This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
File: 7mC-_JS8D3S9nREVbhW6I_fr5ag.mft (raw, json)
Hash identifier: AvjugynInP0puoZFtumybRLpGgMNzJMOyIu1/uOoh24=
Subject key identifier: 39:A1:AC:9E:2E:0B:08:D6:45:A4:EE:EB:00:E1:B5:34:B0:EA:6E:DC
Authority key identifier: EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8
Certificate issuer: /CN=A91B6DD0/serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
Manifest number: 23
Signing time: Fri 23 Jan 2026 06:44:55 +0000
Manifest this update: Fri 23 Jan 2026 06:44:55 +0000
Manifest next update: Fri 30 Jan 2026 06:44:55 +0000
Files and hashes: 1: 7mC-_JS8D3S9nREVbhW6I_fr5ag.crl (hash: n9NNnU0ORrfdptOaMOgJ/JyVhmf+y3OLUhQjvdyBS/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl
rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6DD0, serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
Validity
Not Before: Jan 23 06:44:55 2026 GMT
Not After : Jan 30 06:44:55 2026 GMT
Subject: CN=697318e7-284b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:38:5d:ac:73:1a:52:a6:ef:8a:83:04:8f:4c:
81:b8:5f:e0:8c:94:69:3f:28:49:3c:b6:c8:19:8d:
66:7a:85:af:a9:68:eb:4d:0f:ff:00:d1:8d:db:1e:
a6:4f:82:1d:aa:c5:68:88:02:41:3a:4f:af:69:75:
3a:a7:3f:3c:a2:a6:fd:e7:07:a9:bd:73:fc:df:01:
99:10:ac:f4:19:49:7e:62:72:03:e5:66:53:dc:35:
b5:9c:03:32:8f:b7:57:53:25:fe:ae:76:2f:71:c4:
6e:0b:85:1a:95:b5:34:58:58:91:80:63:75:a7:53:
fe:c4:70:6b:a6:3d:ad:0b:0d:8f:df:a5:0a:3b:ea:
b8:3d:45:e3:0f:3f:30:3b:ff:6b:28:3a:6d:27:bf:
a4:e2:af:46:3e:15:b7:4b:e7:a0:3d:b9:e0:b8:8f:
82:61:45:e6:56:8c:5e:c8:81:be:06:30:a4:10:16:
28:0c:60:59:c4:b6:fa:19:4a:f6:68:c2:65:0c:7a:
5c:57:e2:04:62:c0:70:19:f6:22:ea:a1:cc:3c:5f:
56:7d:3b:a9:cc:59:80:7d:d3:5c:12:38:cf:4e:e4:
e5:54:5a:f8:e6:c2:ee:cc:a2:22:a2:e8:3f:8a:41:
f2:c8:47:3a:85:52:30:e9:35:b2:d7:f5:52:f2:56:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:AC:9E:2E:0B:08:D6:45:A4:EE:EB:00:E1:B5:34:B0:EA:6E:DC
X509v3 Authority Key Identifier:
keyid:EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:17:9a:f2:3d:3b:65:c9:63:e8:84:1e:ed:f0:37:02:7d:5f:
72:60:95:e9:01:37:6c:92:3f:b3:1f:e7:96:09:ab:e3:d9:c2:
86:fe:1f:da:3a:ab:37:fc:f3:a0:d0:7b:e2:f6:66:e8:83:17:
fe:e3:97:3d:40:7e:e9:00:65:f4:6d:24:a5:5a:f1:ec:06:b8:
a1:d6:52:61:9f:09:d6:5d:69:af:0e:48:c7:4d:7a:db:b8:e3:
f4:41:38:68:73:5c:4f:20:b0:e2:4d:69:17:b8:fa:4a:1f:b2:
5e:52:f9:96:d5:bc:11:28:13:91:d3:ab:5c:06:1b:a3:d1:52:
a0:3d:5b:a6:5f:9d:e9:3c:c2:f7:21:5f:71:4d:8b:61:49:86:
1e:88:8a:15:39:4f:e7:99:2e:1b:38:be:bf:b0:a7:f6:1d:77:
d5:fa:1e:b6:96:f1:af:91:b2:85:67:cb:a0:f1:d3:0b:c0:e1:
92:68:d2:a3:43:36:43:d2:88:58:28:f8:d7:f6:56:5b:d0:e7:
72:1f:8f:f7:81:6a:ed:fc:60:a4:68:67:00:f4:b8:9d:42:45:
6e:21:30:b8:d9:d5:40:db:23:bd:ad:83:7a:ea:f3:6e:94:69:
d6:a1:a9:42:0c:ba:5d:8b:17:04:e6:e8:8d:90:35:da:b2:00:
c6:0f:60:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:53 2026 by rpki-client