This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json)
Hash identifier: DgHIx57esmQkSIa/CazSwRUNKj1ZB/uDdtYSuEG7WdQ=
Subject key identifier: 99:9B:70:9C:D7:A6:07:96:B7:ED:89:13:0D:8C:5F:9A:F3:A3:1A:01
Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
Manifest number: 01DE
Signing time: Tue 27 Jan 2026 01:58:52 +0000
Manifest this update: Tue 27 Jan 2026 01:58:51 +0000
Manifest next update: Tue 03 Feb 2026 01:58:51 +0000
Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: zshLL4W2ELGfxwK2Hhr0joImVjZmX5jlMLTyXU6M7Vs=)
2: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: 4HA85tehk5/AiNaVc0PdrtNvf1FpOWqjUJ6QboHlbHs=)
3: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: 0v/buppkF/DfpCpfVlA0Y6wo8IqosGS/hcXir1bpF1E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 01:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Validity
Not Before: Jan 27 01:58:51 2026 GMT
Not After : Feb 3 01:58:51 2026 GMT
Subject: CN=69781bdc-bf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:cc:5b:a5:5a:8d:78:2e:51:b1:bd:ba:5a:
d8:d1:9b:da:8b:d2:2b:1c:b0:f2:89:02:9a:95:ca:
39:9f:d1:3c:15:00:19:1a:d1:aa:31:b1:eb:13:1e:
89:48:9a:a6:eb:34:58:b5:0f:b2:80:b3:78:f9:b2:
3a:d2:92:b6:ae:82:a5:b6:d4:aa:23:06:b2:29:82:
15:97:4b:23:d3:e1:1c:eb:e4:28:4a:59:ee:2c:59:
8d:7a:19:61:0a:e3:d9:78:47:fc:37:f4:f8:14:f3:
9d:c7:e5:7b:4e:e9:c5:da:52:e9:af:06:57:57:8c:
e5:f0:7d:0d:ef:d1:e1:e2:65:69:77:e8:38:6c:26:
d3:17:d1:eb:d2:c1:82:19:6e:12:df:f1:d2:78:fa:
a5:bd:bb:4f:c1:26:a3:1f:b6:9e:dc:1a:48:65:61:
3d:b8:ac:85:22:62:7f:4c:7f:8e:0e:a5:a6:70:78:
28:04:ef:89:a1:35:3e:52:bc:f2:bf:73:0a:5d:fa:
43:74:f0:63:b7:36:1d:83:ae:21:43:f1:30:2e:53:
9a:0f:13:87:88:3f:9d:7f:11:21:87:5c:ff:c0:ca:
0b:69:d4:97:dd:e7:99:d3:49:b4:39:20:02:2c:e3:
69:02:03:f3:b1:82:cb:10:22:a4:4d:f4:55:53:56:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9B:70:9C:D7:A6:07:96:B7:ED:89:13:0D:8C:5F:9A:F3:A3:1A:01
X509v3 Authority Key Identifier:
keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:78:63:6f:48:09:a1:56:84:61:ec:48:e1:3a:06:14:74:ea:
7d:7a:db:18:35:80:6a:22:11:b6:e8:62:1b:d2:78:22:05:fa:
95:56:b7:fe:4e:e3:a9:19:6a:79:72:b1:87:b2:c5:08:95:85:
91:e0:1a:8b:82:52:05:e6:f5:70:59:53:e5:dc:74:d6:e2:ae:
a5:36:28:7a:a8:a0:38:44:8b:ce:e1:42:5e:23:19:7e:52:83:
82:b1:da:4a:bb:65:2b:9f:ac:4f:df:28:9c:d9:62:b7:0f:03:
9a:f1:94:84:a1:9a:53:ef:f3:8b:47:43:f5:ad:4d:f4:0c:a7:
02:0f:ce:6c:2a:fc:0e:03:30:f5:6b:31:0f:35:ec:26:64:92:
d4:e9:a2:8d:54:97:a7:0d:1e:bc:94:3c:61:d5:58:90:4c:a5:
f0:bb:ec:79:79:83:80:63:0f:47:e8:3c:c3:61:3e:33:f7:42:
26:6d:52:99:76:08:55:91:82:88:6b:4d:bb:4d:f5:f7:08:d0:
ea:06:2a:d9:45:3c:44:25:52:2e:fe:15:62:53:d2:d7:d7:4c:
cf:d1:8e:47:bb:ec:45:92:c7:07:d4:cc:2a:29:fd:8d:67:9d:
c4:42:5c:c2:b2:02:53:73:4e:0e:77:70:a4:a3:6b:da:47:fe:
2b:69:14:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 17:50:56 2026 by rpki-client