This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
File: Sp1OqbVF6hBQTTa2X6owSfmezUY.mft (raw, json)
Hash identifier: a29KGZkTw21COtPIfaDCpQTZfIvEQv2f8EtwKWS6cpc=
Subject key identifier: 7D:B4:53:26:31:A9:CD:C1:46:D5:37:35:0D:6C:6F:07:48:6E:60:FA
Authority key identifier: 4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46
Certificate issuer: /CN=A915FAD2/serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
Certificate serial: 1038
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
Manifest number: 102C
Signing time: Sat 24 Jan 2026 17:08:03 +0000
Manifest this update: Sat 24 Jan 2026 17:08:02 +0000
Manifest next update: Sat 31 Jan 2026 17:08:02 +0000
Files and hashes: 1: Sp1OqbVF6hBQTTa2X6owSfmezUY.crl (hash: irzCQZmGn0kIvFcNTsd3WnT2BCbP5XifVBJoV0fIl/g=)
2: D34588789F8A11ECB8E03812C4F9AE02.roa (hash: WPeDV8L3X0hykJxlwLabrBRbZ1a+b6BWMeh2+gJp+KQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl
rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4152 (0x1038)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FAD2, serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
Validity
Not Before: Jan 24 17:08:02 2026 GMT
Not After : Jan 31 17:08:02 2026 GMT
Subject: CN=6974fc72-36f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:64:39:21:bd:76:bf:e4:15:06:c0:a2:b7:83:
f3:ca:52:a6:31:d1:af:07:77:cd:fb:50:40:d1:1c:
19:5b:3c:43:58:ed:1e:ef:80:55:c2:39:41:98:57:
b5:c1:c7:47:d8:a4:52:f4:b5:81:a1:a9:70:e4:7c:
26:5d:07:da:d7:14:39:1f:69:f6:b4:83:1f:98:0b:
71:71:f4:12:a7:b2:26:48:cf:d1:94:67:9c:61:d7:
c5:2b:1a:cb:33:2e:8e:d1:ec:63:cb:9e:8a:a9:28:
ed:d8:d6:3d:1d:08:c9:7d:c1:b7:05:a1:0c:a3:2c:
d2:47:33:8f:0a:86:24:aa:3b:f2:cc:5a:7f:66:98:
3d:ea:5e:69:d1:11:ef:2c:4c:ea:85:4b:9c:31:61:
29:be:23:80:d1:d5:54:0c:2a:67:c4:89:cd:06:7a:
70:44:80:d9:12:42:2b:84:b5:0e:bc:c9:91:17:cf:
fb:5f:d0:ff:39:82:92:22:a1:a4:88:f5:39:9b:f1:
dc:12:2d:c9:19:82:f3:53:67:d8:75:92:c3:21:8e:
52:8a:9b:86:5a:8c:d2:6a:00:a3:1a:f0:e6:22:df:
fc:ff:1c:3b:16:76:01:cb:14:04:45:15:d2:be:3c:
f5:94:88:04:97:72:0b:99:9d:b4:6a:00:84:2a:40:
a5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B4:53:26:31:A9:CD:C1:46:D5:37:35:0D:6C:6F:07:48:6E:60:FA
X509v3 Authority Key Identifier:
keyid:4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:23:8f:b7:2c:99:48:35:09:31:b1:2b:84:c2:9b:04:68:c5:
2d:0c:7f:d0:4d:c5:d6:55:a6:da:77:c8:cd:9a:3b:d8:79:cf:
c0:c3:6e:50:2f:0e:89:d4:d9:d3:58:d1:43:a7:3c:56:e7:73:
af:66:21:e8:d3:3c:d8:15:42:60:33:a3:f7:37:cd:4b:4d:94:
58:e3:42:13:0a:f3:cc:c1:ca:4f:e6:f8:5b:05:30:02:b3:48:
e4:68:dc:d0:72:00:18:2b:f0:14:5b:a7:07:ba:b7:08:fa:27:
fe:51:5b:99:ff:18:a2:83:63:93:a8:55:12:65:61:61:34:80:
28:80:9c:5e:c2:ff:8f:17:63:73:41:ec:b6:24:eb:e7:18:f4:
4b:52:2e:96:b9:61:47:f7:fb:8c:66:63:ef:26:1a:c2:d5:0c:
ea:2f:95:6e:ba:1e:71:5e:9e:de:40:89:13:48:05:1f:71:cf:
32:cf:79:2d:99:51:60:06:9b:28:68:e7:0f:7a:23:c3:2e:35:
28:33:89:6b:5c:39:75:bf:32:33:db:33:51:24:9c:36:aa:f2:
c3:42:f7:46:bf:ba:74:40:73:b8:24:e5:fc:3c:a9:81:fc:79:
50:cf:9d:fd:72:c5:34:86:74:fd:8f:fa:f8:83:30:d7:fa:21:
cb:89:39:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZBRDIxMTAvBgNVBAUTKDRBOUQ0RUE5QjU0NUVBMTA1MDREMzZCNjVGQUEzMDQ5
Rjk5RUNENDYwHhcNMjYwMTI0MTcwODAyWhcNMjYwMTMxMTcwODAyWjAYMRYwFAYD
VQQDDA02OTc0ZmM3Mi0zNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9WQ5Ib12v+QVBsCit4PzylKmMdGvB3fN+1BA0RwZWzxDWO0e74BVwjlBmFe1
wcdH2KRS9LWBoalw5HwmXQfa1xQ5H2n2tIMfmAtxcfQSp7ImSM/RlGecYdfFKxrL
My6O0exjy56KqSjt2NY9HQjJfcG3BaEMoyzSRzOPCoYkqjvyzFp/Zpg96l5p0RHv
LEzqhUucMWEpviOA0dVUDCpnxInNBnpwRIDZEkIrhLUOvMmRF8/7X9D/OYKSIqGk
iPU5m/HcEi3JGYLzU2fYdZLDIY5SipuGWozSagCjGvDmIt/8/xw7FnYByxQERRXS
vjz1lIgEl3ILmZ20agCEKkCldQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH20UyYx
qc3BRtU3NQ1sbwdIbmD6MB8GA1UdIwQYMBaAFEqdTqm1ReoQUE02tl+qMEn5ns1G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkFEMi84MzRBQzQ3ODU5
QkYxMUU5ODlCOTNCNjNDNEY5QUUwMi9TcDFPcWJWRjZoQlFUVGEyWDZvd1NmbWV6
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NwMU9xYlZGNmhCUVRUYTJYNm93U2ZtZXpVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkFEMi84MzRBQzQ3ODU5QkYxMUU5ODlCOTNCNjNDNEY5QUUwMi9TcDFPcWJWRjZo
QlFUVGEyWDZvd1NmbWV6VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXI4+3LJlINQkxsSuEwpsEaMUtDH/QTcXWVabad8jNmjvYec/Aw25Q
Lw6J1NnTWNFDpzxW53OvZiHo0zzYFUJgM6P3N81LTZRY40ITCvPMwcpP5vhbBTAC
s0jkaNzQcgAYK/AUW6cHurcI+if+UVuZ/xiig2OTqFUSZWFhNIAogJxewv+PF2Nz
Qey2JOvnGPRLUi6WuWFH9/uMZmPvJhrC1QzqL5Vuuh5xXp7eQIkTSAUfcc8yz3kt
mVFgBpsoaOcPeiPDLjUoM4lrXDl1vzIz2zNRJJw2qvLDQvdGv7p0QHO4JOX8PKmB
/HlQz539csU0hnT9j/r4gzDX+iHLiTmz
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:27 2026 by rpki-client