This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
File: mmZSAdYWDzHXa50heh3_6tEsuoI.mft (raw, json)
Hash identifier: xfQkUh6qJODgo3kArNmE/9Aq3seS0UX5AjmdwHeFVoI=
Subject key identifier: 4B:9A:29:E0:78:07:95:B2:1D:22:FB:C9:CC:E3:EB:C7:8B:63:25:1B
Authority key identifier: 9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82
Certificate issuer: /CN=A915180C/serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82
Certificate serial: 1E44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
Manifest number: 1E36
Signing time: Tue 06 Jan 2026 15:54:29 +0000
Manifest this update: Tue 06 Jan 2026 15:54:28 +0000
Manifest next update: Tue 13 Jan 2026 15:54:28 +0000
Files and hashes: 1: mmZSAdYWDzHXa50heh3_6tEsuoI.crl (hash: kVlc6CQIO83MhqFzMEYEIB3ZJ5NG7sSaB7qcm6WY9lI=)
2: 5F313E6A99D611E6BB89D557C4F9AE02.roa (hash: E6FRFgy91DX39QwXhd6FNmc9ZicG2jWRbQwdVUf8ghA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl
rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Jan 2026 15:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7748 (0x1e44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915180C, serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82
Validity
Not Before: Jan 6 15:54:28 2026 GMT
Not After : Jan 13 15:54:28 2026 GMT
Subject: CN=695d3035-87b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b4:f6:41:df:00:81:34:43:3c:f0:68:28:cb:
a3:c9:b3:d9:d6:3b:59:5a:6b:38:66:f2:f0:62:ba:
a5:01:8c:37:b3:16:6c:67:08:4b:bd:0a:60:5b:ec:
e8:bb:40:8f:b8:a0:1f:de:d6:d4:f5:89:4b:83:a4:
f2:0c:df:3a:29:f4:98:6b:29:c6:35:bb:f8:8b:ec:
f5:ad:25:c6:04:da:05:40:bd:d3:bd:b7:08:bd:3b:
99:f1:5d:0e:43:14:79:66:05:9c:f7:ac:50:e3:1b:
ff:ec:e9:64:26:7e:25:ce:04:fe:d3:eb:ae:a5:74:
6e:d3:04:57:23:c9:99:f9:03:ec:d7:78:54:ad:95:
78:7a:da:ac:28:b5:e6:2c:b6:c8:c0:39:6b:4f:5c:
44:33:ff:79:d2:76:07:3a:5e:5b:e4:97:49:ef:ac:
8a:10:26:7a:cc:5f:2d:79:de:eb:8e:05:b4:96:23:
6a:96:5e:0a:00:df:78:56:3b:53:37:94:89:5c:9b:
9b:2b:c1:66:9c:34:2f:94:fb:ce:2f:2c:bf:0a:9d:
0b:69:35:89:69:ca:f6:84:65:ed:ae:6b:47:64:da:
4e:9f:9a:2d:d3:71:0e:20:2e:eb:0e:e5:46:4a:5e:
90:3f:74:ba:8d:e7:86:3c:b1:24:ab:9a:7e:f8:f7:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9A:29:E0:78:07:95:B2:1D:22:FB:C9:CC:E3:EB:C7:8B:63:25:1B
X509v3 Authority Key Identifier:
keyid:9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:89:6b:76:91:10:2d:ab:11:b4:f3:5d:a6:96:91:8c:64:45:
a3:e0:4a:63:c5:7a:62:07:38:57:fc:a3:1a:5f:69:9e:f7:6b:
b2:ed:46:0c:44:d5:c5:ad:32:b1:57:73:02:d5:4d:35:a0:8f:
04:27:01:5b:ed:49:0f:66:07:f3:50:c6:18:d4:9a:f9:4e:73:
6b:7b:37:aa:b0:3f:dd:ff:04:19:39:e9:0d:b3:81:b9:a8:cd:
f3:af:3f:7b:96:d5:bf:dd:0c:a7:a9:ea:49:8d:9c:1b:d4:b3:
c0:e5:d0:91:8a:7e:58:16:b6:29:48:98:75:4c:0c:47:25:26:
a8:57:32:c2:f4:3d:05:3b:4d:73:61:00:db:8b:9c:59:43:ee:
dd:c9:64:a3:8b:64:b0:e3:63:dc:5f:d4:13:80:ab:a2:42:a8:
45:26:0c:83:67:a5:31:6f:5c:74:a8:98:31:23:83:f5:7f:c3:
08:ae:70:66:b2:8d:57:2e:09:2c:61:52:6e:fd:2b:07:19:76:
0c:a0:fa:a2:61:cf:70:42:c5:85:a1:6a:c2:28:3f:b1:65:26:
b9:f6:3b:74:d6:e1:19:ba:dd:da:1c:65:22:07:97:27:3c:39:
e9:5c:5c:a5:68:cf:05:40:bb:e8:b7:6e:0e:1f:b8:b1:d5:bc:
ec:23:a6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 22:32:10 2026 by rpki-client