This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
File: E5zB22udJLk7FJKKdRjQTrOyajo.mft (raw, json)
Hash identifier: li32J+jx+j/7q+0G7vKEFaaihRht5Z6gKWI7klGnPHM=
Subject key identifier: 35:81:CA:A3:58:9A:7F:78:68:52:DD:11:F2:2F:C2:7D:AB:50:D2:45
Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
Certificate issuer: /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Certificate serial: 227D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
Manifest number: 2241
Signing time: Sat 10 Jan 2026 15:42:40 +0000
Manifest this update: Sat 10 Jan 2026 15:42:39 +0000
Manifest next update: Sat 17 Jan 2026 15:42:39 +0000
Files and hashes: 1: E5zB22udJLk7FJKKdRjQTrOyajo.crl (hash: 62jLGn99GPXpYPxglaXTEUXJ4DHQm/SPq58cffS8z6U=)
2: 5AE16D9A386F11EFABF4E132C4F9AE02.roa (hash: 9Ncc5eO7lsxHhsxCWRYMxRGSAkh2VnH6ZKESuNAQzvA=)
3: A20F01CCE1E511EEA0477018C4F9AE02.roa (hash: XEA5HBhsYH3LIGpBqjlOM3tEelRDYUoKK//5he1LRJg=)
4: C4F05AA6144911EF85E2DC26C4F9AE02.roa (hash: j3DVuY32luQDVa/vF1hOJNJXMyj5FRS3jyl06+nliBE=)
5: FF59EC70144911EFA2053B27C4F9AE02.roa (hash: 87Wd3ufHux4x6En79V3HJ0yy+yl6nx7Qh9e0Kc4SLtA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl
rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 15:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8829 (0x227d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DAF2, serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Validity
Not Before: Jan 10 15:42:39 2026 GMT
Not After : Jan 17 15:42:39 2026 GMT
Subject: CN=69627370-39d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:ae:6f:08:25:25:f8:d9:cb:ba:f2:82:ed:
a0:ac:b5:29:0a:18:83:d4:41:22:19:17:7a:ff:ff:
9c:e2:ac:1b:51:ca:d6:9f:71:83:37:9c:a0:0f:01:
2d:e9:0a:d9:df:e1:80:d9:da:08:93:81:8a:f2:94:
b4:cb:d8:92:fa:bb:9b:41:75:08:6a:fd:e4:fd:ee:
6a:c0:56:4b:dc:17:b7:70:93:b1:a6:a1:a6:0a:f7:
f8:ba:79:7b:e4:cb:7a:99:19:dd:b4:1a:1d:98:4a:
41:5a:56:0a:27:c1:f4:77:41:8a:9b:d9:5c:dd:58:
0c:f5:68:08:38:b7:72:ba:00:9c:9b:31:5e:9f:ab:
e3:4a:6f:be:87:0b:95:74:79:d3:c3:34:d8:4e:de:
02:ff:a9:4b:96:3c:9d:7d:64:fb:c8:50:fc:de:a2:
ae:d1:20:b7:28:2d:ca:a2:1e:59:b6:a6:ee:af:88:
6a:ff:fa:67:a1:f4:35:26:44:bf:02:7d:56:e4:d1:
0d:4e:71:d7:a4:fb:cd:b8:3d:ec:09:72:8f:3c:de:
60:7c:67:4d:3f:ce:59:6b:f1:d5:67:dd:9d:ac:22:
34:af:f3:75:fe:ff:d8:d7:0f:d5:8c:44:78:74:f4:
9f:f7:08:0c:d5:ba:e3:46:e6:5a:8f:f8:e8:fe:e7:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:81:CA:A3:58:9A:7F:78:68:52:DD:11:F2:2F:C2:7D:AB:50:D2:45
X509v3 Authority Key Identifier:
keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e2:f6:f1:dc:06:85:ee:54:7b:b0:ea:33:a5:77:c9:74:7e:
2e:6a:07:d2:0b:e5:f2:87:88:2f:b3:28:e7:db:af:e6:62:49:
7c:c3:9e:bb:61:8d:e4:ca:5f:17:7a:dc:02:c2:27:35:67:7c:
32:75:70:1e:8a:8e:4e:f7:42:bd:de:79:f6:9c:1a:b3:95:b5:
66:90:7a:4b:c1:2b:98:45:19:c2:a1:f2:a7:49:c6:24:bb:81:
11:93:43:75:25:48:4d:0c:6d:86:79:07:20:24:92:89:2d:f2:
56:a3:e6:66:9a:43:9d:0b:d8:c8:11:f6:7b:51:82:a4:d5:be:
ac:e2:98:42:a8:e8:85:4c:4f:04:f6:09:2a:2d:bf:73:e4:d6:
3b:67:3c:bf:e1:46:f0:be:32:03:c6:41:2d:f1:5f:da:bc:34:
63:0c:3a:90:c2:0b:d3:32:7b:9a:bb:45:65:40:b1:a0:e6:91:
b3:93:da:c0:60:d4:1b:3c:c6:b2:27:9c:25:25:ab:2d:32:96:
70:31:12:b2:5c:f6:03:98:0a:1f:f8:30:13:f9:b1:57:18:0a:
36:d2:5b:75:b1:e2:fe:b2:ae:df:ed:4c:08:ae:0e:78:3c:5e:
1e:1f:d5:a2:e1:95:b8:42:92:d3:e1:8e:98:70:ba:75:ee:1a:
fd:cf:f6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:05:00 2026 by rpki-client