This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
File: 2OexX5y5FnTlEn_UBtfZ5xjgirA.mft (raw, json)
Hash identifier: xQN4pBhvqFCCi7lIDrm5S9UlWJeGJ4Ns3RM8eQwT33s=
Subject key identifier: B4:F0:05:1D:C7:56:CF:96:34:5D:B3:F3:A5:F4:FD:3F:E5:F0:6A:93
Authority key identifier: D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0
Certificate issuer: /CN=A917E27F/serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
Manifest number: 57
Signing time: Sat 17 Jan 2026 06:14:25 +0000
Manifest this update: Sat 17 Jan 2026 06:14:25 +0000
Manifest next update: Sat 24 Jan 2026 06:14:25 +0000
Files and hashes: 1: 2OexX5y5FnTlEn_UBtfZ5xjgirA.crl (hash: adRwzzRqrSO/rgVags/XXishUbXkNqb19Ef14lb6+Bw=)
2: 4197AB74735611F080D68151C4F9AE02.roa (hash: uw93y6FGovmGq+bi/XnqUmoXwqLRFeM+9sTlrsvluUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl
rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E27F, serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0
Validity
Not Before: Jan 17 06:14:25 2026 GMT
Not After : Jan 24 06:14:25 2026 GMT
Subject: CN=696b28c1-9d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:18:80:66:e1:08:69:49:22:ea:85:f0:44:a0:
97:6d:8a:da:69:98:0f:63:70:73:d9:d1:f8:f3:90:
43:1f:26:b2:5a:d9:32:7c:1d:7e:76:a4:b7:2f:65:
ed:91:90:52:4a:de:d6:fd:dc:a9:5d:1a:96:1b:b5:
f6:24:19:e1:75:07:4a:10:1b:c2:50:70:84:43:d8:
2e:61:9b:2f:8d:b0:61:cf:f9:87:80:fd:d1:87:72:
99:1b:cc:5f:c5:7c:01:28:9b:19:63:68:2d:38:f4:
3c:91:56:b6:5c:bc:be:1f:17:27:3c:05:bf:78:ec:
d4:68:d6:0f:b9:60:b7:3f:fe:84:e1:3e:0e:fc:a9:
e6:a3:f0:cc:ad:15:52:43:32:b5:c7:43:f6:d6:6b:
08:79:f6:db:b2:2b:af:4e:bb:97:5d:98:96:a4:a8:
fe:41:79:63:83:8c:01:51:9d:35:a1:8a:47:8d:50:
8d:15:9e:91:b1:12:75:59:a2:1e:fe:23:f7:7d:f7:
91:3e:12:35:6d:2c:bf:f4:92:cb:dc:93:1a:5a:52:
3c:8b:c5:74:7b:66:66:ee:4c:71:45:80:a5:d9:81:
37:56:6d:09:5b:36:63:a2:52:fc:87:e1:ec:7c:bb:
95:21:70:3d:f3:2f:97:ca:aa:c9:8c:77:c6:41:89:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F0:05:1D:C7:56:CF:96:34:5D:B3:F3:A5:F4:FD:3F:E5:F0:6A:93
X509v3 Authority Key Identifier:
keyid:D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:94:0e:01:82:95:83:fe:c7:8e:97:55:c2:62:d8:48:0f:dd:
81:ac:f9:0f:7b:37:72:00:fe:d4:17:25:51:80:a9:2a:01:77:
a1:b7:d8:bf:24:3b:f1:31:0b:f8:60:61:a8:ab:b3:c4:ac:ec:
24:c2:92:83:9d:7f:00:dd:72:cf:a4:3d:b6:92:b6:b1:c6:94:
32:87:f4:c9:53:08:f8:85:5b:35:d9:5e:7f:f7:7c:44:4d:28:
a0:2c:89:cb:63:de:1f:e8:f6:a3:94:66:60:7b:72:b9:9a:c3:
58:ea:88:26:a6:ee:01:d7:b9:f9:e4:fa:c0:33:15:95:0f:31:
32:73:fc:43:b0:29:15:7c:b6:0e:a1:f8:4c:5f:4f:ad:b8:8c:
48:30:b5:0e:a0:f8:d5:f1:a8:e0:ec:6c:72:a2:ef:6d:5c:f7:
76:42:7d:34:56:6b:32:a3:92:9b:02:6e:fe:f7:68:ae:60:2b:
5d:22:f4:fb:0e:e8:97:4b:44:3d:9f:92:cc:83:48:7f:00:52:
92:97:2f:95:b2:87:eb:2e:e4:51:6a:ca:9f:10:fd:39:59:c3:
ec:1b:b7:f5:43:6e:b4:52:15:66:38:ea:75:53:c1:8b:9c:3a:
f5:e4:71:30:4b:30:23:c4:7a:83:48:e3:49:25:f7:71:8a:62:
b7:e6:fc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:12 2026 by rpki-client