This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json)
Hash identifier: tIZHr5JwCgCfDNzng9AVBw94PVFk3Uwayb8lRyxN4Uw=
Subject key identifier: 3A:AE:59:D0:E2:D3:3A:EF:77:D5:A2:78:9D:B7:7C:A1:44:CC:80:55
Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Certificate serial: 0CE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
Manifest number: 0CD0
Signing time: Tue 06 Jan 2026 17:53:09 +0000
Manifest this update: Tue 06 Jan 2026 17:53:08 +0000
Manifest next update: Tue 13 Jan 2026 17:53:08 +0000
Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: uzk6TfSdC3TMACACETqq4QI6kOU1pgDgvyRY5GUMYj8=)
2: A869B800367611F088B7726AC4F9AE02.roa (hash: qXTym7QHgjU7nxjj/BiwpmavJHmxjME0/DCrUXeMI8A=)
3: BD34B926367911F083BF6873C4F9AE02.roa (hash: gVVuychvzE/ZHYNs+vgLYCt8oBc+ibgZ1VucbwwNR3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl
rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Jan 2026 17:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3299 (0xce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Validity
Not Before: Jan 6 17:53:08 2026 GMT
Not After : Jan 13 17:53:08 2026 GMT
Subject: CN=695d4c04-1ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:58:c6:8b:07:28:37:26:5f:f7:2a:3e:9b:
b6:e4:28:63:12:30:fd:44:50:7b:05:e5:b3:8b:b8:
e7:40:b2:c0:15:5c:c2:40:1f:24:40:ae:02:7d:36:
07:b2:91:21:79:b2:6a:c9:d9:91:26:ad:f7:a4:20:
1c:b6:64:63:c9:c5:75:fd:89:54:e2:59:67:ed:0d:
0c:7e:c0:44:62:5d:d9:0b:92:15:db:f9:a3:bb:08:
cf:f9:5a:06:0a:09:13:b3:98:9c:d3:a2:85:4b:18:
23:3d:15:4d:7c:03:4f:d6:5b:f3:33:56:f3:41:cd:
70:12:5c:32:38:a7:d5:c6:a5:18:86:fb:8b:98:d6:
f7:8b:67:3b:d3:d7:30:3f:5b:aa:99:73:15:94:de:
22:5d:09:d2:7b:49:1c:a0:2e:dd:e2:15:93:5e:4f:
e3:e4:55:95:c3:8a:77:78:ed:7e:ac:81:d2:2e:18:
eb:8e:e4:30:a0:68:7e:bd:23:9a:7f:18:f9:9c:fe:
ad:d5:62:14:a5:e2:c7:d0:f8:c6:cb:26:c9:1d:97:
c2:6c:87:26:21:27:e8:ff:c0:41:b8:c9:c8:c7:2e:
0a:ea:6d:db:ee:91:52:28:c9:29:6f:ba:cf:19:87:
44:94:2c:ed:18:d1:aa:f2:01:8f:d0:86:b6:10:62:
6f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AE:59:D0:E2:D3:3A:EF:77:D5:A2:78:9D:B7:7C:A1:44:CC:80:55
X509v3 Authority Key Identifier:
keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:49:0d:c4:3c:aa:39:e9:ad:f8:7d:4b:94:ab:55:c8:28:7f:
b0:77:1c:4d:14:3a:c8:ef:0b:f6:b2:d7:43:7d:56:48:35:b9:
f7:ca:46:e3:13:46:88:0a:f0:ea:67:f7:9c:71:4f:11:44:74:
1d:55:a9:21:f2:39:cc:e0:11:70:e3:92:92:a9:a0:52:02:a2:
bf:c9:ec:a5:49:ee:c2:fb:0f:2c:93:1b:73:bc:07:16:e2:3f:
e5:f6:3a:18:66:54:89:e7:5e:92:85:f0:9a:4d:6a:66:67:81:
aa:f5:f0:e2:a8:75:5b:41:41:84:38:9f:11:68:49:72:06:9b:
86:d8:3d:d7:65:d7:14:64:81:e0:24:5f:b6:d5:82:ea:f0:5f:
b2:4b:d0:91:fe:cc:a7:5f:c7:cd:c2:04:4b:78:bb:ca:fe:80:
f6:9a:92:6c:94:94:25:8e:c4:50:e6:ed:83:c7:f8:07:25:44:
49:d7:69:0e:49:6a:5f:8e:cf:25:3a:81:b6:aa:b1:c3:b9:99:
89:83:05:1b:07:2a:e9:ab:53:94:7d:98:4b:1b:ce:2d:53:ea:
8c:29:57:ac:3c:65:86:34:64:f2:09:b6:b9:ba:f5:6e:05:2f:
e8:7e:a6:ba:82:42:15:92:58:32:6f:d9:ac:ca:30:a8:66:f7:
a0:75:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 00:31:23 2026 by rpki-client