This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
File: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft (raw, json)
Hash identifier: ZgueFNQmuyloPI3lgnnQDk4vAG1KVUVjhtI1wRXrQs8=
Subject key identifier: E0:A4:D9:E1:02:44:74:C7:BD:9B:EA:5A:B2:90:ED:CA:EC:89:FD:00
Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F
Certificate issuer: /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F
Certificate serial: 10FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
Manifest number: 10F3
Signing time: Sat 24 Jan 2026 16:59:00 +0000
Manifest this update: Sat 24 Jan 2026 16:59:00 +0000
Manifest next update: Sat 31 Jan 2026 16:59:00 +0000
Files and hashes: 1: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl (hash: 1Xdj3sD5l82dSrugj2Yk9V3CQlUViMCxRFyGCM24MOI=)
2: 2A44CEFE311111E98C69B181C4F9AE02.roa (hash: 0SVk2cOfikrAvRDDJgb5TANBAXNNynzVUWZgXY+3hcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl
rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:58:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4347 (0x10fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912216A, serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F
Validity
Not Before: Jan 24 16:59:00 2026 GMT
Not After : Jan 31 16:59:00 2026 GMT
Subject: CN=6974fa54-4c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8e:02:09:76:cf:98:4f:ab:8d:9e:2b:cb:3f:
61:3a:67:e3:17:98:54:75:73:e9:4f:e8:86:a9:4d:
b7:56:05:36:fa:ed:94:4d:a5:10:2a:1a:d7:c5:93:
d9:45:16:85:d5:98:ac:1a:76:e6:3e:26:8f:d3:7b:
b6:b0:d1:11:a2:76:a8:b6:72:37:9a:94:19:8d:fc:
2a:70:05:63:d7:5e:8b:5e:4d:e2:9a:17:76:d4:f0:
7b:f7:e3:71:73:5a:54:87:a3:63:e7:3c:a7:a8:63:
50:80:ce:4e:1a:50:3e:17:89:cf:5c:e5:56:93:1d:
cb:60:a8:c1:dd:df:89:33:4a:a5:f6:72:7c:99:3a:
86:8c:45:c4:dd:92:5a:2f:b8:57:e4:34:6e:01:a3:
ff:3a:17:eb:7c:37:96:1c:13:65:0e:63:ab:b8:4a:
eb:1f:3d:dd:2c:68:69:97:43:5c:27:d9:e0:b1:d4:
f5:a1:1f:1d:63:5c:2d:4a:1d:c5:41:ed:9f:73:69:
c3:bf:7e:55:10:66:ba:b8:5f:df:23:fc:48:7e:ea:
ab:61:f0:5b:56:9d:63:64:36:39:0c:79:ef:e5:e9:
55:de:0a:9a:10:c8:40:be:3e:c3:57:26:6d:3e:5a:
ce:aa:dd:55:c2:0e:4f:3a:88:47:bb:a8:c8:4a:94:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A4:D9:E1:02:44:74:C7:BD:9B:EA:5A:B2:90:ED:CA:EC:89:FD:00
X509v3 Authority Key Identifier:
keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:63:a8:0f:6f:55:59:6b:24:fa:7d:41:3e:2a:26:d4:1f:93:
31:a4:04:97:15:41:92:c2:4b:18:38:14:d5:30:92:3c:c7:95:
9b:a1:9a:f5:78:f5:b2:b6:bb:16:f5:db:d3:aa:74:91:ae:30:
f1:56:a0:dd:82:71:46:7b:a6:6f:b6:f9:db:4c:05:46:fe:29:
e7:3e:cf:31:e2:3d:18:29:f2:f7:8d:15:48:90:cb:eb:c7:60:
73:2f:87:74:ea:1f:a2:c2:e3:ac:76:4a:8d:76:4e:f8:84:85:
1d:6d:a1:82:91:cb:1d:86:62:74:89:01:29:cc:39:fd:96:46:
d5:55:9f:5e:53:c3:39:f9:6d:4a:28:f9:b0:2f:70:9c:fb:b4:
e1:4b:c5:75:80:d7:53:2b:f0:a2:2d:3a:da:2e:c7:3e:7f:2f:
9a:e5:f1:28:2d:c5:81:a8:9d:d2:4f:49:52:69:b8:7f:46:95:
6d:0d:45:af:c1:f2:31:64:44:ae:ba:4c:0c:36:12:be:fd:75:
41:10:08:b6:3d:fc:ac:28:af:3b:19:e3:5e:05:35:94:a3:05:
93:80:cf:81:f5:74:bb:f9:bf:c3:bd:c3:43:70:71:c9:cf:1e:
d7:be:1e:fd:44:3c:25:24:c2:7f:05:66:a6:f4:9a:8a:b7:8c:
e4:ad:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:51:18 2026 by rpki-client