This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
File: 64P0iA8jV15XUXhcbgqyvgskm8M.mft (raw, json)
Hash identifier: PpeiX8x/JlGzNt4tqBR/aygvlQc3jQ+y95aZsV0qqfw=
Subject key identifier: 25:EB:4C:30:5D:15:07:D1:C8:16:35:29:4C:A7:94:93:8E:3D:EF:E1
Authority key identifier: EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3
Certificate issuer: /CN=A917C0F3/serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
Manifest number: B9
Signing time: Fri 09 Jan 2026 05:17:39 +0000
Manifest this update: Fri 09 Jan 2026 05:17:38 +0000
Manifest next update: Fri 16 Jan 2026 05:17:38 +0000
Files and hashes: 1: 64P0iA8jV15XUXhcbgqyvgskm8M.crl (hash: aJ4ZG2pj77mUdqoIelvDKNdgNJubc7wSw/nqfhUJt50=)
2: 028452F0D0BA11EFA8B5A526C4F9AE02.roa (hash: IREGMcYzyBbo6wcvGexVHMAjLf7W6LD1j2SfUrLribg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl
rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Jan 2026 05:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0F3, serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
Validity
Not Before: Jan 9 05:17:38 2026 GMT
Not After : Jan 16 05:17:38 2026 GMT
Subject: CN=69608f72-3c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:2f:5c:cc:58:8e:8d:d1:73:69:16:0a:3b:
4f:09:1d:50:97:b7:0a:78:a7:92:49:2f:29:26:bc:
69:63:cb:e3:94:4e:01:ee:9e:80:ba:65:64:e4:7a:
19:b2:48:25:77:61:86:54:90:73:18:4c:97:a2:46:
95:92:fc:8b:91:82:72:30:04:08:91:c6:bf:bf:87:
14:a9:27:ee:4a:65:17:70:db:96:0e:75:1e:d7:ea:
ec:51:86:76:24:4b:ff:d3:11:f4:13:2b:a4:a0:4b:
73:82:7c:0e:00:5c:1a:9a:15:df:a8:db:db:fd:1c:
7e:36:52:d9:2f:8a:e4:62:a1:22:d9:0f:a4:56:f7:
ca:0d:04:39:14:18:5f:67:6f:62:d8:6b:e9:c0:4d:
e1:cf:d3:67:81:09:cd:b6:33:42:87:9e:78:20:e9:
39:9e:0c:17:40:e4:c6:e4:37:fc:f5:85:ad:ff:aa:
63:9c:c7:1f:a0:e4:47:34:45:ea:e6:a3:d1:8e:4d:
52:57:33:7f:71:ac:7d:3f:a5:0e:ae:44:bd:41:d3:
6f:21:e7:f3:b2:44:04:0b:4f:b8:80:b2:58:16:c6:
a4:ef:88:fd:68:a5:96:be:d9:2a:d9:9e:8f:bd:51:
b6:e6:ce:7a:d4:53:f6:8e:3c:61:7e:72:0f:58:16:
ed:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EB:4C:30:5D:15:07:D1:C8:16:35:29:4C:A7:94:93:8E:3D:EF:E1
X509v3 Authority Key Identifier:
keyid:EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:d6:fe:7b:5b:4d:8d:da:91:c2:f1:b7:12:58:cb:46:8c:e0:
6b:b2:6e:c9:09:d1:66:66:3e:26:74:d1:45:70:48:54:e6:9d:
11:fa:31:19:ef:67:dd:73:3b:eb:d8:39:68:33:cc:a2:8c:3b:
7c:9d:bd:48:61:be:88:28:68:ba:59:92:bc:c4:27:5a:d7:28:
3e:81:34:ce:28:ae:68:c2:42:33:57:b8:dd:8d:5e:19:c3:76:
3d:17:7d:97:35:a2:a5:42:06:a8:40:c5:e9:c3:74:42:a8:22:
c4:6e:c4:2d:9e:88:be:d2:7b:af:58:3f:26:33:e4:28:fb:22:
9b:68:ed:84:72:9a:8a:45:b5:a4:7b:90:98:60:fd:64:e4:c3:
24:14:05:ce:53:29:3e:63:d5:cb:0a:28:78:c2:db:44:aa:00:
b1:f5:6f:63:b5:77:e1:ad:1f:bc:63:46:57:57:76:92:76:ec:
a4:3e:97:76:0a:48:c2:d5:f4:66:02:b9:48:d6:24:99:26:42:
6c:1a:e4:25:8d:30:06:b6:c7:62:f1:e7:61:1d:f2:65:e5:27:
7f:2b:10:4d:7c:52:df:66:0e:ce:34:1b:ca:ab:8e:0b:3f:29:
d7:7f:f0:27:76:b6:ec:17:52:38:7e:94:6b:45:4f:39:07:23:
b2:94:b4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:53:35 2026 by rpki-client