This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
File: f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json)
Hash identifier: hrHiHN910PeI1HJZufclxVQgAKKWhQyCJCB+DM93vlU=
Subject key identifier: B9:52:8B:EC:4B:C6:D5:32:A0:D0:54:E6:FC:44:8F:B8:3A:E2:01:45
Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
Certificate issuer: /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
Manifest number: 01D0
Signing time: Sun 25 Jan 2026 02:08:05 +0000
Manifest this update: Sun 25 Jan 2026 02:08:05 +0000
Manifest next update: Sun 01 Feb 2026 02:08:05 +0000
Files and hashes: 1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: m9rYq3pcWRwDnWj3aYgc4UcC+WuCFFtmDwwwEi7cRRw=)
2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: qONN8LKBOCS/G8QK//DwNmNBl/nUXzBz7NrGBoGYHlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Validity
Not Before: Jan 25 02:08:05 2026 GMT
Not After : Feb 1 02:08:05 2026 GMT
Subject: CN=69757b05-e564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e6:7b:15:44:7d:7f:50:4b:25:4e:b7:33:95:
de:68:be:f0:c2:e5:42:e3:97:0b:ce:43:16:e0:3a:
6d:b4:36:86:d6:aa:46:95:02:dd:cc:68:04:71:9f:
ca:d1:d2:45:92:1d:18:a9:c0:51:4a:92:45:bf:57:
61:ae:b7:10:0f:14:43:dd:e6:6b:fd:6f:56:2e:9a:
5d:c4:bc:99:5a:0f:e8:02:10:4a:ea:18:2f:28:cb:
f7:01:49:ee:08:62:0d:41:34:0d:44:c1:ea:db:d2:
5a:85:09:03:42:76:97:02:bf:e6:02:25:7b:c8:05:
ca:07:0f:58:8a:84:fa:e9:eb:1b:90:90:bc:eb:84:
a2:fc:6d:ae:3d:48:9a:0d:33:24:d1:73:53:18:7b:
f0:67:9c:67:3b:35:ab:16:d7:4a:66:aa:46:30:c3:
9e:a8:55:9e:c7:1d:d8:1e:f4:a5:cc:b9:73:f4:c7:
74:67:0b:d6:ce:f1:8c:b0:e3:fb:29:e8:c2:0f:df:
15:77:03:d8:ce:a3:25:4f:43:18:fc:40:cd:9c:5b:
4d:c0:d3:8b:b2:7e:43:78:60:85:ae:35:10:7e:07:
58:24:b2:d1:e7:e9:2f:f0:8b:d5:c7:21:89:a5:d7:
67:87:2e:60:0e:bc:1e:f1:c0:ec:c1:ee:c7:6e:08:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:52:8B:EC:4B:C6:D5:32:A0:D0:54:E6:FC:44:8F:B8:3A:E2:01:45
X509v3 Authority Key Identifier:
keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:cd:c5:84:1a:8d:dd:91:c3:65:14:25:f1:22:06:d9:78:5c:
06:66:52:1c:7b:34:2f:8a:a7:d5:fb:a0:92:53:1a:ed:21:57:
5f:cf:2f:99:38:d0:0e:b6:1b:22:11:b3:7f:1c:40:10:e5:28:
a7:5d:bd:e9:8a:ec:12:04:18:80:90:1b:13:3b:cc:d7:8f:85:
61:f6:dd:4e:fc:1f:45:25:54:a9:b1:db:82:9d:79:2b:cc:31:
74:66:f9:76:87:d3:59:98:2d:77:0d:df:3e:9f:6b:a0:84:24:
da:2b:2e:23:f8:3a:52:d8:bf:18:76:63:a9:58:ca:f5:62:eb:
34:b1:82:2c:d8:48:5c:46:3a:6d:86:47:73:f8:60:d6:b6:c3:
e0:0e:6b:65:ef:eb:10:5f:05:62:36:b7:17:23:c4:a4:8c:db:
91:2c:cb:52:69:6a:8c:52:60:25:a1:86:11:c4:23:d1:2e:7c:
02:45:c5:93:eb:cf:d0:0f:c6:57:72:45:97:ce:be:29:d8:37:
ea:f7:1f:a1:35:33:11:81:91:dc:f8:79:1c:61:6b:62:91:46:
c2:cb:2b:bb:8c:a6:de:25:df:fa:8a:91:5e:23:39:23:ed:3e:
da:93:e7:86:77:40:49:ed:2d:f4:2f:9c:c5:17:4a:55:f6:15:
ac:f2:c9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:08:15 2026 by rpki-client