6:2b:4d:61:cc:1a:c1:23:
c8:db:16:3e:11:0f:57:a0:c0:42:01:e8:97:c9:b7:6c:08:f1:
3f:14:35:64:30:be:e8:ca:91:e2:51:1d:60:16:21:c5:4a:03:
f9:ff:a8:41:cc:c7:e5:92:88:11:41:0c:86:94:5c:85:6e:b9:
59:44:6c:ea:5a:42:db:66:7e:2b:b6:e6:32:4d:07:19:93:c3:
42:54:aa:9c:e3:67:93:50:dd:6c:fa:2c:1e:17:e8:9c:b5:e2:
de:78:9f:70:47:40:95:b5:1c:d8:90:31:ba:84:8d:f4:ae:cc:
35:e0:f9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:02 2026 by rpki-client