This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
File: dEjFUfV_GGOM8awfxMv-1D3vT64.mft (raw, json)
Hash identifier: 6N5/WuoRUWAvvEECPEREMGCxONloNmlAPgtboTZLuMY=
Subject key identifier: D6:45:10:D2:C8:4B:BF:70:7B:E4:7F:50:4E:98:61:68:A7:94:4D:27
Authority key identifier: 74:48:C5:51:F5:7F:18:63:8C:F1:AC:1F:C4:CB:FE:D4:3D:EF:4F:AE
Certificate issuer: /CN=A914354F/serialNumber=7448C551F57F18638CF1AC1FC4CBFED43DEF4FAE
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
Manifest number: 25
Signing time: Sat 17 Jan 2026 06:52:17 +0000
Manifest this update: Sat 17 Jan 2026 06:52:16 +0000
Manifest next update: Sat 24 Jan 2026 06:52:16 +0000
Files and hashes: 1: dEjFUfV_GGOM8awfxMv-1D3vT64.crl (hash: wRA1bI0ADa5orYYkO2mXjPKAOEroWd/D3zq2ItJbVOM=)
2: 8EF088C4D77311F0882D4FBB79D3641D.roa (hash: NEVcv1T1D9u5LyZ1/NMZvoEsyEcog9SLjj/OAI9mCyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.crl
rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914354F, serialNumber=7448C551F57F18638CF1AC1FC4CBFED43DEF4FAE
Validity
Not Before: Jan 17 06:52:16 2026 GMT
Not After : Jan 24 06:52:16 2026 GMT
Subject: CN=696b31a0-582d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:2f:a6:b9:cb:2f:82:b9:c7:a5:fe:f8:11:
e5:33:80:1b:bb:b1:30:c4:a9:ec:2a:f4:58:68:1b:
c2:d6:30:89:51:5d:30:ed:1b:ac:53:3d:2f:ab:ef:
ca:4d:bd:42:61:9e:27:3a:fd:a9:75:c4:7b:66:e1:
67:51:88:31:2c:a8:8d:df:3a:6d:78:1b:44:b3:9d:
96:c1:e7:fc:d8:d5:18:00:e5:99:52:3e:3c:06:c3:
53:06:ef:4e:07:79:de:21:2f:57:cc:58:54:b4:78:
06:6c:37:a0:20:b7:60:61:d0:4e:5e:90:4a:38:99:
50:e2:e8:4c:32:5f:0c:f2:d2:6c:96:21:70:e7:b9:
3f:78:68:4a:6f:31:3f:de:db:54:75:03:7d:3c:29:
71:b2:13:a4:5f:92:15:f5:68:f0:f2:2d:29:94:1a:
12:0a:bf:c1:ae:09:24:49:23:6d:ae:1e:78:e1:51:
70:7e:45:b6:27:01:6a:4f:ee:db:61:4b:30:63:1e:
8a:19:d3:03:fc:d9:c5:e9:cf:65:73:c0:6f:f3:fd:
de:d4:83:de:8d:3a:8f:41:d7:bb:c4:86:a8:1b:4a:
8e:a4:8e:4b:a4:00:e0:57:e1:e5:0b:cc:70:a5:c1:
95:14:e7:63:35:35:38:7f:d5:57:58:fa:2f:82:56:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:45:10:D2:C8:4B:BF:70:7B:E4:7F:50:4E:98:61:68:A7:94:4D:27
X509v3 Authority Key Identifier:
keyid:74:48:C5:51:F5:7F:18:63:8C:F1:AC:1F:C4:CB:FE:D4:3D:EF:4F:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:0f:38:5d:29:b3:49:65:5c:41:34:a8:30:00:c0:7c:ea:14:
