This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
File: U78N14DbA47OFNQEWbq5xo9phTs.mft (raw, json)
Hash identifier: X4lgjmnd0QLd4ge2gN1O2SZd8NceLZAjzxsdP/zTQh0=
Subject key identifier: 00:F6:3D:6E:0A:0B:E2:87:8F:1F:E4:BD:8D:24:11:8A:16:CE:C8:1A
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial: 231D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
Manifest number: 22AF
Signing time: Sat 24 Jan 2026 15:42:05 +0000
Manifest this update: Sat 24 Jan 2026 15:42:04 +0000
Manifest next update: Sat 31 Jan 2026 15:42:04 +0000
Files and hashes: 1: U78N14DbA47OFNQEWbq5xo9phTs.crl (hash: babl6lButN/rrp+v8buuS31dT01tik6pT66pNH+ieC4=)
2: 712931EAF6B511F0A9C52A2F476F56BC.roa (hash: SAxrTbCx/YcXDYP/LYlmFUYK1e131l/zgzYZgm4ovr8=)
3: A44814E8EF8411F087F172675F6F56BC.roa (hash: LbP8YJ7AuJ8mXnJtzlloiTBus5iE9MJDD+e2Sir1Nzo=)
4: 213F506AEF8A11F08E686F05616F56BC.roa (hash: nM4JnkJ+Qs4dGidUE0cKh3+JvnT1qGLimAMJKXLV4Ao=)
5: E23C1886EF8811F0B6CFCA01616F56BC.roa (hash: MXVnTQN8Ul3vq9X3zY9ge5BWwlcP6ucRl/iq2m59WLI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8989 (0x231d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Validity
Not Before: Jan 24 15:42:04 2026 GMT
Not After : Jan 31 15:42:04 2026 GMT
Subject: CN=6974e84c-544f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:09:91:7f:61:46:69:cf:92:40:1c:fb:69:
c7:77:63:74:1b:93:6a:33:96:b8:97:f7:0e:79:42:
3b:8d:21:6b:d4:ea:4c:2e:b0:08:11:cb:84:83:be:
60:a5:2d:80:60:32:09:51:5f:26:cf:ba:26:16:b3:
a7:d3:ff:31:d4:38:70:ec:8f:fe:98:60:2e:0c:77:
55:ca:31:db:0d:c7:b8:26:3b:8d:4c:ac:67:a1:6a:
6f:50:65:34:f8:7e:6d:c7:17:65:ec:94:22:0d:3f:
e6:a9:03:55:17:bd:b5:b7:86:f1:44:f7:49:28:a5:
83:1d:8c:ac:12:07:3d:67:10:8e:e5:82:88:09:29:
6b:c9:2f:86:91:26:06:2d:c6:e3:d4:7c:0b:e0:41:
9a:28:bd:fb:12:ef:40:6c:1f:2a:5c:65:22:ae:61:
ac:8d:78:ea:14:4a:ea:da:68:9d:77:aa:bc:05:f8:
ce:96:78:4c:91:98:28:6b:28:fd:3f:45:27:32:d1:
0f:0b:93:73:e4:f8:57:10:8b:2c:15:ac:46:6e:ca:
24:54:dc:23:86:d4:25:01:00:3e:d7:c3:e2:ac:e1:
f1:5d:96:31:8f:87:93:8d:9d:56:63:f7:7f:37:42:
87:2c:46:02:70:62:c2:bd:06:64:5a:1a:e7:db:a1:
fc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F6:3D:6E:0A:0B:E2:87:8F:1F:E4:BD:8D:24:11:8A:16:CE:C8:1A
X509v3 Authority Key Identifier:
keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fe:29:3f:1f:da:f3:52:f8:b5:09:7f:04:8f:41:06:23:f0:
b5:66:ec:55:7e:fa:12:53:d8:eb:dc:81:aa:4d:d2:b4:f9:de:
55:59:61:a5:08:43:b3:bd:1a:b9:25:59:f6:9b:40:81:5f:80:
2f:d2:68:1b:e6:0f:3c:b4:2a:c6:b6:28:b7:f9:b3:80:f6:94:
22:e9:f2:95:ff:b6:05:96:60:f0:e6:2b:61:b7:35:bf:30:f1:
ec:a6:69:df:0d:3f:34:50:f8:95:2f:bd:0c:a9:45:9b:a0:cc:
7f:b4:5b:d2:91:73:a9:7d:b5:46:be:f6:d7:b6:ab:86:01:89:
d5:c1:31:f8:84:89:dd:1d:0d:c4:8e:ba:70:16:e7:a5:48:f3:
a6:3c:87:e1:11:2b:f8:19:6b:98:1a:c5:f9:8d:b9:c2:81:d7:
89:c9:3f:8f:fa:11:d0:d1:a3:29:46:13:9d:8a:14:b0:78:6f:
00:ff:c3:4b:00:9f:7f:c6:3e:55:3f:07:df:13:c8:b6:d6:17:
48:1c:ba:78:bd:91:74:91:aa:a8:e1:89:a7:ad:4e:6e:29:14:
96:fa:8d:d5:f2:ff:c7:4e:f5:e8:84:2b:32:1c:f3:c8:21:69:
9e:dc:75:75:9f:b2:32:ac:0d:d3:ff:d8:77:29:31:4a:d0:94:
50:99:56:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2
OEY2OTg1M0IwHhcNMjYwMTI0MTU0MjA0WhcNMjYwMTMxMTU0MjA0WjAYMRYwFAYD
VQQDDA02OTc0ZTg0Yy01NDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt0wJkX9hRmnPkkAc+2nHd2N0G5NqM5a4l/cOeUI7jSFr1OpMLrAIEcuEg75g
pS2AYDIJUV8mz7omFrOn0/8x1Dhw7I/+mGAuDHdVyjHbDce4JjuNTKxnoWpvUGU0
+H5txxdl7JQiDT/mqQNVF721t4bxRPdJKKWDHYysEgc9ZxCO5YKICSlryS+GkSYG
Lcbj1HwL4EGaKL37Eu9AbB8qXGUirmGsjXjqFErq2midd6q8BfjOlnhMkZgoayj9
P0UnMtEPC5Nz5PhXEIssFaxGbsokVNwjhtQlAQA+18PirOHxXZYxj4eTjZ1WY/d/
N0KHLEYCcGLCvQZkWhrn26H8WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAD2PW4K
C+KHjx/kvY0kEYoWzsgaMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy
RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkNENi8xRTlFMUFBQ0QyRUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0
N09GTlFFV2JxNXhvOXBoVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBu/ik/H9rzUvi1CX8Ej0EGI/C1ZuxVfvoSU9jr3IGqTdK0+d5VWWGl
CEOzvRq5JVn2m0CBX4Av0mgb5g88tCrGtii3+bOA9pQi6fKV/7YFlmDw5ithtzW/
MPHspmnfDT80UPiVL70MqUWboMx/tFvSkXOpfbVGvvbXtquGAYnVwTH4hIndHQ3E
jrpwFuelSPOmPIfhESv4GWuYGsX5jbnCgdeJyT+P+hHQ0aMpRhOdihSweG8A/8NL
AJ9/xj5VPwffE8i21hdIHLp4vZF0kaqo4YmnrU5uKRSW+o3V8v/HTvXohCsyHPPI
IWme3HV1n7IyrA3T/9h3KTFK0JRQmVaC
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:25 2026 by rpki-client