This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft
File: d9okgAToxYcr33K6wSIsfMtujjc.mft (raw, json)
Hash identifier: 4YjcBVtc/EOK6gEdElaxNGohIuMCY4OGKYjW9mCR/Jk=
Subject key identifier: 98:5D:A9:3B:F5:F0:4C:86:1B:88:93:3B:5D:55:E5:12:87:71:F3:0C
Authority key identifier: 77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37
Certificate issuer: /CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37
Certificate serial: 09FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft
Manifest number: 09DA
Signing time: Mon 02 Feb 2026 19:36:38 +0000
Manifest this update: Mon 02 Feb 2026 19:36:37 +0000
Manifest next update: Mon 09 Feb 2026 19:36:37 +0000
Files and hashes: 1: d9okgAToxYcr33K6wSIsfMtujjc.crl (hash: NpnRsck0xM1AhNs1q1BmG38hehtUXL4/K+lqnn+IrHc=)
2: 3A58D9F499E611EAB3C00943C4F9AE02.roa (hash: +eSXmzBbgmezGg93b3TG7JXzkYgFkvNOYfX8lsh6cSU=)
3: 3BABBD7699E611EAB3C00943C4F9AE02.roa (hash: 39xXi+BE3qKyQgrVuislk1mPEFnbEpJPwLiHtitE6BQ=)
4: 3AFD491C99E611EAB3C00943C4F9AE02.roa (hash: fDQ1zYNxLplPrz4Qpls9Fd7tB57/fNGS1+72t/RyA84=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl
rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Feb 2026 19:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2555 (0x9fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156342, serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37
Validity
Not Before: Feb 2 19:36:37 2026 GMT
Not After : Feb 9 19:36:37 2026 GMT
Subject: CN=6980fcc6-383f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:86:30:b8:0d:85:00:d5:10:76:f6:3c:7e:
72:84:f0:fd:08:1c:4c:30:52:82:5b:25:a3:b2:ed:
d4:cb:72:07:29:04:7c:48:fd:d1:12:b7:b8:03:f8:
cc:e8:82:40:da:61:a6:ba:f1:23:f6:fe:27:e1:03:
a9:39:7c:2a:bb:c4:f0:a2:95:ec:c7:68:19:50:4f:
f0:6e:13:6c:1a:c5:ab:b4:3d:91:8c:1a:01:28:46:
fc:17:cf:2b:87:7f:d5:75:e3:93:67:8c:e9:9f:c0:
52:2e:d8:bf:82:44:13:5b:19:c7:7b:9f:e2:0f:d8:
ad:11:e3:58:3e:79:f6:65:01:6a:a4:9e:f5:f3:fa:
39:c6:ef:bb:e5:39:51:a3:f7:d5:af:66:d9:77:e4:
2c:00:98:0f:4b:a6:c1:51:1c:c1:8f:b1:9f:2f:7e:
9d:6f:98:23:17:49:e9:98:c7:a8:53:f4:90:3a:24:
8b:50:d1:41:5d:8e:d8:c1:da:a8:26:8e:5e:68:80:
bc:51:e3:e9:fd:4b:50:67:81:88:32:f2:11:f9:32:
db:8a:24:8a:62:a8:70:7b:8f:0a:60:4d:49:ae:7b:
4b:ba:78:ce:9d:95:5a:91:74:aa:86:62:f6:7c:d3:
84:7a:09:31:e6:2a:9a:a5:ed:1e:7d:96:6d:49:60:
92:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5D:A9:3B:F5:F0:4C:86:1B:88:93:3B:5D:55:E5:12:87:71:F3:0C
X509v3 Authority Key Identifier:
keyid:77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:51:81:7b:89:a1:55:b3:90:06:61:f3:b5:3d:b2:4c:a0:ee:
82:71:0f:1f:11:a7:d2:b1:eb:ab:1a:b0:29:40:51:14:9b:1f:
e4:be:18:b0:a9:03:8e:19:14:4e:6d:99:8d:b4:16:bf:1a:f8:
b5:21:8b:7a:ac:46:b3:93:76:51:ac:8a:46:2a:0f:f8:24:38:
aa:9a:c6:04:07:22:5f:99:9c:84:3f:b4:1d:f7:7b:6c:5d:a8:
37:5b:b7:4c:77:cb:3a:1d:4b:b7:ad:40:26:88:09:10:0d:0c:
8a:3d:a0:83:5c:bc:98:c1:3d:38:7e:84:db:75:28:78:9d:0b:
29:b2:0f:fe:8b:d8:08:2c:b1:c5:32:ab:ec:7f:f2:b3:ca:b4:
3f:c1:e8:4e:c4:07:03:12:8d:22:07:7e:26:d3:3b:8f:fc:3f:
51:5e:6a:a0:74:e4:eb:7a:bd:f4:e7:25:55:24:0d:cf:5f:ca:
d9:90:97:74:a2:1f:71:ef:09:6e:a1:8a:43:f3:66:e4:cf:82:
f2:91:f3:4a:b0:09:ec:ea:de:22:c5:f3:9c:48:1c:50:dd:67:
7e:ea:9e:5a:50:81:09:41:30:e2:3e:7c:0c:2e:41:75:61:0c:
0b:fa:00:0c:6b:d4:38:5c:79:e8:ac:5a:76:cc:fc:ec:e3:19:
5a:8b:75:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 01:55:03 2026 by rpki-client