This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json)
Hash identifier: 7o+mfe73XopfHI3nZo4Ew5VZwBifT3cNlaipdi/oNG8=
Subject key identifier: 42:7B:E3:9E:4B:AD:8A:55:90:A9:1B:E0:CB:C7:BC:19:0C:85:CD:20
Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B
Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B
Certificate serial: 03D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
Manifest number: 03CE
Signing time: Fri 16 Jan 2026 23:43:50 +0000
Manifest this update: Fri 16 Jan 2026 23:43:50 +0000
Manifest next update: Fri 23 Jan 2026 23:43:50 +0000
Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: +t3pp+eSQKCCXXRIIQUdu/5oL/Nz/hNm1vmEBsicDmM=)
2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: pgajZ3VJQpgDJGVaoR7CuOxH3YcIXoTwpkhUZA61CNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl
rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 23:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978 (0x3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B
Validity
Not Before: Jan 16 23:43:50 2026 GMT
Not After : Jan 23 23:43:50 2026 GMT
Subject: CN=696acd36-3a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:61:6a:9f:f0:ea:a1:71:5b:be:30:25:9e:
d8:e1:88:44:51:87:64:0a:82:66:6b:e8:49:2d:ab:
77:71:77:f3:9c:d0:18:c0:f4:a1:30:aa:6f:06:a5:
32:6a:ae:9c:59:bc:22:77:9e:f0:aa:bd:04:47:0f:
b5:e5:13:23:d2:a8:0a:a5:90:13:21:11:4a:72:eb:
0c:5c:37:0c:2c:24:4a:00:0d:de:e7:33:b1:68:71:
f8:a1:d0:fc:18:72:1a:e4:5b:f5:de:c3:61:0f:08:
79:eb:eb:f6:df:85:5e:3c:10:2c:f0:da:5f:58:df:
8f:f7:eb:d7:e4:cf:88:43:47:04:54:09:f6:0e:50:
93:59:82:c9:53:53:41:78:d6:61:3b:81:d4:7e:6c:
06:14:0d:3a:21:17:fc:d0:16:5c:0c:09:c8:2a:58:
0e:2b:d3:7c:6a:1a:19:e0:0d:89:ac:93:5d:44:21:
cf:f9:3c:7e:9a:c0:0b:4a:65:25:46:40:27:9f:05:
50:d0:c6:99:62:89:1b:2b:10:bf:b9:51:b8:d2:73:
df:fa:b2:c0:4d:cb:b3:2e:82:a1:6b:fc:bf:1a:c5:
47:1a:67:85:5a:ba:e6:f3:88:da:5d:c8:05:cb:ae:
f4:35:35:ef:cb:73:b1:15:9b:96:0e:e0:c4:5c:db:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7B:E3:9E:4B:AD:8A:55:90:A9:1B:E0:CB:C7:BC:19:0C:85:CD:20
X509v3 Authority Key Identifier:
keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:98:5f:cc:d5:0c:f9:4a:84:7f:c0:bf:b9:09:03:cc:4a:15:
ea:ac:20:12:9f:27:e4:72:9b:d8:5b:2f:33:22:bb:72:16:13:
c9:40:09:72:0f:58:0f:0d:f6:80:3e:19:37:a8:49:0a:fe:1b:
03:57:69:d7:9c:f7:2c:80:f3:8b:ab:8a:88:b0:5d:cb:57:8b:
49:21:2a:cb:f7:21:fe:7c:65:f9:ab:0a:d9:18:b8:44:a8:ae:
5e:90:5a:d3:fa:1f:73:2c:67:13:94:d5:5c:b6:f9:e2:3c:af:
bb:24:07:00:20:32:eb:6b:8f:47:7c:27:35:74:af:ef:1a:cc:
aa:4d:d0:4b:0e:15:82:08:0b:4d:70:a6:b4:25:88:40:0d:38:
1f:ad:31:69:ec:42:9d:09:c4:59:a2:c4:c1:61:f1:bb:91:8c:
02:9f:52:e3:c0:e5:91:0d:ab:a9:16:e0:8f:52:d0:33:6c:fd:
0e:dc:06:e0:e0:1e:b1:95:5a:0f:c5:65:91:3b:59:4f:2b:96:
01:a6:bf:04:09:fe:5b:08:ca:a2:75:64:72:2e:28:eb:84:4c:
b2:a8:d2:a8:68:ed:fa:ac:9e:1a:32:77:b0:27:4b:64:9d:82:
65:8a:fd:26:0c:f0:ae:2e:2f:5f:62:cf:b9:2b:f4:65:12:1f:
64:64:b6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:00:02 2026 by rpki-client