This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
File: B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json)
Hash identifier: edYN2Z8cOMUuPoyWGIzh/+VG7unPFcIdEHuvQw786CM=
Subject key identifier: 9D:C9:F3:4E:79:4D:AD:96:3D:B4:2F:00:D7:31:4A:24:52:6B:0D:6B
Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
Certificate issuer: /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
Manifest number: 0154
Signing time: Sun 11 Jan 2026 03:26:28 +0000
Manifest this update: Sun 11 Jan 2026 03:26:28 +0000
Manifest next update: Sun 18 Jan 2026 03:26:28 +0000
Files and hashes: 1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: 7jvycynLbjXJAJu5fU3A8kVktya1WfYSatiHltfJHqM=)
2: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: v7bT+lzlhBzHYXIgxw7CXDLlyYjEfCYhNYxtpgDCkMo=)
3: 306EFA64A87611F089A2B881C4F9AE02.roa (hash: PG1Zg9YWfOZJBdRe/N5qDFjYHzUKz1vx7yczTSRfIp8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl
rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 03:26:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
Validity
Not Before: Jan 11 03:26:28 2026 GMT
Not After : Jan 18 03:26:28 2026 GMT
Subject: CN=69631864-126f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:b4:c7:58:b8:3f:df:fa:3f:5a:86:42:e9:
89:85:b0:4f:01:e2:7b:91:85:22:94:86:1b:96:00:
0b:4c:33:ef:e2:71:72:10:de:8b:7e:5f:96:24:51:
b1:cf:cb:f6:dc:a2:69:9f:72:31:a0:19:a6:02:3b:
c4:ef:59:4f:c4:28:1a:07:b7:fd:1f:61:47:39:97:
75:e7:73:dd:96:36:4f:99:b3:46:4c:f6:44:ee:51:
67:ec:27:eb:bc:f9:bf:e9:0a:2a:e1:f6:6f:18:c9:
a1:08:86:d2:88:ad:49:ac:e6:9a:38:b8:7b:e3:d6:
dc:2c:ed:b8:43:b4:d0:09:e4:1b:8f:56:48:09:c5:
d7:ab:9b:d1:ad:4c:10:b4:3f:bf:9d:2a:db:e4:0a:
b6:59:79:02:4a:2a:89:fe:54:c0:07:80:d6:1c:09:
39:38:5d:55:76:4b:d0:e3:9d:98:22:12:e2:7e:e7:
2f:e4:12:e9:48:9e:03:1f:c3:60:2f:8c:73:e2:2d:
4e:63:1f:44:6f:70:6e:96:ca:2c:33:55:d7:02:4e:
c6:03:da:01:9a:fc:98:76:2b:5a:64:0a:39:e2:13:
c6:f8:c5:56:f2:de:1a:18:dc:93:ab:c1:d2:a1:c6:
cd:1f:9f:f7:61:f3:13:6d:4f:85:c6:35:44:1c:27:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C9:F3:4E:79:4D:AD:96:3D:B4:2F:00:D7:31:4A:24:52:6B:0D:6B
X509v3 Authority Key Identifier:
keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5d:ed:a1:e4:bd:80:03:5a:7b:a8:c8:8a:c2:fc:ab:b6:0b:
16:f1:d9:ad:36:8a:78:79:2c:b6:de:cf:ed:8e:c1:6f:9a:1a:
b6:d3:2c:5a:b4:a1:11:bc:5f:0d:ff:f8:3c:2a:a1:5c:9d:90:
eb:65:47:b4:88:d1:43:88:18:60:85:27:1a:0b:4d:d5:fe:74:
22:39:76:27:8a:25:76:ea:64:c4:57:09:b0:96:85:8f:68:2e:
e0:e6:62:d5:af:cc:28:f9:d6:9f:db:c5:c8:fc:f2:82:b3:27:
af:a4:90:5e:3a:63:82:be:60:9a:5d:10:22:4b:e3:34:17:51:
f9:8f:c5:70:a5:6e:cc:2d:00:24:dd:68:2a:a1:a4:c2:48:fc:
c3:93:09:fc:b4:6f:9c:69:28:f4:e2:0d:58:27:ad:97:3c:55:
f2:6b:d1:6b:d4:83:b5:05:c8:62:9e:29:f8:c8:25:86:40:63:
a5:0b:d8:c8:c0:b5:d3:36:51:80:19:8d:47:ee:69:95:87:9b:
19:45:47:1b:14:18:fa:c5:44:a2:b8:cd:56:a8:b1:0b:26:5c:
bb:e0:c8:ce:32:f9:97:c1:07:2f:4c:4c:7e:04:75:71:47:33:
12:eb:46:fc:16:5f:cf:b1:a4:61:ba:75:39:98:a4:b3:f2:61:
20:c9:80:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:49:47 2026 by rpki-client