This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
File: 4suW87BaY-nlR5ZSbszpSjWR5fw.mft (raw, json)
Hash identifier: RN4niy85AR1/jiB7LbxcJ70inaNeGtV+ZF+0g9VV2vs=
Subject key identifier: 78:9E:C9:B5:27:C4:B3:F8:11:22:D4:C2:6B:3B:AA:47:52:9D:DD:32
Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
Certificate issuer: /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
Manifest number: 7B
Signing time: Sat 17 Jan 2026 05:49:04 +0000
Manifest this update: Sat 17 Jan 2026 05:49:04 +0000
Manifest next update: Sat 24 Jan 2026 05:49:04 +0000
Files and hashes: 1: 4suW87BaY-nlR5ZSbszpSjWR5fw.crl (hash: cdSj97Y2zoxvY51rETnFECE/Tg5JH6rl9Skjub9FFJc=)
2: ACCFE0643C9711F08159891EC4F9AE02.roa (hash: wGVIBPNEBcFCJnJRSDz4VWxuIzLpiNR2BJzQPhs1Kok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 05:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Validity
Not Before: Jan 17 05:49:04 2026 GMT
Not After : Jan 24 05:49:04 2026 GMT
Subject: CN=696b22d0-d097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:e2:27:6a:a3:7b:60:4e:5a:36:9d:02:48:
4d:06:07:d4:61:0e:b5:8e:03:62:66:7b:8b:e8:93:
7a:13:d1:58:a6:be:37:1d:d6:a7:7b:c7:60:8a:1b:
f8:2a:fe:09:fd:77:e5:9c:1c:1f:38:f7:0e:02:b5:
97:81:eb:ab:b3:ab:2a:bf:e9:ac:b6:45:80:37:8a:
ff:3f:d7:55:e6:12:18:71:60:61:00:84:0a:0d:24:
d9:ab:06:74:10:b4:9e:13:ca:1f:76:c7:ac:8f:ea:
37:b2:bc:89:04:ff:65:9c:a8:e5:c0:79:25:f6:da:
44:16:ca:a3:22:3c:52:51:7a:ff:3d:5b:8b:12:80:
67:00:d0:00:30:e7:b8:b7:53:31:4d:aa:3b:ec:bb:
67:94:0a:96:c4:88:2d:87:dd:4e:8f:32:9a:a2:4e:
35:82:6f:7f:c3:36:22:ae:81:fe:a7:13:4b:72:af:
42:6e:db:8c:13:e5:e1:79:bf:ea:81:5b:eb:0e:60:
82:21:fa:9f:1a:09:5d:ed:95:4b:78:b7:bc:41:1b:
34:64:f6:32:93:70:29:4c:a4:07:71:ee:88:7e:56:
38:c4:d1:a4:c6:c0:d2:88:5a:2b:87:e4:82:79:e5:
cf:8d:f6:86:74:d9:1e:a0:0a:2e:2d:95:67:56:46:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9E:C9:B5:27:C4:B3:F8:11:22:D4:C2:6B:3B:AA:47:52:9D:DD:32
X509v3 Authority Key Identifier:
keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:b5:91:68:0d:1c:9c:ae:b0:41:ab:9c:ae:24:9c:83:17:1c:
e0:fb:a4:38:f8:3b:a5:ee:9a:8b:34:36:95:a0:77:17:13:56:
8e:ef:4e:24:c4:05:55:08:eb:12:8c:07:74:03:c6:78:e1:d7:
3a:d0:af:fd:44:28:11:80:23:4a:f7:4e:98:ac:86:1a:59:00:
e2:4e:55:4b:38:5e:a4:f1:27:38:d6:66:b0:5c:e4:c5:88:12:
5e:af:82:e2:58:64:e4:2d:a8:c9:0f:8f:af:ab:c2:70:e1:ae:
1c:83:98:71:fb:46:c5:f3:83:4c:1d:b1:89:2f:0d:0c:7b:50:
43:eb:25:55:d6:02:b4:3d:24:7d:62:c1:c8:d8:cc:fb:73:2c:
c3:1c:3f:59:1d:04:a3:9d:d7:a2:3a:ad:23:60:3e:9d:86:c7:
78:2f:45:79:2f:17:e0:fb:c9:86:c8:74:72:ef:19:8c:71:a8:
bd:91:17:bb:74:03:a4:46:fa:58:e4:16:c5:82:df:ea:72:b4:
25:34:8a:59:68:f8:a2:05:2f:5b:73:8c:2c:9c:e2:67:ac:be:
35:b3:53:bb:cd:49:3e:18:8a:8a:4c:ca:45:83:31:18:de:4a:
e6:1e:9e:1d:9f:a9:75:d4:fa:ec:af:95:63:cb:95:1d:a9:66:
84:69:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:13 2026 by rpki-client