This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
File: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json)
Hash identifier: yDA1id3bdTwDrX7P/IUuD96NgCwcrkS+d4EwVTc8Rc0=
Subject key identifier: E8:01:06:FF:D3:38:59:DB:84:37:7A:DD:55:CB:60:3B:52:93:27:70
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
Manifest number: 01B6
Signing time: Sun 11 Jan 2026 02:27:35 +0000
Manifest this update: Sun 11 Jan 2026 02:27:35 +0000
Manifest next update: Sun 18 Jan 2026 02:27:35 +0000
Files and hashes: 1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: YhHJugLfibY4npv9VmZv+ITu88IF2Kj9+lLSrSXE4vs=)
2: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: R7rPLcu7KBIwwKHWQWTFZ/O5x8NWRmyKksg1gxkuSH8=)
3: 337F4584817E11F08861A82EC4F9AE02.roa (hash: KuMW19KH73/hFw8JKl9ArAOUwXbSFArQygkA6LoPJk4=)
4: C45AC058825811F09D83BD57C4F9AE02.roa (hash: awWR/tTohg7Dk0K+TdJ2AhHUsvle/tzHsjESu5B0y7w=)
5: 4B2AA57A817E11F09C78E12EC4F9AE02.roa (hash: REOJoaqVdrJhNGonqBJNmT+BZxMjjyhTcxLRbt3wFv8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 02:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Validity
Not Before: Jan 11 02:27:35 2026 GMT
Not After : Jan 18 02:27:35 2026 GMT
Subject: CN=69630a97-d8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:b6:90:5b:cb:f8:55:95:08:05:25:6c:46:
ca:d8:15:b9:d8:32:5c:26:03:1d:ed:4a:6c:2d:19:
2b:fe:3c:d4:43:be:e8:dd:27:39:73:dc:f1:62:59:
fa:09:ed:aa:e0:77:ac:a5:ab:e9:08:b5:b7:ff:83:
0d:a7:be:34:af:cd:f8:14:32:09:1c:89:4a:2f:ac:
32:a7:af:56:55:17:6d:c3:ae:ca:bb:42:c3:05:a5:
52:11:ea:c7:36:48:7e:11:67:5d:7c:c9:48:b9:ca:
7a:b0:55:d8:6a:ce:94:31:a9:2d:08:d7:bb:6e:23:
73:db:5b:81:16:4b:66:c6:38:54:ca:94:1f:f6:7e:
f7:d5:85:01:fd:17:b2:c7:93:cb:a6:f0:44:0b:09:
f9:9f:ad:71:5c:04:0b:21:84:46:8a:29:55:88:1d:
92:c1:1e:41:0a:ef:86:a6:f8:db:f7:1c:da:49:37:
b6:a0:b6:1e:eb:fa:7b:e0:78:e0:2f:0a:e6:e5:ac:
da:1b:ee:11:f7:fc:4b:ff:20:19:bc:b3:4c:2d:b5:
dc:ca:b9:e9:26:50:1d:23:6a:0d:d5:8a:c5:c0:6c:
b7:33:37:5e:9d:7c:a3:60:4a:86:f3:9c:1f:cc:8e:
3b:d4:b2:bd:14:d3:b1:04:3a:c7:b0:c4:6b:43:76:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:01:06:FF:D3:38:59:DB:84:37:7A:DD:55:CB:60:3B:52:93:27:70
X509v3 Authority Key Identifier:
keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6c:56:a2:01:5b:64:6a:6a:47:35:e7:70:63:43:c1:41:39:
84:aa:2a:0f:a7:60:ec:6c:24:23:63:d7:bf:3d:f5:07:f2:e7:
7a:9d:3d:b1:02:fc:40:8a:90:16:16:b7:a1:f4:78:cd:52:e0:
ae:79:2e:a7:21:b0:d7:6b:b2:1a:0e:ba:a5:dd:a9:ac:0a:3b:
51:50:83:36:33:68:bf:ff:65:58:3c:10:27:0c:9d:89:3c:68:
dd:34:69:47:ec:0b:6d:1d:45:ab:4e:ec:5b:28:b4:66:e8:65:
f1:b1:17:a4:cb:29:b7:b5:d9:dd:1b:9d:4e:a8:46:e5:3e:1d:
62:13:b6:d9:d3:0e:0c:8d:84:73:25:ea:8c:44:85:ad:f7:2a:
12:bc:07:05:68:cf:9c:7f:6f:55:09:fa:e7:0a:11:d6:b5:6a:
62:69:09:45:bf:b9:00:4c:7b:21:89:ec:a8:c5:b9:47:42:bd:
88:16:b8:e9:6b:1d:62:18:23:36:43:0a:8f:f8:e3:7e:c5:41:
9c:51:f0:a0:a1:2a:c9:ea:5c:3f:48:4d:dd:bc:48:fa:ec:c1:
88:f1:d4:36:c5:d1:b4:3f:25:e6:d6:35:bc:bb:f0:c9:99:b7:
42:27:5a:4b:7b:10:9b:de:8a:d4:22:e9:dc:d3:5a:88:ed:ef:
90:4c:0c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:33:52 2026 by rpki-client