This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
File: 7bQ_87hP5VlboMvE9ruHNxPkG7I.mft (raw, json)
Hash identifier: P+s9I3qBcf1sU+H4HsftmRp/1cQUgvOrSH/G8zhyx0c=
Subject key identifier: 10:D2:06:E3:F9:F7:8F:BA:9C:6E:5F:98:1E:96:8E:20:27:D5:41:C4
Authority key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2
Certificate issuer: /CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2
Certificate serial: 071B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
Manifest number: 0712
Signing time: Mon 12 Jan 2026 21:10:35 +0000
Manifest this update: Mon 12 Jan 2026 21:10:35 +0000
Manifest next update: Mon 19 Jan 2026 21:10:35 +0000
Files and hashes: 1: 7bQ_87hP5VlboMvE9ruHNxPkG7I.crl (hash: S3tbTLIAmqm5VDMWQzG6Xgzkf12511O2IfG2vMqpPkw=)
2: 44E9156C730811EC89C1CE31C4F9AE02.roa (hash: +nP7JoRJlDXlTgm/A3tJLnFhD8nwwd0C/uIIbUcU+4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl
rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 21:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1819 (0x71b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167D85, serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2
Validity
Not Before: Jan 12 21:10:35 2026 GMT
Not After : Jan 19 21:10:35 2026 GMT
Subject: CN=6965634b-606a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:ae:2c:d9:89:c9:d1:59:40:0e:6c:20:99:
bb:01:a2:38:ff:57:ae:86:83:87:2b:e3:f9:93:8a:
36:c3:5c:f0:f2:9c:d4:ac:33:fb:53:d4:ae:65:91:
3a:e8:2f:3d:16:4a:49:89:f7:7a:ae:09:da:24:1b:
c7:40:6f:5d:2c:56:3d:f7:d9:d8:03:d8:66:98:f5:
0f:a7:fa:c8:b5:e3:e5:0b:11:bd:3f:a7:c8:9f:35:
ab:83:38:a3:78:53:47:b4:a5:31:05:5a:9d:62:e3:
8b:10:cb:7e:e3:ca:61:27:e0:10:c2:d3:8a:fa:08:
8a:9a:b3:41:3c:8b:89:d1:5c:2f:aa:a4:5f:69:39:
32:2a:38:67:c1:7b:f8:31:64:7a:41:a7:02:bd:40:
cb:41:83:2d:f3:f2:da:24:36:c6:7b:7e:90:16:ca:
cf:1d:86:74:cb:79:c5:43:00:23:28:64:64:0f:81:
6c:fa:16:46:0e:cb:33:f7:3d:42:b2:4e:3b:da:c5:
ac:c0:07:9a:24:ed:0c:77:14:bf:2c:83:65:97:8f:
20:e7:43:b5:da:b4:e2:de:d9:13:3f:c6:a6:e4:9c:
0a:b3:52:32:f4:13:e3:c6:38:cd:1f:fe:ef:63:12:
9b:3e:f1:96:c8:5b:aa:f2:71:5e:f1:c0:92:bf:f2:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D2:06:E3:F9:F7:8F:BA:9C:6E:5F:98:1E:96:8E:20:27:D5:41:C4
X509v3 Authority Key Identifier:
keyid:ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:7f:49:8b:05:e8:a4:76:b3:9f:35:cc:14:2c:19:8c:db:8e:
0a:f5:1b:f4:5b:da:0f:99:f0:cf:49:a8:6c:ba:2b:25:a3:52:
52:55:10:30:2a:e2:f6:37:b8:48:5f:9a:17:91:b1:06:9a:67:
bf:9b:27:e2:63:58:43:d4:29:67:cd:2b:12:2d:12:ad:40:86:
b5:7b:f2:84:e5:66:0b:0c:c5:f2:f2:2a:b6:40:c7:8d:0a:45:
fd:77:25:94:1d:9e:58:cd:0c:2a:68:4c:e3:99:96:48:54:e5:
86:3b:25:f8:ab:76:d5:cb:84:fa:8b:11:2e:53:bb:3c:72:c0:
46:a5:9d:da:18:51:cd:2c:86:3d:a7:aa:af:90:32:c8:81:03:
04:90:c3:d9:7c:20:6f:99:96:1c:be:9e:dc:6e:85:53:43:0a:
2e:8b:1b:74:d8:b4:5d:9f:ad:96:de:a4:ee:6e:70:f1:7f:3f:
63:49:b0:c3:c4:2f:b0:1b:31:36:9b:9a:33:59:5d:c8:b0:3c:
2f:a9:38:6a:34:b4:88:f6:0d:26:38:77:86:e3:8f:57:95:e9:
44:ec:6f:da:9b:7a:b7:b5:0b:ea:03:bf:cb:7a:c2:4b:ea:ec:
9f:50:66:df:16:70:4d:58:7d:9b:b6:58:e8:c8:0a:54:8b:f6:
96:13:a0:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdEODUxMTAvBgNVBAUTKEVEQjQzRkYzQjg0RkU1NTk1QkEwQ0JDNEY2QkI4NzM3
MTNFNDFCQjIwHhcNMjYwMTEyMjExMDM1WhcNMjYwMTE5MjExMDM1WjAYMRYwFAYD
VQQDDA02OTY1NjM0Yi02MDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAun6uLNmJydFZQA5sIJm7AaI4/1euhoOHK+P5k4o2w1zw8pzUrDP7U9SuZZE6
6C89FkpJifd6rgnaJBvHQG9dLFY999nYA9hmmPUPp/rItePlCxG9P6fInzWrgzij
eFNHtKUxBVqdYuOLEMt+48phJ+AQwtOK+giKmrNBPIuJ0VwvqqRfaTkyKjhnwXv4
MWR6QacCvUDLQYMt8/LaJDbGe36QFsrPHYZ0y3nFQwAjKGRkD4Fs+hZGDssz9z1C
sk472sWswAeaJO0MdxS/LINll48g50O12rTi3tkTP8am5JwKs1Iy9BPjxjjNH/7v
YxKbPvGWyFuq8nFe8cCSv/LZMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDSBuP5
94+6nG5fmB6WjiAn1UHEMB8GA1UdIwQYMBaAFO20P/O4T+VZW6DLxPa7hzcT5Buy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Q4NS83MUE2RjdENDZD
NkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVWbGJvTXZFOXJ1SE54UGtH
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdiUV84N2hQNVZsYm9NdkU5cnVITnhQa0c3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0Q4NS83MUE2RjdENDZDNkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVW
bGJvTXZFOXJ1SE54UGtHN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHf0mLBeikdrOfNcwULBmM244K9Rv0W9oPmfDPSahsuislo1JSVRAw
KuL2N7hIX5oXkbEGmme/myfiY1hD1ClnzSsSLRKtQIa1e/KE5WYLDMXy8iq2QMeN
CkX9dyWUHZ5YzQwqaEzjmZZIVOWGOyX4q3bVy4T6ixEuU7s8csBGpZ3aGFHNLIY9
p6qvkDLIgQMEkMPZfCBvmZYcvp7cboVTQwouixt02LRdn62W3qTubnDxfz9jSbDD
xC+wGzE2m5ozWV3IsDwvqThqNLSI9g0mOHeG449XlelE7G/am3q3tQvqA7/LesJL
6uyfUGbfFnBNWH2btljoyApUi/aWE6CY
-----END CERTIFICATE-----
Generated at Tue Jan 13 12:54:24 2026 by rpki-client