This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json)
Hash identifier: uLq6RXmoV9ppeKwW1OtOTwVO8XWpr8fHs+dnS1nW/Pk=
Subject key identifier: BF:D0:14:5F:42:BB:E2:59:19:59:67:A4:79:16:3F:05:A6:3D:D3:6B
Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Certificate serial: 0796
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
Manifest number: 0789
Signing time: Fri 16 Jan 2026 20:57:09 +0000
Manifest this update: Fri 16 Jan 2026 20:57:09 +0000
Manifest next update: Fri 23 Jan 2026 20:57:09 +0000
Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: P5cSjzrIOQIg/3nLflQZajpqVYMYUGM1gfH9ryHrv8Y=)
2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 2jsCymQavrx92Kq4v6h75mDYqdyK8XpnNBvpUzJpvhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 20:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1942 (0x796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Validity
Not Before: Jan 16 20:57:09 2026 GMT
Not After : Jan 23 20:57:09 2026 GMT
Subject: CN=696aa625-add1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:1c:86:a4:1c:a2:d6:c0:4d:d1:43:fc:8f:
83:03:82:5f:22:dc:03:25:58:d0:88:25:bb:27:db:
ef:b2:6a:33:9e:de:cb:e1:a3:bc:6b:48:61:e4:4b:
08:ef:45:a8:97:fa:5b:15:ae:46:61:b0:de:97:f6:
53:9b:3d:00:6b:06:5c:5d:ae:5b:68:d6:2c:c8:8c:
fa:f9:28:49:de:ab:b8:6c:da:e5:d1:dd:a4:ce:1f:
8d:3d:7b:20:76:57:4a:01:97:4b:85:cb:ec:b8:ba:
15:f8:96:cf:ac:0a:47:af:25:25:e0:6c:05:5f:fd:
54:1a:61:2b:77:e4:6e:54:89:69:72:3d:e7:4d:93:
90:e8:e9:96:32:ee:1f:29:cd:fa:4a:0b:d4:ba:28:
2f:f9:23:b2:d8:b5:0d:e0:b5:93:9a:8c:ae:a3:53:
00:c4:2b:23:02:0e:75:47:c8:83:18:e7:c9:8b:af:
04:59:44:1d:23:c7:8d:2a:6e:55:ac:ff:aa:28:da:
de:f2:8a:f0:0b:c6:57:2d:fa:f5:89:c2:f5:84:7e:
77:03:4c:aa:18:58:ea:82:1b:3d:16:75:28:0e:40:
6f:2f:7e:ec:dc:06:8d:e1:e1:da:9f:09:78:7c:47:
0b:44:3a:da:08:d7:2f:e3:10:d4:ab:f7:f6:25:05:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D0:14:5F:42:BB:E2:59:19:59:67:A4:79:16:3F:05:A6:3D:D3:6B
X509v3 Authority Key Identifier:
keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:9f:6c:dc:48:89:f8:a8:dd:18:85:ee:75:b2:e2:ff:ff:44:
50:1f:c9:dd:1b:54:e0:9a:b9:77:d5:bb:75:bf:d5:11:bc:86:
6b:50:4b:93:b8:df:0a:69:c1:73:2c:e9:8e:95:ae:0e:26:ce:
ec:bd:30:3c:fe:75:8b:fa:7b:30:43:e9:60:f8:b2:96:2f:e1:
fb:b6:74:1c:ae:87:05:eb:14:c3:50:dc:55:1a:4a:3a:0e:19:
8b:2e:b5:e2:c9:fe:f1:34:b6:dd:d4:88:c6:5a:0d:66:7c:04:
e4:a6:29:2d:33:fd:0b:2d:8b:bd:4f:6d:7a:00:75:c2:27:f5:
72:65:20:7e:ae:b3:6a:2e:8f:07:65:0c:57:a2:c8:b8:ce:86:
ec:9f:bb:d6:6e:53:e2:dc:34:43:e7:50:e4:c9:3b:4c:99:4e:
9e:ad:e7:74:aa:c6:b9:01:11:11:37:9f:ef:92:6b:2b:9f:ea:
ed:d0:99:30:98:ea:8a:12:62:87:65:f0:65:c7:13:9b:a2:1c:
98:dc:d1:e3:97:ad:0e:9f:9c:58:cf:a7:33:99:37:b8:1e:c7:
bd:55:5b:87:0d:f9:bb:63:a3:e6:a6:62:4a:f9:1a:0b:81:ee:
5d:98:56:01:6e:6a:da:30:ba:b4:6c:44:90:c4:d6:78:45:9f:
e9:a8:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:26 2026 by rpki-client