This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
File: u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json)
Hash identifier: gwHMM6lovLXn8Lm7jX48fMPmN8K9VRgMoHqHZzQmrLM=
Subject key identifier: E4:FE:C8:E5:88:AF:9C:55:CE:B7:6C:FA:30:5B:CA:53:F1:72:E8:54
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Certificate issuer: /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
Manifest number: 0268
Signing time: Sun 25 Jan 2026 00:51:30 +0000
Manifest this update: Sun 25 Jan 2026 00:51:29 +0000
Manifest next update: Sun 01 Feb 2026 00:51:29 +0000
Files and hashes: 1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: RYniEd3Rm2coBjd8gfZZKocXtipP7lWU9FJ9HyapSP0=)
2: 003D7FEE15E811F0841B1A7DC4F9AE02.roa (hash: d9uK2WHtAsxBM3XUZiIW2tQcJ8Ym1sXb/vkuZKSK3yI=)
3: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: hTqAJeFz8PTA6anqEQNdKINuIjAXAozH9CZXJQVA+Tc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:51:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Validity
Not Before: Jan 25 00:51:29 2026 GMT
Not After : Feb 1 00:51:29 2026 GMT
Subject: CN=69756911-3b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:c2:36:a4:7a:3c:dd:0f:74:69:24:33:4c:
45:f6:2b:b6:8e:22:a3:df:e6:cb:96:8a:15:35:52:
a2:70:20:99:73:93:6a:5c:d7:c6:72:38:fd:f2:81:
89:db:03:ae:ef:05:e7:cd:37:ac:b7:e9:38:ec:ab:
5e:aa:5b:54:40:6a:6c:e3:28:b9:7a:7c:83:1d:ae:
e7:87:ba:e3:e3:8d:73:5a:86:5e:96:b2:27:88:b5:
7a:7e:9d:40:c4:bb:44:7d:a5:6b:58:62:76:d0:24:
c1:db:76:6f:06:98:89:74:fe:0d:52:9e:30:4a:41:
5e:d3:f3:ca:7d:42:c8:61:08:0d:2c:72:69:95:00:
9c:a3:f1:89:26:f6:a3:ff:fe:74:0e:9a:23:da:fa:
73:7c:36:20:a1:d6:e9:a7:58:f4:82:5f:e6:58:f2:
f4:dc:d1:43:aa:c6:41:ba:a0:ee:5e:5e:02:5c:0e:
62:d8:f2:eb:5d:8e:c6:5d:50:9e:ab:86:c3:13:31:
3c:5d:e1:a2:c6:a6:09:21:15:c7:da:d9:c5:e5:ed:
24:53:79:51:9f:fc:1b:86:b9:66:17:9a:5f:80:d0:
1d:fc:43:fe:9f:b2:f1:5a:f7:c6:15:f8:e6:48:e5:
5f:8c:6c:40:d4:97:57:fb:a6:40:ef:c8:f2:7f:81:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FE:C8:E5:88:AF:9C:55:CE:B7:6C:FA:30:5B:CA:53:F1:72:E8:54
X509v3 Authority Key Identifier:
keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:63:43:78:ef:b8:cd:43:03:f0:65:df:ac:f6:64:ee:52:ef:
6e:72:84:f0:d3:12:56:ab:80:72:23:ff:81:7d:e7:41:43:21:
1e:a0:91:2b:f6:37:90:7e:a2:38:e7:c2:5d:e0:13:f3:e5:a2:
ea:52:dd:98:7c:4f:00:52:a1:c3:f8:5e:b4:27:f2:2c:ce:de:
12:37:66:7c:6b:49:cd:e6:97:00:1c:26:78:22:d0:46:50:12:
bf:14:45:38:5e:f4:4a:c7:5c:03:aa:9f:9e:85:b2:21:8a:60:
d6:6d:8e:d6:46:8a:26:a0:74:db:5f:e6:6b:c8:c9:ee:47:36:
5c:3a:78:13:14:93:50:4d:28:2b:5c:ad:cc:88:5e:fb:e1:4d:
6a:85:ca:dd:ca:ad:23:62:a1:04:77:de:a4:95:66:1d:b3:31:
16:24:95:e4:9e:a0:fb:68:7b:a1:ed:d5:9f:17:57:14:68:3d:
32:d1:89:4a:07:65:01:d8:b1:09:92:1c:dc:d6:91:2d:20:05:
6c:04:ee:25:05:f5:09:c6:ac:a1:2f:d3:6c:ef:06:11:40:e8:
ad:a3:99:66:b7:21:0c:cb:cf:a5:5c:83:68:b5:b6:20:bd:34:
3d:36:8c:4c:67:3f:bc:ed:ac:30:33:83:30:68:5c:59:da:9f:
55:11:c1:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjgwNEExMTAvBgNVBAUTKEJCQjZFNjAxMDQzNzQzMjUwNTQ4ODBCN0QzQzEzNUU2
RkM3Q0NBQjEwHhcNMjYwMTI1MDA1MTI5WhcNMjYwMjAxMDA1MTI5WjAYMRYwFAYD
VQQDDA02OTc1NjkxMS0zYjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm77CNqR6PN0PdGkkM0xF9iu2jiKj3+bLlooVNVKicCCZc5NqXNfGcjj98oGJ
2wOu7wXnzTest+k47KteqltUQGps4yi5enyDHa7nh7rj441zWoZelrIniLV6fp1A
xLtEfaVrWGJ20CTB23ZvBpiJdP4NUp4wSkFe0/PKfULIYQgNLHJplQCco/GJJvaj
//50Dpoj2vpzfDYgodbpp1j0gl/mWPL03NFDqsZBuqDuXl4CXA5i2PLrXY7GXVCe
q4bDEzE8XeGixqYJIRXH2tnF5e0kU3lRn/wbhrlmF5pfgNAd/EP+n7LxWvfGFfjm
SOVfjGxA1JdX+6ZA78jyf4GbfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOT+yOWI
r5xVzrds+jBbylPxcuhUMB8GA1UdIwQYMBaAFLu25gEEN0MlBUiAt9PBNeb8fMqx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA0QS85NUE4MTAxNDUw
NzcxMUVEOUY3MjU5MjhDNEY5QUUwMi91N2JtQVFRM1F5VUZTSUMzMDhFMTV2eDh5
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U3Ym1BUVEzUXlVRlNJQzMwOEUxNXZ4OHlyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODA0QS85NUE4MTAxNDUwNzcxMUVEOUY3MjU5MjhDNEY5QUUwMi91N2JtQVFRM1F5
VUZTSUMzMDhFMTV2eDh5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvY0N477jNQwPwZd+s9mTuUu9ucoTw0xJWq4ByI/+BfedBQyEeoJEr
9jeQfqI458Jd4BPz5aLqUt2YfE8AUqHD+F60J/Iszt4SN2Z8a0nN5pcAHCZ4ItBG
UBK/FEU4XvRKx1wDqp+ehbIhimDWbY7WRoomoHTbX+ZryMnuRzZcOngTFJNQTSgr
XK3MiF774U1qhcrdyq0jYqEEd96klWYdszEWJJXknqD7aHuh7dWfF1cUaD0y0YlK
B2UB2LEJkhzc1pEtIAVsBO4lBfUJxqyhL9Ns7wYRQOito5lmtyEMy8+lXINotbYg
vTQ9NoxMZz+87awwM4MwaFxZ2p9VEcGP
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:02:18 2026 by rpki-client