This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft
File: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft (raw, json)
Hash identifier: mxhXmT5XWch9l5M4HCRfbekULDi1SzJnKqXBqIQTKE0=
Subject key identifier: A5:76:3B:C8:55:9F:E8:54:C7:9D:E8:73:75:6A:C7:E4:F2:A4:6C:82
Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26
Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26
Certificate serial: 040D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft
Manifest number: 0406
Signing time: Fri 16 Jan 2026 23:36:23 +0000
Manifest this update: Fri 16 Jan 2026 23:36:22 +0000
Manifest next update: Fri 23 Jan 2026 23:36:22 +0000
Files and hashes: 1: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl (hash: SdZhnfFHt7nPKmaFjX61yXPSc1JE0COplbiD4G9UpIo=)
2: 5895821AB62611ECB410C81DC4F9AE02.roa (hash: hC/jX3h+m4kRJTL+3r4qE/OapWO5r8a4N2e8hzVBff0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl
rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 23:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1037 (0x40d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26
Validity
Not Before: Jan 16 23:36:22 2026 GMT
Not After : Jan 23 23:36:22 2026 GMT
Subject: CN=696acb77-e8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:f1:39:d3:ff:17:8a:f4:9b:7d:79:2b:ae:
83:a6:db:28:b0:3d:5b:6e:cb:a7:42:91:0d:85:e3:
d1:44:b8:99:f5:3f:2a:19:85:00:d3:38:1a:38:fe:
dd:f1:84:db:73:84:f5:96:ef:9d:1b:19:30:e1:e8:
fc:a4:c6:92:72:76:7e:70:f2:f2:ea:2f:a1:5b:4c:
55:92:88:da:8d:3f:6c:29:9b:92:52:9f:d1:81:a8:
56:9f:68:a7:03:51:95:c8:06:8a:ff:ff:08:48:29:
91:4a:e6:a1:eb:bb:85:49:db:71:ae:96:27:39:d0:
bb:77:b3:62:71:3c:96:c3:48:e2:5c:99:e2:4d:b0:
4d:5d:5c:66:d6:77:0b:88:fd:bc:87:b9:3d:c9:c9:
e6:ac:71:90:33:31:34:f6:6e:f6:7a:7d:fc:c1:a3:
9c:8c:94:3b:34:cb:0f:f9:5c:65:d0:08:1b:fc:90:
a6:0e:5f:9c:75:ac:b5:bc:e7:db:8a:fb:68:69:d1:
5d:5a:9c:6a:eb:ca:60:3b:5a:1e:af:ac:be:66:32:
47:df:fc:01:30:2e:10:bf:eb:2d:45:d6:e6:45:68:
82:1e:ba:db:93:71:80:a8:df:59:3d:dd:86:52:97:
db:bb:91:cb:de:44:2c:40:a1:00:0c:19:61:2f:35:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:76:3B:C8:55:9F:E8:54:C7:9D:E8:73:75:6A:C7:E4:F2:A4:6C:82
X509v3 Authority Key Identifier:
keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cc:df:a1:64:1e:a0:15:2a:60:fe:71:a3:c3:22:a3:1e:12:
54:9d:76:3a:23:49:f6:fb:b3:e7:25:a7:61:b4:78:ec:5c:a7:
5f:18:5d:60:a1:06:0a:36:32:ed:9c:b1:80:53:52:76:cf:63:
3c:ed:75:aa:0b:01:cd:19:ed:e1:5e:40:3e:c6:e8:d9:b2:15:
07:08:f5:d8:41:f6:ed:32:6c:df:5c:37:90:1e:d4:6b:05:b9:
1a:6f:8c:84:99:22:f9:f2:40:9e:7c:53:8f:ca:a3:5e:74:e2:
8b:09:a7:69:d4:a0:ab:3e:95:a6:b5:b0:5c:b6:8f:01:19:87:
80:8c:77:28:ce:77:47:0a:3c:42:cf:65:68:ab:86:06:bd:e4:
69:4d:24:ec:4b:02:a5:86:55:18:cb:31:43:d4:3d:9b:77:8b:
56:92:db:2a:c7:8a:54:f7:5e:13:bd:a6:ae:de:f6:07:ab:47:
16:be:9a:e7:ca:3b:36:eb:de:dc:81:bf:a4:f3:01:17:2a:ca:
71:b7:ea:06:67:db:5d:2c:29:5d:29:b0:31:d1:49:17:08:6a:
cd:fb:f5:3c:fa:b5:10:b7:b0:a8:cb:58:d6:f4:dd:ce:7a:21:
30:05:7f:9b:07:6e:9d:68:02:8d:5c:9f:d6:9b:6b:62:8b:d2:
76:4b:ff:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:02:07 2026 by rpki-client