This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
File: Si40gGAMyq6JEirTWopQhmCKce0.mft (raw, json)
Hash identifier: Rrr2SEYvEBvlv8lF8FA03OAnNuNJYF01VG4SHic0tjM=
Subject key identifier: FE:47:CC:EF:72:38:90:33:9F:33:AC:47:00:14:68:BC:D4:11:18:C5
Authority key identifier: 4A:2E:34:80:60:0C:CA:AE:89:12:2A:D3:5A:8A:50:86:60:8A:71:ED
Certificate issuer: /CN=A919603C/serialNumber=4A2E3480600CCAAE89122AD35A8A5086608A71ED
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
Manifest number: 0A
Signing time: Sun 25 Jan 2026 07:07:21 +0000
Manifest this update: Sun 25 Jan 2026 07:07:20 +0000
Manifest next update: Sun 01 Feb 2026 07:07:20 +0000
Files and hashes: 1: Si40gGAMyq6JEirTWopQhmCKce0.crl (hash: YOXV/OCX+iuWH3WHvzj327gLZg9Saw0i2v2gpAUsI/g=)
2: 6D31F08EED3411F08AC2355C496F56BC.roa (hash: pDurbBT7x5ydrpiIGg1DeAo8cPZhSJseAbdXTymF+RE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.crl
rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 07:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919603C, serialNumber=4A2E3480600CCAAE89122AD35A8A5086608A71ED
Validity
Not Before: Jan 25 07:07:20 2026 GMT
Not After : Feb 1 07:07:20 2026 GMT
Subject: CN=6975c129-fce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:40:d7:a3:a7:4f:6b:59:77:ad:8c:8e:69:
82:41:77:eb:5b:47:8d:9f:df:76:b0:bc:11:16:5d:
d3:8c:49:31:c3:47:29:11:91:17:e2:c7:5e:c7:e7:
68:09:6e:0e:2c:ef:b2:f9:e0:9c:d3:2f:df:c3:1d:
d6:51:fd:9e:56:f4:f0:f0:35:42:41:df:9f:55:87:
52:9e:a7:bb:81:92:e4:7c:4e:11:b5:92:8b:7c:8f:
a1:35:ff:79:eb:26:47:86:22:06:65:34:4e:a0:64:
2b:4a:f1:16:81:07:f7:f8:da:bd:68:4f:e8:34:83:
80:e7:6c:47:de:c5:c9:42:e5:19:70:c1:99:e7:73:
0d:25:2c:5b:ee:0e:40:f0:da:f5:e6:8b:12:bc:26:
26:63:06:87:3b:47:2d:21:5a:4e:05:e7:e8:02:6a:
c2:38:18:eb:2b:6e:39:d8:47:8c:b5:0a:c0:6c:52:
e4:38:32:45:39:4a:b3:1c:45:03:d5:b9:80:96:0f:
f2:6d:6a:30:99:fa:59:43:5b:e5:6a:79:69:f7:6e:
36:89:6e:97:a3:c4:3a:d9:21:f9:3c:d0:25:fb:59:
e7:1c:30:b4:63:84:7a:a5:90:66:7d:66:8c:03:9e:
ed:d9:04:9f:d0:f8:95:7a:9a:f3:28:4e:45:c0:6f:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:47:CC:EF:72:38:90:33:9F:33:AC:47:00:14:68:BC:D4:11:18:C5
X509v3 Authority Key Identifier:
keyid:4A:2E:34:80:60:0C:CA:AE:89:12:2A:D3:5A:8A:50:86:60:8A:71:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:03:56:55:74:26:e9:47:04:77:58:89:40:43:e6:9b:6d:89:
52:cf:c9:ac:10:a1:bd:db:8a:fb:d6:bb:40:42:b3:25:03:b6:
fe:a1:5a:57:46:bc:b8:8b:0d:dd:bb:54:b6:8c:27:c3:d6:19:
07:7a:eb:5a:ca:da:94:24:0b:b9:47:b9:39:66:76:96:e0:40:
57:d6:dc:e6:8a:7d:a8:22:2d:be:f2:3f:69:b3:83:66:1e:3e:
e9:92:9f:71:3d:20:54:0b:30:68:88:99:c8:09:46:94:87:ea:
7c:21:a3:2d:9b:a7:b7:ad:bd:25:43:3c:bd:5d:d5:a2:4b:57:
ad:15:63:df:48:1a:19:a6:d0:e9:00:fa:56:8b:03:a8:92:e6:
16:f0:94:ff:46:f4:fb:d6:43:41:18:0d:06:94:23:3c:4a:5c:
26:ea:31:e7:28:71:1e:cb:14:2f:ba:a3:ba:47:c6:54:0f:73:
3a:7e:fa:fd:2c:cd:02:60:88:41:fd:f0:7d:52:8f:bb:a2:42:
73:89:9c:37:92:4f:11:d9:2c:13:52:32:2a:48:ff:42:cb:49:
9d:ea:95:3f:e6:6f:38:ff:0b:80:85:ed:a4:c5:b7:ff:63:c4:
5f:34:fd:e5:53:b9:be:b7:fb:9e:0e:63:e1:e0:f6:05:b4:a5:
57:21:ec:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:17 2026 by rpki-client