This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json)
Hash identifier: 4W943JCDlHeaIVl+fXeiVZYsheN4moUZyykXYVbrvZc=
Subject key identifier: 8C:7D:FD:0D:A6:AE:08:33:DD:D3:12:D3:49:3D:5F:31:02:18:15:DD
Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Certificate serial: 0E49
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
Manifest number: 0E34
Signing time: Sat 24 Jan 2026 14:38:43 +0000
Manifest this update: Sat 24 Jan 2026 14:38:42 +0000
Manifest next update: Sat 31 Jan 2026 14:38:42 +0000
Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: ROkarliNCE4F0HZz/9ItYs2TDBqt2bTkpJR74qzn4Ww=)
2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VLsVnxxlVtlgcvP3UYgj2e5kasbUoQl98RO4NGwLI8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3657 (0xe49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Validity
Not Before: Jan 24 14:38:42 2026 GMT
Not After : Jan 31 14:38:42 2026 GMT
Subject: CN=6974d972-7422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:6f:49:4c:69:1f:7e:ac:35:80:ed:6f:e7:
ef:ef:72:de:8d:e3:fd:d2:e9:41:6b:54:50:3b:a0:
ec:82:3f:27:2f:0e:7c:2b:9c:77:6a:64:27:00:83:
9b:2a:70:5d:36:a5:67:ec:75:55:1e:2e:9f:b3:c7:
0e:e9:46:f4:ac:cb:95:70:8b:f6:e0:75:6b:b8:d7:
9e:02:df:b4:69:75:98:db:a2:39:96:7e:4a:f9:e9:
5c:de:09:e5:83:50:7a:bd:62:9d:c4:db:3b:0d:34:
4d:77:45:87:61:40:37:46:f2:b8:bf:8f:36:a4:b5:
6e:59:81:99:66:97:11:13:34:68:04:90:c7:d2:6b:
13:56:29:db:61:bb:66:46:b2:63:8a:16:78:b2:d2:
b7:bd:f4:12:70:f4:fe:f3:c3:9d:f7:ac:a1:92:95:
68:e5:bd:1e:04:99:5c:91:28:a0:2f:b5:b3:43:91:
42:b2:c4:d0:0c:3e:a3:84:93:3b:14:59:f6:28:26:
4c:c7:78:45:53:90:e7:c4:cc:06:e0:49:da:39:06:
86:a6:6a:40:e4:23:0e:3d:9f:33:40:56:ce:e1:21:
04:a3:26:c6:51:d8:90:be:66:cd:96:a0:85:78:4f:
51:e3:8b:42:bc:63:ec:ed:a7:c2:a9:c8:9c:e4:83:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7D:FD:0D:A6:AE:08:33:DD:D3:12:D3:49:3D:5F:31:02:18:15:DD
X509v3 Authority Key Identifier:
keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:56:c9:76:78:c5:64:fb:91:ed:a4:73:7c:a7:12:d7:b7:79:
37:56:47:8b:5f:1a:2a:db:42:bc:33:4a:38:c3:d4:53:b5:00:
09:52:cf:9f:30:56:57:c9:bd:1a:55:7a:ad:3f:b3:14:36:58:
5a:14:cc:88:98:55:f8:a2:3e:10:e8:3f:c4:49:3c:1d:87:24:
9c:05:4b:a6:3b:5b:db:e8:0d:61:e2:a6:67:c6:25:63:b4:a9:
66:ea:56:04:85:d9:a7:16:08:28:b8:5c:c4:b0:8c:30:5f:ea:
25:0f:e8:f1:03:b5:9d:12:c7:61:14:58:31:c0:dd:a6:9c:fd:
b5:0d:1a:54:34:58:2c:53:63:3e:01:07:b3:8d:2b:f9:e9:30:
12:cf:de:bc:44:cf:6c:95:34:04:bd:36:9c:6f:33:36:b8:cf:
18:dc:71:01:1b:15:6d:f5:53:09:c6:b2:da:00:aa:44:36:26:
8a:e3:95:55:99:a4:10:ff:ac:72:ef:3e:90:3d:db:36:83:2d:
3a:70:95:8d:98:d4:9f:37:b0:5f:f1:a3:c8:36:f0:d7:37:c5:
43:b1:71:98:2c:77:a5:8c:81:85:6f:55:53:4e:24:75:43:bb:
03:0f:cf:a3:cf:0a:58:4f:d2:2b:76:ca:7c:ce:3b:59:87:cf:
65:f9:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:05:53 2026 by rpki-client