This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
File: ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft (raw, json)
Hash identifier: QpzPdhxEyx889XgP0PD/3N5dQStE/LQvNvkjFdmbt7k=
Subject key identifier: F9:45:C0:B8:69:EF:68:B1:B0:C5:70:DC:22:3B:E1:B7:65:63:AF:DA
Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE
Certificate issuer: /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
Manifest number: 68
Signing time: Fri 23 Jan 2026 06:02:45 +0000
Manifest this update: Fri 23 Jan 2026 06:02:44 +0000
Manifest next update: Fri 30 Jan 2026 06:02:44 +0000
Files and hashes: 1: ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl (hash: CG08agkWTaJ/wZwKHKyIQgO0ntfEcKgBmoxzYOlpcsI=)
2: D616F9C45CB011F09DD6183AC4F9AE02.roa (hash: ml1Kug9S1qOScffHzmjdmVF6lgBnT/45matCF9JTOhY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl
rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
Validity
Not Before: Jan 23 06:02:44 2026 GMT
Not After : Jan 30 06:02:44 2026 GMT
Subject: CN=69730f04-7c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1c:78:7a:d7:36:61:61:d3:eb:3e:36:6a:64:
44:00:d8:52:a5:e7:10:f4:83:d9:14:95:2b:21:0f:
03:e6:ef:e3:ef:7f:ae:e0:93:74:6a:fb:b4:4b:f8:
4b:6e:67:cf:be:68:fd:d9:1b:cb:65:fb:2b:12:ac:
4d:e1:e6:73:94:72:3f:28:8e:3d:4a:8e:66:68:fb:
aa:d4:a6:2e:cc:4d:6f:04:24:f8:fa:cd:b3:95:51:
cb:91:b3:d7:1f:ee:fe:d5:da:3c:54:c6:e4:05:40:
61:3a:ee:a7:38:57:3b:19:2c:8f:62:8e:72:38:6f:
5a:bb:4d:4e:8f:b5:3d:35:5b:e2:ae:24:03:28:f7:
c5:8b:e3:8e:4d:5d:7a:0a:94:62:af:57:55:22:aa:
23:1a:74:ac:ea:63:0e:af:56:9f:22:c1:c5:cd:ff:
db:51:fd:4f:0a:24:c2:ef:af:c7:a5:87:f6:9d:13:
83:13:f2:fd:61:f4:dd:1c:99:7c:3d:2c:b3:bb:cc:
70:60:27:54:68:85:02:5d:61:6d:68:2c:f3:4b:93:
28:e9:97:80:11:3e:4e:71:43:fd:39:41:31:69:9d:
13:56:a3:4e:9e:12:72:d7:1b:a5:75:c1:70:28:c5:
0f:be:f9:d3:ea:e5:25:ef:21:dd:1a:88:c5:ea:45:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:45:C0:B8:69:EF:68:B1:B0:C5:70:DC:22:3B:E1:B7:65:63:AF:DA
X509v3 Authority Key Identifier:
keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:3f:39:e0:0a:48:34:dd:33:81:38:d8:7f:41:b7:bf:5c:8f:
7a:2f:5a:ec:00:e2:b1:78:71:1e:fb:a7:e1:ba:ca:55:3f:11:
5a:3b:47:3e:0d:ea:ef:e4:0e:36:c2:14:02:a7:0d:7a:cd:6c:
7c:e8:41:87:0c:a4:c2:38:e5:d5:76:a4:96:ab:67:46:4c:4f:
33:8e:9e:c0:9c:4b:0d:ca:6c:c1:f4:ab:dc:b4:8a:2b:d2:48:
7f:1d:4a:30:4d:fb:1e:01:e2:0e:6f:57:fc:47:23:8d:91:ac:
73:89:cc:99:80:4d:e7:3a:f9:00:21:4a:b2:32:cc:40:99:26:
43:2c:56:5d:ef:1a:b0:39:b5:fb:27:9f:08:9d:bc:4b:95:ba:
1c:c6:d4:d7:66:cd:f3:32:bb:70:c4:97:16:db:1a:9f:f1:ed:
19:54:6f:e0:5f:d2:7c:a1:d5:b5:35:a6:df:39:97:bd:90:4c:
9e:28:f2:47:e1:51:04:60:8b:75:9e:96:3b:10:98:6d:d6:a5:
d5:dc:1e:74:01:8b:c1:2f:4c:45:f2:3f:38:e5:14:63:02:a1:
48:1b:cf:e3:1c:9c:73:e4:72:e6:0a:47:57:c7:8d:8d:84:6c:
ae:a3:86:5f:c8:44:d4:ec:53:90:96:cb:c7:f6:61:e4:a5:6a:
f2:86:45:27
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RkM1QzExMC8GA1UEBRMoNzJEQUI3Q0VCRThBN0YyNzg4REU3ODJFREE3MDFFNDY3
RDhDNzhERTAeFw0yNjAxMjMwNjAyNDRaFw0yNjAxMzAwNjAyNDRaMBgxFjAUBgNV
BAMMDTY5NzMwZjA0LTdjMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCVHHh61zZhYdPrPjZqZEQA2FKl5xD0g9kUlSshDwPm7+Pvf67gk3Rq+7RL+Etu
Z8++aP3ZG8tl+ysSrE3h5nOUcj8ojj1KjmZo+6rUpi7MTW8EJPj6zbOVUcuRs9cf
7v7V2jxUxuQFQGE67qc4VzsZLI9ijnI4b1q7TU6PtT01W+KuJAMo98WL445NXXoK
lGKvV1UiqiMadKzqYw6vVp8iwcXN/9tR/U8KJMLvr8elh/adE4MT8v1h9N0cmXw9
LLO7zHBgJ1RohQJdYW1oLPNLkyjpl4ARPk5xQ/05QTFpnRNWo06eEnLXG6V1wXAo
xQ+++dPq5SXvId0aiMXqRV6fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+UXAuGnv
aLGwxXDcIjvht2Vjr9owHwYDVR0jBBgwFoAUctq3zr6KfyeI3ngu2nAeRn2MeN4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGQzVDLzM2Mzc4OEVDNUNC
MDExRjBCNzQ0MjUzOUM0RjlBRTAyL2N0cTN6cjZLZnllSTNuZ3UybkFlUm4yTWVO
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY3RxM3pyNktmeWVJM25ndTJuQWVSbjJNZU40LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG
QzVDLzM2Mzc4OEVDNUNCMDExRjBCNzQ0MjUzOUM0RjlBRTAyL2N0cTN6cjZLZnll
STNuZ3UybkFlUm4yTWVONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAL8/OeAKSDTdM4E42H9Bt79cj3ovWuwA4rF4cR77p+G6ylU/EVo7Rz4N
6u/kDjbCFAKnDXrNbHzoQYcMpMI45dV2pJarZ0ZMTzOOnsCcSw3KbMH0q9y0iivS
SH8dSjBN+x4B4g5vV/xHI42RrHOJzJmATec6+QAhSrIyzECZJkMsVl3vGrA5tfsn
nwidvEuVuhzG1NdmzfMyu3DElxbbGp/x7RlUb+Bf0nyh1bU1pt85l72QTJ4o8kfh
UQRgi3WeljsQmG3WpdXcHnQBi8EvTEXyPzjlFGMCoUgbz+McnHPkcuYKR1fHjY2E
bK6jhl/IRNTsU5CWy8f2YeSlavKGRSc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:02 2026 by rpki-client