This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json)
Hash identifier: Grn7VhLo0FiIt7HSmPkn/LWdk+9M76qLUmmTg3rbIE4=
Subject key identifier: 19:2E:AC:8B:22:F7:FE:7B:D7:17:6E:29:B0:B0:23:E1:01:5B:93:B6
Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Certificate serial: 0C24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
Manifest number: 0C11
Signing time: Sat 24 Jan 2026 18:23:02 +0000
Manifest this update: Sat 24 Jan 2026 18:23:02 +0000
Manifest next update: Sat 31 Jan 2026 18:23:02 +0000
Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: hga0/OMWFrmvQvPS37ZOk11HipjSbEEYMAPnJ4p5p8M=)
2: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: Jnuyh/tjlmXzh/W0FC+nfv2/1A+JOUdoR1QdMOg2nAw=)
3: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: 3kF8zJlwF4UbEFsgd+jLuLFD7uUy5scRolMoxM2c994=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3108 (0xc24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Validity
Not Before: Jan 24 18:23:02 2026 GMT
Not After : Jan 31 18:23:02 2026 GMT
Subject: CN=69750e06-31e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:9a:e7:00:ab:c7:3d:81:b2:9a:90:f8:59:
1f:7d:46:c9:71:0b:ce:2b:99:84:a8:fb:84:42:2a:
b6:db:1d:61:96:00:ff:a2:18:17:f7:dc:8c:c8:98:
02:5b:91:43:58:52:90:18:26:b4:87:6d:9c:7c:5f:
25:5d:79:8d:98:bb:57:de:a6:fc:a7:49:7b:fc:04:
58:3d:8c:51:9b:3a:65:e9:75:1b:34:d9:09:f6:eb:
d8:df:e5:7b:88:48:01:06:15:44:12:cc:2f:36:42:
3a:11:01:d0:54:a0:be:4c:36:29:8a:8c:de:9e:a7:
1d:1b:02:91:2d:85:31:d4:b7:be:27:af:8a:0d:da:
4b:18:10:8a:22:fa:a5:91:2c:39:2b:72:f7:09:22:
c5:60:63:71:1e:74:bd:53:c7:e7:bb:88:dc:96:32:
fc:a0:92:83:bd:f3:52:d7:d5:9c:f5:59:6d:6a:0d:
90:f7:47:ae:85:cc:75:21:ec:df:ce:25:76:da:e6:
14:39:2e:18:1a:c2:b6:df:8b:d1:75:12:98:76:19:
33:bd:91:a3:63:b0:8a:a5:42:46:b1:89:94:05:90:
3a:a4:2b:c2:00:e3:e3:c2:e0:ed:c0:fb:1a:d4:ce:
a8:f6:9e:21:a0:42:cf:9f:ea:2b:d2:96:b0:ff:8d:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2E:AC:8B:22:F7:FE:7B:D7:17:6E:29:B0:B0:23:E1:01:5B:93:B6
X509v3 Authority Key Identifier:
keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fc:b0:07:81:f3:95:1c:0c:c1:45:c1:ad:8f:ef:8f:0c:47:
e0:bc:15:8c:68:7e:ba:5f:62:68:af:8c:2a:27:69:15:61:f5:
f8:d6:df:d9:9b:22:3d:05:0e:0b:1e:6b:97:17:21:d6:9a:25:
d2:bc:13:1f:b4:03:91:eb:1f:b7:fb:60:9c:e4:7c:3b:b5:da:
6d:fa:f0:42:41:8b:4b:c3:64:fa:8e:36:36:78:99:a5:0a:a3:
2a:6d:58:f8:03:31:a8:2a:ba:69:6b:1c:78:8e:af:90:4f:d2:
c4:43:92:5c:0e:49:93:07:6d:a8:e3:11:47:58:59:3b:3d:98:
ec:e4:16:a7:52:75:4f:00:f8:2e:bb:0a:2e:2d:06:e9:12:eb:
aa:e0:d7:62:41:0b:d3:19:60:14:fa:a9:a7:96:db:ae:e3:14:
57:00:ba:69:2e:d0:b0:12:c0:0f:69:c0:ef:c2:a7:53:91:a1:
68:e9:b3:d7:f3:2a:3c:11:11:fe:b0:01:d3:b6:3d:0e:01:f0:
07:f0:15:4b:7e:fe:6a:84:99:02:f6:36:bc:dc:60:7e:78:d9:
cd:a3:dd:84:17:86:5e:3e:c4:e0:be:86:25:a2:d0:96:a6:c1:
4a:8c:df:bf:32:1c:28:83:a4:53:d1:ac:4f:20:12:37:3e:05:
23:1f:fb:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw
RjUyOTc5QTAwHhcNMjYwMTI0MTgyMzAyWhcNMjYwMTMxMTgyMzAyWjAYMRYwFAYD
VQQDDA02OTc1MGUwNi0zMWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv2Ka5wCrxz2BspqQ+FkffUbJcQvOK5mEqPuEQiq22x1hlgD/ohgX99yMyJgC
W5FDWFKQGCa0h22cfF8lXXmNmLtX3qb8p0l7/ARYPYxRmzpl6XUbNNkJ9uvY3+V7
iEgBBhVEEswvNkI6EQHQVKC+TDYpiozenqcdGwKRLYUx1Le+J6+KDdpLGBCKIvql
kSw5K3L3CSLFYGNxHnS9U8fnu4jcljL8oJKDvfNS19Wc9Vltag2Q90euhcx1Iezf
ziV22uYUOS4YGsK234vRdRKYdhkzvZGjY7CKpUJGsYmUBZA6pCvCAOPjwuDtwPsa
1M6o9p4hoELPn+or0paw/42mZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkurIsi
9/571xduKbCwI+EBW5O2MB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3
QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl
YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53
UzI1YzEtb1NnUDBQVXBlYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9/LAHgfOVHAzBRcGtj++PDEfgvBWMaH66X2Jor4wqJ2kVYfX41t/Z
myI9BQ4LHmuXFyHWmiXSvBMftAOR6x+3+2Cc5Hw7tdpt+vBCQYtLw2T6jjY2eJml
CqMqbVj4AzGoKrppaxx4jq+QT9LEQ5JcDkmTB22o4xFHWFk7PZjs5BanUnVPAPgu
uwouLQbpEuuq4NdiQQvTGWAU+qmnltuu4xRXALppLtCwEsAPacDvwqdTkaFo6bPX
8yo8ERH+sAHTtj0OAfAH8BVLfv5qhJkC9ja83GB+eNnNo92EF4ZePsTgvoYlotCW
psFKjN+/Mhwog6RT0axPIBI3PgUjH/vh
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:58 2026 by rpki-client