ad:3f:41:3f:a8:33:69:0d:03:5e:19:36:1b:6d:28:87:7a:68:
a9:49:f1:74:3f:01:74:3e:c7:0e:b5:f8:67:b0:5c:60:45:d6:
a5:da:1e:18:cf:e0:6c:cf:27:eb:bc:d6:a5:13:42:a3:19:dc:
a5:e6:51:08:e9:86:b0:70:90:0e:c9:c6:ac:cc:e3:85:d8:48:
b9:6a:8a:4c:28:33:07:c6:17:77:0a:2a:12:f2:c3:23:78:97:
7a:8e:88:bb:f2:9c:9a:95:23:a4:b5:19:74:91:17:54:01:9c:
e0:a2:e7:2b:76:6c:62:58:4f:27:d2:07:12:0e:58:30:79:37:
78:f5:a7:42:2b:b7:4e:14:2a:73:27:83:f5:b4:0e:4c:b2:a4:
b0:ea:25:1f:b0:b7:05:00:87:d1:68:1f:35:c1:7e:29:cb:c2:
b0:6a:f4:69:50:0f:f1:62:65:be:25:fb:79:d2:ab:57:9b:87:
32:73:f7:51:63:72:36:22:52:45:76:c2:fe:89:95:22:64:f3:
89:8d:79:7e:cf:35:01:0b:61:4e:cf:77:23:02:44:2f:2e:88:
7b:dc:59:bb:60:0f:06:d7:5e:5d:3f:43:0d:da:a8:44:82:7e:
73:7e:e0:05
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MzU0RjExMC8GA1UEBRMoNzQ0OEM1NTFGNTdGMTg2MzhDRjFBQzFGQzRDQkZFRDQz
REVGNEZBRTAeFw0yNjAxMTcwNjUyMTZaFw0yNjAxMjQwNjUyMTZaMBgxFjAUBgNV
BAMMDTY5NmIzMWEwLTU4MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyYi+mucsvgrnHpf74EeUzgBu7sTDEqewq9FhoG8LWMIlRXTDtG6xTPS+r78pN
vUJhnic6/al1xHtm4WdRiDEsqI3fOm14G0SznZbB5/zY1RgA5ZlSPjwGw1MG704H
ed4hL1fMWFS0eAZsN6Agt2Bh0E5ekEo4mVDi6EwyXwzy0myWIXDnuT94aEpvMT/e
21R1A308KXGyE6RfkhX1aPDyLSmUGhIKv8GuCSRJI22uHnjhUXB+RbYnAWpP7tth
SzBjHooZ0wP82cXpz2VzwG/z/d7Ug96NOo9B17vEhqgbSo6kjkukAOBX4eULzHCl
wZUU52M1NTh/1VdY+i+CVpy7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1kUQ0shL
v3B75H9QTphhaKeUTScwHwYDVR0jBBgwFoAUdEjFUfV/GGOM8awfxMv+1D3vT64w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzNTRGLzZEMTkzQTlBQ0M2
MzExRjA5MDI1REYzN0M0RjlBRTAyL2RFakZVZlZfR0dPTThhd2Z4TXYtMUQzdlQ2
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZEVqRlVmVl9HR09NOGF3ZnhNdi0xRDN2VDY0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz
NTRGLzZEMTkzQTlBQ0M2MzExRjA5MDI1REYzN0M0RjlBRTAyL2RFakZVZlZfR0dP
TThhd2Z4TXYtMUQzdlQ2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAL4POF0ps0llXEE0qDAAwHzqFK0/QT+oM2kNA14ZNhttKId6aKlJ8XQ/
AXQ+xw61+GewXGBF1qXaHhjP4GzPJ+u81qUTQqMZ3KXmUQjphrBwkA7JxqzM44XY
SLlqikwoMwfGF3cKKhLywyN4l3qOiLvynJqVI6S1GXSRF1QBnOCi5yt2bGJYTyfS
BxIOWDB5N3j1p0Irt04UKnMng/W0DkyypLDqJR+wtwUAh9FoHzXBfinLwrBq9GlQ
D/FiZb4l+3nSq1ebhzJz91FjcjYiUkV2wv6JlSJk84mNeX7PNQELYU7PdyMCRC8u
iHvcWbtgDwbXXl0/Qw3aqESCfnN+4AU=
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:00:44 2026 by rpki-client