This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
File: Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft (raw, json)
Hash identifier: T/J8psOtmuGfwToO3E10TIQ3fahOO/P1ogLrGcduzNQ=
Subject key identifier: 68:6A:4A:EE:FA:F6:1F:A5:61:B8:54:59:76:76:4A:E0:F0:A8:D3:36
Authority key identifier: 12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
Certificate issuer: /CN=A91289A2/serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
Certificate serial: 02
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
Manifest number: 02
Signing time: Tue 10 Feb 2026 04:17:25 +0000
Manifest this update: Tue 10 Feb 2026 04:17:24 +0000
Manifest next update: Tue 17 Feb 2026 04:17:24 +0000
Files and hashes: 1: Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl (hash: m3B/pkyax2LxPufPhX3bP5xc63y5FNsmPaLp9ZrTEXE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl
rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Feb 2026 04:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91289A2, serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
Validity
Not Before: Feb 10 04:17:24 2026 GMT
Not After : Feb 17 04:17:24 2026 GMT
Subject: CN=698ab154-a3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f4:3a:24:f9:83:f0:5c:d7:29:88:1d:25:c3:
0e:b6:12:61:31:ff:80:76:63:2a:06:e8:a1:29:94:
0c:ea:bd:28:cc:8f:62:90:1a:08:8a:d3:cc:42:08:
31:da:79:c1:05:32:31:e1:b7:e5:55:e3:c9:ec:aa:
79:2e:3b:9e:a6:26:ac:7b:10:76:01:5c:b4:3e:cb:
3b:5c:eb:91:b6:5f:96:d4:48:33:76:f1:5f:48:63:
4a:52:25:fb:df:c5:d3:b2:47:64:c8:1f:26:bc:b6:
73:8f:cd:32:a2:c9:97:e1:7b:a9:03:87:e9:ff:10:
83:19:e7:f6:ec:d7:24:bf:d1:76:03:20:74:af:ea:
02:28:5f:9a:d9:75:14:c8:ea:0e:63:89:58:dc:07:
38:05:cd:4c:97:64:74:a6:6d:df:37:97:65:3d:04:
aa:b5:7b:5c:38:4d:bd:ec:c0:20:ec:0e:e6:cb:6e:
46:ed:47:22:10:39:96:e8:76:8b:ea:62:5b:17:59:
a3:e1:65:c1:b0:c8:b6:b5:c2:0b:71:af:d8:dd:a8:
9f:1e:9c:4f:e6:aa:ad:58:e3:af:4d:bb:56:4e:02:
86:6b:dd:1a:77:1c:a7:e9:4f:91:4c:63:2a:f3:a7:
bf:b7:b6:0b:d7:12:9f:5a:c5:16:16:47:97:80:a3:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6A:4A:EE:FA:F6:1F:A5:61:B8:54:59:76:76:4A:E0:F0:A8:D3:36
X509v3 Authority Key Identifier:
keyid:12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:c4:5f:f3:6d:64:ab:f1:40:5d:c6:e4:20:84:e6:be:8a:26:
25:e3:75:57:39:81:25:2a:09:35:64:78:34:c4:7f:af:ca:b4:
8f:13:89:0f:29:9d:60:12:2f:f5:30:37:ee:3a:32:68:36:1f:
b9:76:b5:df:b9:e8:d0:58:ea:db:0b:79:3f:ba:c7:d3:c7:48:
2a:02:d8:51:ac:f5:57:8b:2d:8d:60:4f:1e:86:1e:03:e3:15:
28:dc:c6:be:79:04:43:41:bb:a5:87:06:6b:53:77:d0:87:fd:
af:b8:0d:5f:a0:25:f5:ec:5b:a2:5f:d5:2d:6a:9b:e5:fb:9d:
99:3d:1d:f4:38:01:b1:58:ec:f4:99:ed:0f:40:2d:67:42:fe:
f1:da:c5:de:11:3b:ec:90:f0:2e:77:22:f1:f7:64:cf:8b:7d:
75:13:22:5c:d9:b8:31:6d:84:90:b1:2a:e4:5d:48:09:30:a7:
4b:f0:09:97:e3:b8:b9:dd:04:c6:4d:ec:bc:fd:28:19:e9:0e:
d4:4e:70:02:01:47:76:08:91:1b:96:b7:3b:87:81:ae:d7:63:
d2:dd:d3:c1:e1:27:06:70:a0:4f:d5:30:27:f3:fc:7b:a5:78:
5f:18:28:d0:ad:29:52:4e:35:5e:15:07:3b:52:1e:63:06:ad:
73:0f:d4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 17:05:21 2026 by rpki-client