This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
File: PVoEjy0O64mMxmE79kE3I3iWTLA.mft (raw, json)
Hash identifier: T6nzoUeaeL2OMbOv/540KJM+064fw1vJT/Pmk33MtEc=
Subject key identifier: BF:7F:8A:B0:40:31:A3:3A:51:F3:D2:4C:80:FC:09:FC:D1:33:B1:63
Authority key identifier: 3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0
Certificate issuer: /CN=A919AFBE/serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
Manifest number: 2B
Signing time: Sun 25 Jan 2026 06:42:01 +0000
Manifest this update: Sun 25 Jan 2026 06:42:00 +0000
Manifest next update: Sun 01 Feb 2026 06:42:00 +0000
Files and hashes: 1: PVoEjy0O64mMxmE79kE3I3iWTLA.crl (hash: 8BmTEkYuFfIe2xuRyYKeFaTDe/x1tL5xADCTKULPJQ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl
rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AFBE, serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
Validity
Not Before: Jan 25 06:42:00 2026 GMT
Not After : Feb 1 06:42:00 2026 GMT
Subject: CN=6975bb38-812a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:0d:b9:8f:fa:90:80:2d:20:61:80:1c:26:
e8:be:6c:c3:9e:ee:96:14:bc:53:c4:d5:ae:b9:87:
e8:68:a2:d9:4e:83:78:46:5d:b6:a1:10:ec:90:2e:
6c:57:e4:40:f9:20:aa:ee:87:8c:33:62:d6:42:07:
ba:ee:55:9b:99:ab:02:78:99:9b:67:5e:62:fc:f9:
60:9e:2c:f9:69:f8:31:10:8d:07:16:89:94:ab:8b:
6f:28:f0:32:9a:18:2e:45:e1:9a:70:54:c7:02:88:
d9:a6:8a:11:88:34:3c:de:8e:a4:fd:08:99:71:cd:
59:e5:7f:db:80:8b:c4:b9:5b:e3:08:e5:64:a0:98:
b3:91:66:01:36:25:b8:6a:f1:61:4b:3e:99:17:da:
04:48:03:25:2e:38:51:f2:3a:cf:30:93:79:f7:25:
8c:49:28:77:f3:c3:fe:43:60:df:2f:ea:bc:58:30:
26:07:05:ba:f3:06:52:c2:9f:32:cf:6d:7e:b8:7c:
d2:77:b3:e6:99:b4:5b:ec:27:69:39:c5:cd:00:da:
ad:76:b7:01:33:ef:b7:c6:1b:b0:95:e6:30:6c:04:
cd:b4:08:4a:aa:4c:7e:54:95:dc:8c:89:45:00:a8:
25:3d:e6:b0:1c:00:99:ac:58:84:e7:bc:35:1d:bf:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7F:8A:B0:40:31:A3:3A:51:F3:D2:4C:80:FC:09:FC:D1:33:B1:63
X509v3 Authority Key Identifier:
keyid:3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:cb:1d:ee:e2:fe:02:f1:b5:8f:d5:37:f6:d8:92:3f:65:ab:
3f:66:71:44:26:29:96:a0:94:76:99:a8:b6:78:e1:42:af:ba:
9b:6b:9b:7d:02:9f:0c:b0:68:13:47:ae:40:8d:87:1c:04:9f:
8d:2e:95:8a:a3:79:1b:6b:37:42:a0:0f:62:46:69:1e:44:b1:
0d:79:e9:d9:14:a1:35:a1:dd:d2:81:eb:e8:69:1a:74:57:45:
ef:1f:66:c7:c2:f3:78:fe:4b:4b:bd:3d:d0:ca:3c:11:88:06:
0a:19:92:ca:9d:a8:14:4f:2b:75:2a:8b:40:6c:54:77:66:40:
fe:f8:cb:7a:b0:5f:a7:07:b8:f4:94:51:db:9a:02:a1:4d:f6:
2a:25:00:e1:f2:fd:2f:09:ab:42:b5:14:af:d4:b2:ef:ec:04:
57:0a:a4:77:55:6b:a0:3f:b9:18:60:99:85:1b:3c:6c:1d:45:
7c:47:70:97:01:15:e0:8d:ae:7a:45:eb:7d:0d:9e:0e:d8:e5:
cd:20:7e:93:a2:51:2b:eb:68:8f:8b:55:cf:51:36:b4:3e:c2:
fb:fd:b0:03:92:2d:89:14:18:d6:a9:19:1a:0c:57:8a:26:6a:
d5:c9:a2:db:87:f5:b2:38:bb:c1:81:e6:a1:2e:e9:16:1d:cc:
43:b9:4c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:25:05 2026 by rpki-client