This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
File: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json)
Hash identifier: +g6t+e2fvcev5xuzgYUeSSNyCM+wpNnGdKmHWW5YkHY=
Subject key identifier: 21:92:B2:91:9C:74:F9:BE:4B:FF:10:B4:84:5F:72:E8:25:E1:A7:C5
Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68
Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
Manifest number: 022F
Signing time: Thu 01 Jan 2026 01:39:25 +0000
Manifest this update: Thu 01 Jan 2026 01:39:24 +0000
Manifest next update: Thu 08 Jan 2026 01:39:24 +0000
Files and hashes: 1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: Uwq2zdDh8o1icbH/Ieklwt8QSaHFJZmnwXPPUkBN+YE=)
2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: J2faMLBlgt9GzAmsM2dSN7aVP9JzekH0nQNt2xO6dtk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl
rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Jan 2026 01:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668
Validity
Not Before: Jan 1 01:39:24 2026 GMT
Not After : Jan 8 01:39:24 2026 GMT
Subject: CN=6955d04d-247e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:13:bb:3b:d2:f8:1e:c4:06:00:e0:8f:d9:
44:49:40:ca:7c:5c:ae:24:94:40:24:4c:f3:d0:7e:
fb:ba:40:38:2d:8e:18:0e:27:8e:bc:96:5a:b9:2f:
17:02:b2:84:d3:11:86:f7:2b:d9:35:d6:7b:46:f3:
4c:71:78:59:5c:74:b4:53:d6:01:d3:36:d8:8e:72:
3c:18:8b:e8:1e:e3:a3:bc:34:31:03:bf:00:95:e5:
69:a4:9a:41:d4:aa:8f:1e:f9:58:53:b4:61:b7:e1:
f8:6f:1c:56:72:4b:eb:48:ac:9c:27:5e:7b:7d:6c:
f5:84:de:43:eb:9b:9b:a0:e1:3a:a0:63:97:96:d5:
b5:af:87:67:ff:94:e2:6b:04:36:30:59:60:e6:a7:
cf:0f:f2:51:e0:cd:a9:c4:d0:79:9e:34:57:35:f7:
8e:b2:a3:a7:bc:be:3b:e7:eb:67:d6:87:b1:ba:c4:
ab:df:12:ac:07:5e:a9:3c:72:4e:8e:24:c9:74:2a:
92:c0:b0:e5:82:d8:74:32:b6:56:a0:46:34:34:8a:
c7:bc:56:de:64:91:8c:d6:f4:3c:a0:58:30:13:05:
21:77:31:83:80:44:58:3b:ce:04:06:96:4f:73:4d:
73:70:7b:bc:50:41:b6:74:95:81:d8:b9:c0:44:77:
e0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:92:B2:91:9C:74:F9:BE:4B:FF:10:B4:84:5F:72:E8:25:E1:A7:C5
X509v3 Authority Key Identifier:
keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:8c:74:e7:cc:81:8e:05:8f:5e:76:a2:c8:28:20:27:ad:30:
e7:90:29:e0:54:d5:ba:53:72:37:d2:ed:7a:8f:8c:72:32:da:
fb:87:15:03:03:f2:66:c0:01:a2:45:5d:83:93:43:a5:b3:54:
d4:aa:1d:e3:3f:11:b7:18:c2:fe:9d:23:7c:40:04:b0:01:33:
8e:e7:44:73:40:91:fc:0d:5d:ec:f6:03:80:59:87:15:41:0e:
4e:56:be:87:25:0f:b8:55:f4:5e:78:cf:f4:8e:c8:01:a6:b6:
31:63:76:62:b5:83:3a:fb:26:2a:d9:d5:de:d2:6a:27:97:f4:
bd:01:96:b6:bb:52:fe:6c:36:0c:ce:5b:26:17:94:d5:5d:5d:
e5:30:a9:31:5a:8f:92:d3:25:1c:c2:f6:7a:14:99:36:61:f7:
eb:fd:1b:8a:8c:f3:6d:44:ff:e9:d5:29:19:b8:2a:7a:bf:f8:
8c:2b:1f:5a:7b:85:d0:a9:10:a9:29:c2:e5:53:35:c6:fe:38:
92:db:b2:82:16:f7:09:b3:79:5f:fe:cd:74:c3:25:bb:c9:08:
38:0b:4b:34:83:77:55:3b:8c:3a:fb:18:57:b8:10:c3:2d:21:
a8:7c:28:2d:eb:3a:da:05:43:4a:e7:73:81:27:8d:42:6a:e8:
40:a3:7e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 18:35:42 2026 by rpki-client