This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
File: edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft (raw, json)
Hash identifier: uAyzwT4FYv+MSektL/6re3Qsd1UIsair9zXP6iUB6mU=
Subject key identifier: 75:F0:87:1E:7D:68:C9:EA:CD:20:D9:8D:6A:F7:3B:C3:E6:45:AF:9C
Authority key identifier: 79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F
Certificate issuer: /CN=A914541C/serialNumber=79D6305FA22FFDF7E351067497862C64A165472F
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
Manifest number: 0153
Signing time: Sat 17 Jan 2026 03:19:48 +0000
Manifest this update: Sat 17 Jan 2026 03:19:47 +0000
Manifest next update: Sat 24 Jan 2026 03:19:47 +0000
Files and hashes: 1: edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl (hash: jINTpq/6OHJDXBMHeXmu0xcBjakHPRX3pyJofJwLpOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl
rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 03:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914541C, serialNumber=79D6305FA22FFDF7E351067497862C64A165472F
Validity
Not Before: Jan 17 03:19:47 2026 GMT
Not After : Jan 24 03:19:47 2026 GMT
Subject: CN=696affd4-8d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8e:8f:23:ee:f6:04:55:27:0a:37:67:af:f6:
2c:39:98:67:92:d5:50:22:fe:90:03:3c:82:a1:e3:
6b:5c:40:f9:4f:9b:07:8a:dc:d8:54:cc:62:d0:2d:
c9:3d:61:c8:2f:ff:fb:9a:c1:33:81:33:8a:fb:89:
55:dc:d8:3c:8b:72:97:ed:fb:f4:b3:61:45:4e:e0:
e7:8f:07:cf:41:8b:37:93:1b:b4:48:76:c6:07:8d:
79:0f:99:e2:c6:71:24:9c:ea:ce:ff:a6:6c:48:e5:
b5:9f:52:15:43:85:5e:96:1b:6d:8d:65:92:d6:ab:
41:96:92:82:91:1f:aa:64:10:0a:39:87:ae:a9:59:
63:62:38:b7:80:dc:2f:df:4a:55:3d:1a:0d:ed:2c:
51:c0:44:ed:b6:8a:69:49:52:93:55:d5:22:1b:9c:
9f:f4:e5:cc:a3:fb:88:e2:e5:65:83:2b:87:1b:43:
12:d6:dd:3c:51:72:fb:44:ff:3b:a6:b7:02:17:04:
1e:f7:74:09:8f:f3:4f:87:c4:a6:51:90:45:73:b0:
0b:e9:5e:7f:93:8f:b7:e2:f7:f0:4a:3b:a1:29:39:
9b:55:56:29:dd:21:9b:0f:1f:a9:66:32:74:f1:2e:
2c:09:af:ab:9d:af:e4:b7:7b:cb:51:02:e9:10:1d:
10:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F0:87:1E:7D:68:C9:EA:CD:20:D9:8D:6A:F7:3B:C3:E6:45:AF:9C
X509v3 Authority Key Identifier:
keyid:79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6a:fb:92:3b:dc:03:0d:04:ee:3a:00:56:65:63:4c:b5:44:
bf:79:ec:da:b0:a2:ed:10:70:f7:ee:39:45:00:61:06:d3:11:
01:af:42:82:e7:55:bb:0f:cd:31:b9:89:94:22:80:93:d4:16:
9a:8f:40:89:7f:52:c4:5c:4b:8f:c7:d3:83:b1:3c:20:c7:3f:
14:18:1c:c1:a2:d5:b8:99:a2:2d:76:ea:ad:72:da:b2:b7:53:
09:42:fc:ac:99:9f:3d:9f:31:38:dc:52:5d:21:83:50:f1:71:
43:e2:f3:c5:eb:b1:bf:ac:0e:23:6c:4a:84:cb:e5:8f:cb:f4:
8a:2b:7c:e0:59:c7:4a:6f:63:67:4b:ed:da:f9:a3:2b:b7:e1:
45:f4:a4:8d:77:cb:fd:9b:37:67:9d:87:52:46:cf:cf:4a:33:
e1:d9:34:e6:b4:f1:0a:f9:f2:0f:5a:4e:be:c1:df:c4:83:c5:
90:52:45:d4:b3:46:78:66:9f:15:7c:55:fb:60:e6:48:ad:72:
5f:85:80:bb:cb:05:a4:b6:a4:52:6a:e8:bf:71:be:cd:9d:d7:
82:5d:d2:52:31:16:d3:89:91:99:7c:34:a5:bb:57:24:fa:af:
23:9e:5f:5a:c0:43:b8:d0:a0:d9:37:3c:ce:6f:5c:ad:bc:96:
1d:22:52:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:11:15 2026 by rpki-client