This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json)
Hash identifier: oH7kHGLNcH156iwTHYH094SML4UoCo1RSHjXwxrS0jY=
Subject key identifier: BA:D5:DE:7A:AE:35:20:D6:A1:12:2F:B7:D3:A4:1E:A7:CE:10:A2:76
Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
Manifest number: 022E
Signing time: Tue 27 Jan 2026 01:14:43 +0000
Manifest this update: Tue 27 Jan 2026 01:14:42 +0000
Manifest next update: Tue 03 Feb 2026 01:14:42 +0000
Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: wtiZ8JWAnQyCRbPNB7e/cpmHufL5rtIrZTGoFC4TkWg=)
2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: 3fAULkE6ttb330SWu8NuIByl/YALdaeco2VwvKvVPGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl
rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 01:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Validity
Not Before: Jan 27 01:14:42 2026 GMT
Not After : Feb 3 01:14:42 2026 GMT
Subject: CN=69781182-4e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:48:6c:ad:a0:76:10:a6:d4:22:6f:b0:d7:
91:78:9a:6a:c4:1b:ae:57:0b:dd:62:1d:1b:02:3d:
8c:3c:0f:52:a1:1f:37:54:41:66:e2:12:50:64:2a:
3c:4c:73:ec:51:39:46:e1:74:ee:7b:f9:39:77:1b:
fb:05:2f:98:54:36:8a:ef:7b:d1:72:12:8e:a1:9e:
95:5b:fc:eb:4a:f5:8c:90:0f:45:f9:ed:51:43:87:
14:60:7b:a8:34:da:d1:71:69:b8:53:1f:cf:54:10:
66:45:52:43:47:5e:5f:38:6d:a7:42:0b:0f:c6:91:
3c:3c:d5:67:9f:cf:05:51:9d:31:15:a5:65:40:2e:
92:3c:d9:86:e0:7a:c1:cc:73:f0:8d:b1:d7:c1:6c:
d4:55:f7:1d:f1:e5:68:a5:e3:01:3b:12:d2:52:29:
c4:b0:48:c4:06:14:dd:4a:ff:fb:c2:4f:dc:63:4a:
05:68:82:04:56:25:a0:db:7c:14:9e:26:0b:c3:d7:
da:31:f7:4b:ab:61:2b:9c:fc:d5:51:36:ce:ad:95:
20:22:1f:b1:36:4c:f8:a2:83:69:24:62:f9:14:f6:
cc:85:c1:fd:d9:ad:82:3e:9e:3d:7e:d3:44:0e:88:
1f:f8:00:78:69:d6:69:a3:79:a9:83:13:15:f2:b8:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D5:DE:7A:AE:35:20:D6:A1:12:2F:B7:D3:A4:1E:A7:CE:10:A2:76
X509v3 Authority Key Identifier:
keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:d9:a9:fd:5b:01:6c:76:a8:66:22:e1:1b:06:5d:83:c6:a9:
1f:64:78:46:d9:ee:aa:77:e1:a6:d2:48:2d:76:1d:db:d2:7e:
e1:3d:25:56:04:96:57:bb:77:ed:5e:08:5d:6a:c2:c1:09:f7:
f5:8c:8c:d1:2d:b3:78:b9:11:d3:6c:a6:76:30:f1:b4:b2:cc:
6c:c5:c5:07:e9:d1:9f:0e:3d:68:88:d0:3d:fe:36:e3:fa:2e:
f2:1e:c0:4f:dc:04:9a:66:ad:40:52:aa:c6:49:27:36:13:cd:
84:4e:ca:22:6d:f5:86:0b:24:4a:86:3c:68:7d:27:1e:64:56:
82:35:91:a5:73:df:da:2a:aa:1f:07:a0:f7:1e:4c:1a:ea:0c:
97:94:a9:fa:d1:56:b1:ae:29:ef:f9:05:6a:30:a3:12:c6:bd:
69:63:31:11:d0:29:57:c8:2f:b4:3f:65:f4:85:67:97:9d:38:
03:de:4b:1d:21:ee:14:12:3d:a1:f3:f5:34:30:e1:6b:06:cf:
ac:a9:22:b4:25:0f:d5:45:2c:4d:33:67:e9:40:e5:b9:55:71:
3e:30:13:ac:28:83:e3:99:07:3d:62:1e:98:8d:64:9d:5a:88:
87:76:cf:13:4f:95:48:14:25:0b:59:f8:d8:6b:c7:ed:75:b0:
d8:05:ba:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:37:51 2026 by rpki-client