This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
File: 0qCHG82DdsEajwSaOYVa_NsYMGQ.mft (raw, json)
Hash identifier: dobuMUaNuyT7kE4GNOP6waIXW+Zg3LCmd+r3IbMAVi0=
Subject key identifier: F7:71:38:EA:D3:0A:6D:23:FD:6F:52:22:AA:27:42:D8:03:37:31:97
Authority key identifier: D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
Certificate issuer: /CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Certificate serial: 069D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
Manifest number: 0682
Signing time: Sat 10 Jan 2026 21:59:37 +0000
Manifest this update: Sat 10 Jan 2026 21:59:37 +0000
Manifest next update: Sat 17 Jan 2026 21:59:37 +0000
Files and hashes: 1: 0qCHG82DdsEajwSaOYVa_NsYMGQ.crl (hash: Q8s+uRNuKrxvJrHeL6J81t77aKKGFBf8zi/X2dF3bmg=)
2: CB304C36307111EDB0CBD946C4F9AE02.roa (hash: jEdo1Rs/DDX/IrH+sOX8S2VLADZNFH0eDKIDU/uoHNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 21:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1693 (0x69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA82, serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Validity
Not Before: Jan 10 21:59:37 2026 GMT
Not After : Jan 17 21:59:37 2026 GMT
Subject: CN=6962cbc9-b2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:32:47:22:81:6d:f7:66:10:5d:6a:69:88:
48:7a:57:15:3c:20:5d:67:b7:81:45:b4:76:7f:3b:
d7:8e:8f:7b:20:d1:52:86:7b:e3:33:57:21:f2:46:
c1:02:22:6a:49:0a:ed:4d:d5:a6:84:f3:88:3d:02:
c8:03:ba:44:dd:6c:c0:8c:c6:96:17:1a:6e:d4:12:
2f:9f:4c:2d:47:b9:df:15:af:ba:8c:69:de:41:10:
7e:b2:f5:9d:f1:24:66:e1:13:c8:70:22:8e:35:00:
b6:1c:d2:0c:b3:1b:5d:44:57:3b:e8:a3:25:bf:44:
bd:9a:2f:b1:71:c8:54:4d:59:fe:e2:dc:6f:3c:bd:
19:4a:7a:4a:0d:08:8c:75:05:3a:90:70:c9:31:5c:
04:02:1e:80:69:ca:2e:2e:b3:19:74:23:49:8c:f7:
8f:83:f6:94:af:6e:55:0e:ce:56:e1:2a:57:5b:fd:
ed:76:c2:d7:be:0d:fe:5a:b8:d5:3c:f3:aa:35:ea:
84:12:b7:9e:09:12:ee:9e:4d:fa:6b:92:ab:25:ab:
4c:8d:ba:34:0d:f9:b9:b1:db:6c:61:60:0f:41:d7:
92:d5:08:4c:de:5e:aa:02:33:54:56:a3:b2:59:8b:
c7:d5:d6:27:39:07:55:43:ba:30:3b:5e:64:c5:0e:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:71:38:EA:D3:0A:6D:23:FD:6F:52:22:AA:27:42:D8:03:37:31:97
X509v3 Authority Key Identifier:
keyid:D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:53:87:47:17:53:79:5a:2d:1d:8c:e0:a0:e7:ed:16:8f:42:
6c:65:25:4b:de:0a:83:82:43:77:ea:6c:67:b7:70:60:28:43:
b8:bb:6b:2d:d3:43:aa:f1:80:f6:96:fd:4f:c7:32:0c:4c:f8:
74:63:e1:94:9a:12:f7:fc:76:c5:92:fb:2e:82:59:be:96:cf:
a0:ce:45:ba:5c:9e:bf:43:90:41:0e:70:44:f5:a2:dc:cd:e8:
0f:e8:0e:23:57:31:8b:0a:51:ce:5a:dd:3a:1f:93:6c:c0:98:
37:a5:13:cf:90:e0:8a:37:2f:d2:84:03:eb:e6:c0:2e:f6:a9:
bf:b7:cc:60:ca:ae:6a:a0:c3:1a:b8:a0:5a:61:5b:6e:95:ef:
16:48:f0:00:50:92:58:57:4f:ef:68:fb:64:b9:7d:40:0b:38:
ce:3c:f8:e2:1e:5f:b4:c5:79:89:ab:f6:4a:d4:89:b7:e8:03:
12:74:aa:b2:04:a6:b0:f3:71:bf:8f:03:88:d3:99:1b:d9:08:
0b:e4:dd:5a:47:5d:13:ec:be:89:f5:da:c8:88:89:68:8c:80:
15:7d:8c:5c:92:77:8f:01:fd:95:14:a9:5d:f0:be:10:ea:64:
5d:2f:7b:fe:86:83:5f:cb:4a:9b:07:ac:15:92:f5:4d:71:ea:
26:16:7d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:10:38 2026 by rpki-client