This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
File: pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft (raw, json)
Hash identifier: QeQp3uSRq9ckwMmdHFJ6FmY0g0/dS8TdqqqszBFg+50=
Subject key identifier: EA:9F:D2:88:88:10:74:6B:10:62:12:75:61:6B:90:04:89:F9:87:8B
Authority key identifier: A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67
Certificate issuer: /CN=A919AD11/serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
Manifest number: 0121
Signing time: Sat 17 Jan 2026 03:53:19 +0000
Manifest this update: Sat 17 Jan 2026 03:53:18 +0000
Manifest next update: Sat 24 Jan 2026 03:53:18 +0000
Files and hashes: 1: pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl (hash: JpCZqgTUOmTS1EbArwXcn8WPk46q7znKF6aWowSGOF4=)
2: FB29FEA06C1F11EFA8C5694EC4F9AE02.roa (hash: lcZB3z1c/RDD2H75d40NX0zmlgKhDSF1Om3/hMjJ4tA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl
rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 03:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AD11, serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
Validity
Not Before: Jan 17 03:53:18 2026 GMT
Not After : Jan 24 03:53:18 2026 GMT
Subject: CN=696b07ae-384b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:98:38:00:de:b0:75:26:3e:67:8c:81:e8:
4b:d9:3a:d2:aa:4e:45:69:92:14:51:b1:a2:2a:c0:
30:f9:a2:16:66:98:fc:cd:e8:3d:e3:e5:75:cc:28:
28:41:73:0e:8c:12:3f:2a:29:98:df:e9:54:60:07:
06:1f:03:a5:3e:ed:fb:a7:8e:43:8a:66:3e:03:e4:
02:52:91:60:bb:e5:61:f2:09:4c:84:10:2d:01:30:
d3:b6:69:a5:e8:46:95:9d:7a:3e:66:a6:cb:5b:be:
55:1e:7d:d0:9a:97:c9:6e:91:ad:45:6c:27:11:8a:
32:a3:79:3a:cf:18:4f:e1:e8:7a:51:96:d2:84:e1:
1e:8a:d0:52:72:a7:9d:ef:dc:56:0d:1d:eb:60:7d:
a9:77:88:82:e1:19:01:cd:b9:f8:18:5b:41:ac:94:
19:9f:65:ba:83:89:6a:49:1c:24:b8:9d:ca:c3:ae:
cf:cc:46:c2:fe:67:71:fa:c4:18:34:2c:4b:9f:4c:
2a:a8:f0:a2:63:2f:07:29:1e:85:2f:d6:e0:20:fb:
b9:cb:72:e1:fb:ed:b1:c3:ad:7e:5b:da:17:7c:c3:
03:38:10:b6:6a:ab:ee:fb:fa:84:d4:f5:55:c3:0b:
9f:7d:c7:36:3e:f6:b7:6c:58:41:f6:f3:e5:42:d1:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9F:D2:88:88:10:74:6B:10:62:12:75:61:6B:90:04:89:F9:87:8B
X509v3 Authority Key Identifier:
keyid:A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:ba:ed:37:a0:bc:52:f5:bd:c6:d7:d6:73:a7:16:ee:63:ec:
58:60:fa:03:68:f5:b0:aa:e4:3a:03:b0:66:62:e8:69:06:42:
2d:49:28:8e:38:8a:6c:bd:94:6c:f1:9c:29:59:55:91:a1:1b:
41:ea:6e:91:e5:36:22:e0:d2:e9:21:28:7e:3f:b0:64:a6:58:
31:eb:6f:b3:a7:34:b5:da:9e:b5:f2:7c:7e:25:b0:20:b7:4f:
a5:ad:b2:2e:e8:fd:37:7e:22:2a:83:ec:9d:7d:8c:60:e7:a2:
15:31:8a:93:81:a9:49:1f:be:05:00:33:ad:98:00:b9:05:c9:
f5:56:5d:98:6c:61:43:ed:f1:b3:4d:3e:99:6d:f8:c3:c4:46:
ac:37:c8:63:b1:cc:1e:c2:a1:fd:bc:32:18:cb:21:f2:38:55:
c0:fb:57:83:ed:96:9b:77:62:f6:cf:f0:f9:be:60:48:bf:74:
f3:f5:38:f3:bf:bf:ce:5e:00:45:63:b9:25:38:5b:86:e2:f9:
14:18:5a:6d:a4:e5:7e:0b:c2:15:8e:54:70:81:0c:41:df:bc:
0f:fd:20:4d:57:7b:3e:36:85:0c:18:f7:58:10:e9:5b:54:7b:
4d:90:be:f7:3b:19:04:9a:77:66:85:da:c9:ad:9b:32:84:b2:
e5:12:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:13 2026 by rpki-client