This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
File: Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json)
Hash identifier: 6nWDWI7RJoKr/BDOO+p+N580h/mvm1gjcvM94Fl09Es=
Subject key identifier: 5F:E4:B2:AE:D8:64:C3:DC:13:7D:53:71:8E:73:78:92:67:C5:4F:F2
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial: 1099
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
Manifest number: 105B
Signing time: Mon 26 Jan 2026 17:08:21 +0000
Manifest this update: Mon 26 Jan 2026 17:08:21 +0000
Manifest next update: Mon 02 Feb 2026 17:08:21 +0000
Files and hashes: 1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: jH7ZtGl1oml9AFug3knia2aeiPjsjK0i2BI+gfxgxEE=)
2: C1313974CD3611F0AF85B537C4F9AE02.roa (hash: ppc/7vtWbXh6lIBiWqey83fiaRTt71rWU/oO4/Z9TxE=)
3: 8030E8628FD211F0924FE573C4F9AE02.roa (hash: uKLFwAF6OPU48tvtT2EBR+YQZKAwbAGiUD5OlNlMeM8=)
4: 912FB56E7E7811F08636DF33C4F9AE02.roa (hash: 0m5izQuKw0aRUU+0vXd30tEyd5boDVcm7O+m75Izs0o=)
5: 390C84E8CD3811F09B08A83DC4F9AE02.roa (hash: 2tXGkSgH+XrWMKUB7Bk9Mor4TTpyKPAaQzZ2GF5++1I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 17:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4249 (0x1099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Validity
Not Before: Jan 26 17:08:21 2026 GMT
Not After : Feb 2 17:08:21 2026 GMT
Subject: CN=69779f85-2bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:85:bc:21:cd:1f:56:15:64:7c:7d:eb:84:
55:6d:03:50:b4:64:d4:a6:0d:1a:61:9b:aa:9b:b4:
74:8b:a8:b0:dc:9b:9b:b9:28:6d:56:5a:da:b1:53:
59:da:38:50:d5:0e:5d:61:24:61:20:12:c6:33:05:
ae:87:5b:5b:38:be:f0:af:b3:84:b1:8a:33:e0:9e:
7d:d2:d9:64:7f:c2:65:06:60:8b:8b:2c:58:ee:e4:
39:30:11:aa:37:e2:f1:11:f3:d5:24:fd:2a:5b:99:
e3:75:a6:8c:52:77:28:53:c4:ad:c6:d6:dd:a3:88:
cf:f9:7f:ee:b6:8a:96:2e:8b:7c:e9:e2:57:8e:e3:
ce:e2:5c:ae:d8:38:af:b1:c7:05:1c:41:a1:b8:d5:
df:36:fd:b9:e5:cb:10:7d:f4:b5:0b:71:96:79:d7:
62:7b:6e:d2:72:0e:df:be:b1:88:77:cb:f6:61:1e:
3d:9f:43:5e:d5:4f:e1:7a:17:16:82:69:54:e6:7d:
f4:fb:74:33:01:9b:57:3b:06:94:65:7f:0c:26:55:
e3:7e:af:57:f9:0d:dc:b7:13:df:ce:83:5b:97:27:
87:fd:f4:14:78:4c:57:76:54:0d:df:a7:7b:d9:c5:
84:39:58:73:88:17:e9:92:8b:35:b2:2d:f8:33:0f:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E4:B2:AE:D8:64:C3:DC:13:7D:53:71:8E:73:78:92:67:C5:4F:F2
X509v3 Authority Key Identifier:
keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:6d:0b:a4:d5:62:e0:48:c6:d5:cd:e7:f0:45:ca:c3:30:44:
23:b3:09:96:a8:ff:27:6e:e0:0f:2a:1f:09:3d:80:df:17:bb:
3e:d2:43:2b:02:51:13:53:a4:dc:50:ac:a5:a7:6b:e4:5d:1c:
dc:a2:83:94:60:6c:4a:90:8c:e4:b0:68:e9:a4:3a:2e:5a:2d:
52:74:82:30:cb:e8:c2:70:ed:21:7a:74:48:c8:76:b6:b6:88:
01:e3:f8:47:ca:d3:f6:1f:c1:e2:68:9a:46:e9:71:c4:f1:3a:
01:8f:cc:74:0e:17:ac:9c:36:02:e6:dd:90:e4:bf:e9:91:2a:
e1:8e:65:39:31:21:7d:c7:df:ed:8b:1d:de:ed:13:a7:46:4f:
10:52:4a:fa:8b:77:67:b1:df:9e:ba:81:be:69:af:a1:f7:1c:
83:ef:03:5a:8b:fe:27:98:bd:4d:80:42:04:bd:58:b4:b7:4a:
04:bd:26:91:d0:61:54:28:a7:1b:35:41:20:c9:0a:b7:48:ba:
ba:f6:46:1a:94:51:93:c2:20:33:87:76:87:78:6b:0e:b2:bf:
77:7b:44:ff:21:0e:f9:1a:c5:93:b1:c1:de:0d:56:a0:72:44:
33:e5:0c:43:16:b2:3c:2f:42:04:72:dd:2e:8f:cd:ea:8f:c9:
1d:73:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 17:52:09 2026 by rpki-client