This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
File: Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json)
Hash identifier: uO75oW0YZAvvPumxZiPV+pffdyazmvdDLTmK2/W9m+4=
Subject key identifier: 8C:50:5C:E0:1F:74:42:C4:CA:D7:44:5C:9B:A0:91:31:02:C1:AD:9D
Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
Certificate issuer: /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
Certificate serial: 0DC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
Manifest number: 0DBA
Signing time: Mon 12 Jan 2026 17:32:25 +0000
Manifest this update: Mon 12 Jan 2026 17:32:24 +0000
Manifest next update: Mon 19 Jan 2026 17:32:24 +0000
Files and hashes: 1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: ITuu+szttWuLRu3lEc93PdhW/ZgRJtq4MJ7tLWFmv58=)
2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: kfnndHzaWyTnp8z7+y1i5jZZ9EYcGBwsAArn1r5+vLU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl
rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 17:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3522 (0xdc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194EF2, serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
Validity
Not Before: Jan 12 17:32:24 2026 GMT
Not After : Jan 19 17:32:24 2026 GMT
Subject: CN=69653029-822b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:5a:3b:6b:1f:73:4d:50:bb:91:ca:c8:c0:
96:e2:7a:7d:3e:18:9b:4c:af:3f:cc:b7:6f:f2:97:
74:56:f2:95:ba:a8:ae:cb:4d:07:6e:c5:14:e5:87:
fe:ea:98:eb:cb:d2:c4:62:82:6b:66:a4:09:35:da:
8f:f1:1d:d9:4f:ba:24:bd:66:3b:dc:1f:33:92:b5:
11:e7:51:93:ec:d7:15:70:a3:44:c6:c6:c8:c3:43:
ba:72:ba:e9:42:08:c2:56:7e:43:13:22:55:ef:a8:
5d:56:9d:5e:c7:39:68:35:64:07:4c:ae:be:d6:58:
03:47:7f:9a:27:ac:39:e3:a8:5b:d8:4a:77:83:0c:
4b:b8:ba:58:0b:f5:b9:8d:30:d1:e1:7c:0b:78:fa:
b6:9a:10:00:db:68:04:62:ff:e8:da:24:f4:b9:e9:
6e:ec:e6:5e:9a:64:a0:22:f6:7a:a0:2e:13:0e:be:
9a:15:3e:62:46:6e:e5:7f:d0:4c:8c:0b:42:4e:8c:
e9:13:bb:27:2c:34:12:e3:c8:b7:d7:db:f5:da:d2:
8c:87:80:b9:5e:3c:3a:5e:ba:0c:d6:99:04:e2:5f:
d6:5f:e7:d2:69:e5:69:53:74:f2:e9:06:6d:15:93:
fb:e3:40:82:b0:62:3b:08:e2:39:b2:51:e9:68:79:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:50:5C:E0:1F:74:42:C4:CA:D7:44:5C:9B:A0:91:31:02:C1:AD:9D
X509v3 Authority Key Identifier:
keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:87:a1:54:b9:2f:fb:60:09:6c:8c:05:93:aa:f2:1a:a9:55:
32:93:6f:87:9d:9e:e7:23:26:f4:05:e1:44:bd:de:bb:98:67:
f2:e4:20:d1:22:03:8d:01:bc:f2:53:e6:21:45:3d:9d:a9:51:
aa:82:2d:4f:a2:f0:44:93:e0:e5:c8:2c:22:56:d9:10:21:fe:
86:f9:c3:46:43:67:2c:6e:9d:a6:67:89:f6:8f:a4:a8:fa:60:
b5:42:58:01:a8:f4:51:0c:d2:b1:3b:e4:ac:0e:2a:ab:ec:94:
b1:db:8b:0f:9e:3d:cc:f7:3e:1e:dc:b9:e6:ac:a1:b5:48:84:
52:de:d3:93:4b:49:1f:c6:44:b6:14:88:0d:e6:18:47:cb:31:
8e:92:03:ec:e2:5e:36:59:ad:d2:4e:a0:80:37:a7:ce:f6:3c:
5b:8c:75:55:24:bd:7c:88:5d:32:8b:2b:7a:c5:25:b5:68:4c:
b4:37:c0:ee:94:a9:ab:ad:39:9d:61:18:05:71:27:9b:63:24:
e3:50:eb:61:e6:59:30:85:6f:0a:5c:5f:4e:28:36:0a:13:c3:
32:af:b0:ae:73:a9:de:4f:ab:13:4d:8f:ae:7e:f2:ec:e4:02:
0b:54:89:2e:dc:00:84:d8:a2:09:fb:1f:6e:16:f5:fc:9a:b2:
ba:d0:00:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 14 12:22:24 2026 by rpki-client