This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft
File: 67oUOyhmNxjNjH2j9jEAmpgE7l8.mft (raw, json)
Hash identifier: HpGDLwjRwkIKdzh4GObwIJOd2wIiIfGAbSl73h7vVps=
Subject key identifier: AE:29:D4:5A:CF:5D:36:A6:EC:31:0A:87:5F:F6:5B:62:A1:5C:23:6D
Authority key identifier: EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F
Certificate issuer: /CN=A919676F/serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft
Manifest number: 0211
Signing time: Fri 23 Jan 2026 01:31:27 +0000
Manifest this update: Fri 23 Jan 2026 01:31:26 +0000
Manifest next update: Fri 30 Jan 2026 01:31:26 +0000
Files and hashes: 1: 67oUOyhmNxjNjH2j9jEAmpgE7l8.crl (hash: OB9fnEhQ4HZYrlSd57WbkdPNh0LYe+NSiGS5wMcrJRs=)
2: D277F83CD3A411ED8C51160FC4F9AE02.roa (hash: svqT+ztwVAcsLzuBMu/xSdAzmsSO3QMnOMcc+rCxEvg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl
rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 01:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919676F, serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F
Validity
Not Before: Jan 23 01:31:26 2026 GMT
Not After : Jan 30 01:31:26 2026 GMT
Subject: CN=6972cf6f-5312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:3f:d3:2e:6e:ba:12:89:cb:72:55:4e:28:
68:e7:60:5e:d5:92:49:d0:f6:67:f7:92:5f:e4:d4:
54:c8:db:63:ff:a8:47:4c:c2:68:04:48:fd:62:66:
b7:d1:80:3d:c9:d4:51:5c:a5:6a:d2:35:10:09:fb:
e8:82:88:f3:36:11:3e:34:a8:65:04:26:31:ed:e8:
6f:11:2f:30:54:e9:46:d4:cb:96:a1:c4:cb:55:b7:
df:0b:b3:af:7a:f2:40:08:03:f2:ed:0c:26:cf:fb:
de:a8:e3:95:1b:be:da:6e:b3:db:1b:d7:78:9a:aa:
52:7c:19:11:56:ad:0a:10:f4:90:3d:d4:dd:b7:45:
a8:cb:af:8a:c3:d8:40:32:2e:d3:36:f0:0d:bb:7d:
cc:7e:c7:6e:8b:1f:92:5f:15:57:c6:a7:d4:58:74:
88:fa:d6:36:b9:da:39:98:0e:51:a7:30:4c:57:93:
57:d9:47:9e:3f:8b:c7:fe:8b:3a:b6:1e:6f:27:ab:
21:c1:9f:3e:52:45:82:f8:f2:d6:17:9a:3e:20:60:
97:19:47:4f:01:8b:c7:86:9d:07:fd:9e:6d:fe:69:
5b:de:da:cb:96:59:f2:9a:80:d6:00:07:ad:2d:f4:
e2:e1:3f:ad:d6:9d:c7:9b:69:e3:ee:21:2d:0f:8f:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:29:D4:5A:CF:5D:36:A6:EC:31:0A:87:5F:F6:5B:62:A1:5C:23:6D
X509v3 Authority Key Identifier:
keyid:EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:8c:ba:a9:52:f9:13:12:50:c9:bd:2b:52:7d:6a:d9:aa:a8:
63:f8:1e:35:63:af:e2:66:3f:23:6f:a9:61:c4:65:d8:bf:50:
2a:71:88:ae:b4:98:24:22:0a:a5:6e:93:31:9b:23:2c:a0:af:
2d:22:b6:9b:3d:6a:0b:a9:b3:36:a4:b7:58:7d:28:da:11:a1:
3a:cc:d1:92:94:a9:e0:92:68:00:88:b9:6e:96:86:fd:41:b1:
6b:1b:2e:49:ae:7a:a4:76:01:dd:3a:8f:2d:13:10:7f:54:98:
3c:ac:76:e4:33:87:2e:19:1d:34:24:58:7a:03:db:8d:61:99:
85:60:a2:54:7d:ee:02:74:64:b5:6c:19:5f:a7:74:f8:db:1f:
7e:55:23:bf:ce:0f:84:5b:49:83:b5:57:63:a7:d5:cc:25:11:
63:9b:2f:f9:0b:89:1b:5b:d8:5f:30:fa:87:63:45:12:0f:30:
f5:3f:55:7b:d9:0d:01:c1:9f:03:66:07:ff:31:90:bd:80:70:
29:29:83:bd:39:4f:8d:17:54:a9:2c:86:d3:a7:ff:68:b1:2a:
b9:85:4e:5f:bd:4b:2b:cc:d2:7f:f6:dc:9f:f5:45:e5:e4:44:
aa:30:65:d4:56:84:70:2e:35:6f:a5:68:2e:59:7e:0f:fa:22:
b6:94:59:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:00:54 2026 by rpki-client