This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File: c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier: WeNLydw0cJeT7J2aQN9Ts1hNRrwRiScelW90xDBO1AM=
Subject key identifier: B3:5D:39:34:C5:F0:B2:A1:8C:9B:18:4A:AF:C9:D3:22:BB:3F:C8:95
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer: /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial: 1E9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number: 1E7E
Signing time: Fri 30 Jan 2026 15:57:54 +0000
Manifest this update: Fri 30 Jan 2026 15:57:54 +0000
Manifest next update: Fri 06 Feb 2026 15:57:54 +0000
Files and hashes: 1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: BKMH3GoUYi5mTSRZFOA9mLqLywuWO+BB7IJ7OCOprak=)
2: 234A6628299311F0B32D9F82C4F9AE02.roa (hash: wqWtD+2LXaW4MpbT7PeD5JYJic0Zu3FnuTrJZi1gdyE=)
3: 22DC230C299311F0B32D9F82C4F9AE02.roa (hash: EJiEnoCirWsDQY/eDttKswieD8axfAxOee0LqYEm/Qk=)
4: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: BGVuJ0Wf+Uf4RgQQzyj2Cck77KLCc+rr/2VE6L1NPis=)
5: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: C6lZnCUm+xSNFhUq+KN79jJBl7/zRPJh8VdBqkQbpX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Feb 2026 15:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7836 (0x1e9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Validity
Not Before: Jan 30 15:57:54 2026 GMT
Not After : Feb 6 15:57:54 2026 GMT
Subject: CN=697cd502-1141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:76:04:b1:68:4e:10:e2:b7:b5:b2:04:5c:
cd:86:90:38:58:80:b7:c0:dd:fb:f5:ea:ef:5d:8b:
f2:1c:08:7a:91:b1:59:6d:0b:3d:2f:12:b9:b0:74:
a4:5b:e0:c8:69:5e:60:25:10:1c:bd:cd:30:08:bb:
5f:a4:41:90:07:7c:a4:28:f7:93:6b:07:d1:4e:28:
98:ab:c1:1a:bd:1a:96:97:11:9b:fd:fa:d9:83:4f:
c6:2c:af:49:72:2d:a1:ef:59:8a:76:5d:f5:27:ec:
50:f3:53:4c:c5:d7:4a:f6:95:f4:aa:17:a6:4f:c4:
69:2a:c7:5a:b5:c2:10:9d:65:c0:f0:20:14:e5:d1:
8c:4d:08:3d:3e:57:2d:70:01:4a:09:ed:96:9e:7c:
8e:6d:51:45:bd:a8:36:2e:29:f7:f8:8b:d1:65:65:
c1:a4:24:71:95:41:f9:0f:52:c9:1e:a4:66:96:dd:
6a:fc:5c:6d:5c:73:a0:cc:31:6f:13:99:9e:7c:e4:
02:67:2e:f0:4e:dc:2c:c6:64:1d:cc:ce:2f:46:18:
ef:b1:9f:60:59:3e:b5:f7:ea:1a:19:2d:72:f3:b0:
00:62:97:f0:bc:8b:9e:58:07:15:96:88:0c:42:55:
3f:77:5c:77:5c:1f:79:5e:34:31:41:0f:e3:21:f6:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5D:39:34:C5:F0:B2:A1:8C:9B:18:4A:AF:C9:D3:22:BB:3F:C8:95
X509v3 Authority Key Identifier:
keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:39:5e:46:2f:02:2b:d1:f6:35:83:5d:17:51:8e:b0:72:4d:
b9:1e:c0:fd:26:d2:f0:e5:bb:c5:82:4d:0c:b7:b0:15:84:74:
61:ab:71:c4:7c:69:fd:c2:58:c4:01:09:b6:ea:7d:b3:3e:9d:
7c:e8:6b:29:f3:6f:c1:92:c3:70:f1:a7:fe:15:7d:de:4c:bd:
98:34:3b:b3:05:94:01:d7:d6:bc:b1:71:82:a3:62:c9:63:30:
f3:e7:bb:71:dc:ed:94:a4:c6:dd:3a:3e:cd:88:ce:00:b3:e5:
d0:36:da:95:79:69:2d:c7:e7:7d:f8:14:64:fd:18:ac:ed:2e:
1f:f5:09:99:69:ea:e0:12:d9:08:45:bf:e2:a2:27:59:0a:01:
f3:5c:4a:9b:0e:c7:36:a9:a8:36:2c:fd:5c:06:39:00:fc:b7:
6e:70:03:5a:56:19:e0:a9:1c:6a:e0:21:e6:87:16:39:81:c8:
f9:46:d8:69:d3:7e:c3:9f:f0:6d:e7:37:27:3d:e0:74:94:6a:
cc:aa:4e:89:4f:f2:3d:26:fd:a3:a7:0c:84:0b:79:39:b1:2d:
d3:c4:f9:37:8a:2a:79:d2:5d:17:b1:e5:d3:95:55:f7:1e:57:
95:a4:df:6f:f8:35:70:5b:d4:99:c9:1a:b7:37:c8:f6:75:34:
d2:17:f6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 11:56:12 2026 by rpki-client