This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
File: McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json)
Hash identifier: uDS6iWbQxerv0bN1eNvQJhmSc/LbqMMTER0kRAppExs=
Subject key identifier: F8:DD:8E:26:0B:93:06:C7:55:2F:3D:2E:F5:96:5D:3F:A8:CA:6A:B9
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Certificate issuer: /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial: 097B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
Manifest number: 096F
Signing time: Sat 24 Jan 2026 19:33:09 +0000
Manifest this update: Sat 24 Jan 2026 19:33:08 +0000
Manifest next update: Sat 31 Jan 2026 19:33:08 +0000
Files and hashes: 1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: zX0N3AW3Sz+mDQRBHcOdFZiOXlUIy2K5z96HyHRWbyo=)
2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: Lf+OpNRolRnNyf7s3LctxABHJRYGwAmVNkJb5Q4x0vo=)
3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: GurqPE7vf79zU82Gehwj1ctZametXlaKlIqkpoDGL9A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2427 (0x97b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Validity
Not Before: Jan 24 19:33:08 2026 GMT
Not After : Jan 31 19:33:08 2026 GMT
Subject: CN=69751e75-a39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:33:a5:26:d8:46:68:fd:af:0e:2b:63:2c:
04:66:7b:a9:03:54:70:77:65:2e:9c:47:59:67:88:
c8:5a:4c:9f:c9:6c:d8:d5:f8:c3:17:76:b6:d6:ef:
58:99:6e:ba:c4:46:9d:48:78:fb:0d:71:b0:91:3d:
55:ad:79:7b:fa:de:61:fc:25:35:b8:ca:32:9f:a8:
d6:fc:36:72:d7:92:1a:cc:59:4a:ec:d4:cf:af:47:
91:29:d7:c8:c1:77:61:95:5a:35:ad:a9:8e:17:c5:
c3:fc:ab:94:16:a1:21:42:c9:1f:63:66:1d:ef:e9:
3b:35:09:20:c7:f6:cd:bc:de:24:6a:24:d6:d6:5e:
54:f2:29:74:36:26:c3:8c:9e:14:c1:61:c4:0d:ad:
66:10:0a:91:87:d8:cb:6b:43:fa:0e:70:39:6d:1e:
f4:fc:50:8e:40:89:bb:06:48:78:dc:ff:b9:3b:2f:
e4:9f:82:46:5c:9b:bd:73:a2:f1:d1:61:fd:02:7c:
ce:fa:4d:46:08:8d:56:e8:4a:2a:c7:53:84:9b:7a:
9b:54:ab:1c:72:71:61:5e:2d:07:91:25:4e:94:5b:
0e:3f:c2:97:08:14:f5:45:f6:fe:9f:29:16:69:87:
d2:f7:23:67:72:b3:4a:9c:ba:ed:c6:c9:d2:6b:88:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DD:8E:26:0B:93:06:C7:55:2F:3D:2E:F5:96:5D:3F:A8:CA:6A:B9
X509v3 Authority Key Identifier:
keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0d:bf:80:22:f8:92:15:46:5a:2c:25:65:33:71:a9:62:5d:
c6:08:1c:3c:31:e6:54:ac:ca:f7:fb:9d:88:7b:d5:23:b1:f7:
f7:f0:8e:80:6f:1a:58:ac:c2:31:32:dd:83:b2:a3:7e:d2:f2:
e5:aa:96:0c:05:a1:f3:9e:ff:ef:85:fd:10:1c:bd:93:d0:43:
10:d3:dc:2d:f3:c0:7e:00:cc:76:15:15:18:65:3c:d6:93:03:
bf:16:94:5f:ba:8f:fe:80:f9:8a:ed:08:c3:1f:46:ed:b5:52:
95:8b:0c:95:05:d9:21:57:4e:31:50:9c:ff:70:ac:44:65:c9:
56:d3:58:1e:8e:91:b4:f1:5c:94:8a:62:cb:b8:d8:94:b0:6f:
73:9d:bf:e2:63:84:f9:5b:ad:38:00:82:65:d6:b0:9d:63:9e:
4d:93:a4:f9:db:5c:3d:10:98:c6:2e:4e:67:4e:87:26:d9:f7:
ef:84:ad:86:d1:57:a4:67:a0:f5:30:b6:0e:f6:cb:eb:ad:a5:
86:22:62:2c:c4:31:b0:3c:69:a6:02:77:a9:4d:b3:b3:38:37:
76:4e:0e:b9:f6:46:91:6b:7e:ca:43:40:90:e3:b0:a1:3c:6e:
c0:bd:9e:fc:80:e2:de:ce:09:2e:78:38:c0:dd:79:01:31:05:
59:8c:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:11:03 2026 by rpki-client