This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json)
Hash identifier: bc2szK5Oaic5Ws3t6yF/qHpZJzaC9VUyDo/TmBqnW3g=
Subject key identifier: FF:7A:47:73:EE:15:92:6D:B8:22:A0:72:0B:51:57:52:B0:ED:25:07
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial: 3588
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
Manifest number: 3546
Signing time: Sat 24 Jan 2026 14:37:55 +0000
Manifest this update: Sat 24 Jan 2026 14:37:54 +0000
Manifest next update: Sat 31 Jan 2026 14:37:54 +0000
Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: r0K23oxVMRr8HXYVMdOP/brFFxFVcCrdazRJvGjQwy0=)
2: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: 4O6f6zO4+rp67RvHt+QYmoPjYNWBYX03aCYC6rT0bKY=)
3: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: ku0ByaK/68w8G7tu0tDiWUq8Zdb9YUsOCXoz+0AOmhM=)
4: 31745126CD1811EC917CB819C4F9AE02.roa (hash: we2qvgf2vxZ4ZPjgEZi4dnNDvsLxezsmqMuBAL4C+Nw=)
5: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: V+iG3uoTEhOB1RpnqXAIwFGBw4WNdCYvL4uQOduviF4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13704 (0x3588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Validity
Not Before: Jan 24 14:37:54 2026 GMT
Not After : Jan 31 14:37:54 2026 GMT
Subject: CN=6974d943-98ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:8b:2c:49:62:3b:39:3e:9f:20:2a:3c:19:
c0:53:6e:64:eb:de:55:83:89:9f:fd:84:d8:f9:92:
a4:cf:d4:fd:63:79:dd:45:36:2c:9a:f7:76:4b:da:
39:47:bf:62:82:fc:3e:4f:0f:06:85:d9:32:f1:a7:
33:55:13:15:97:2b:9f:5d:56:1a:ea:78:aa:da:02:
a3:7e:b7:dc:08:12:de:91:cf:ec:94:dd:2b:3f:1d:
8e:23:ce:a1:35:d7:0f:96:29:9a:c4:4b:68:47:29:
0a:d8:5a:e8:b1:1b:d8:f9:08:82:49:c7:48:c2:fe:
94:87:74:1b:f6:4d:35:ed:77:e1:44:5d:0e:f3:24:
a8:12:fe:48:32:2c:61:6e:62:a7:3e:25:6c:44:27:
0d:62:c6:10:bd:a6:11:2c:99:8a:b3:1f:c2:dc:04:
75:02:cc:ef:56:97:71:fb:c5:7a:d3:7f:90:62:02:
ca:77:50:b5:c1:30:08:4b:09:24:fd:04:e8:fe:7f:
37:da:13:55:a6:94:21:a2:5a:b6:9e:81:38:e4:8e:
05:cb:6d:9f:26:4d:10:2f:73:5b:b7:e8:ed:2a:c2:
b4:47:07:be:cf:36:39:0a:5d:52:38:77:27:af:f9:
e9:93:cf:a5:18:8e:92:cd:57:27:9e:59:3b:df:fa:
9d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7A:47:73:EE:15:92:6D:B8:22:A0:72:0B:51:57:52:B0:ED:25:07
X509v3 Authority Key Identifier:
keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ef:6f:4f:7b:74:57:bb:98:f1:1e:91:1d:9a:a6:d2:75:57:
f2:92:0b:07:dc:99:86:6e:02:0c:97:77:07:73:b3:0e:c4:a7:
bc:80:12:35:9c:dd:33:84:02:9c:5b:82:21:d7:54:0d:2e:58:
d5:c8:12:5c:ef:ab:ad:9f:85:88:d0:4d:dc:b6:fe:17:97:50:
fa:84:46:4e:5b:a7:88:9c:05:ad:eb:16:17:96:27:07:c8:ae:
91:f8:c5:59:64:5a:e1:e8:55:ea:4f:e9:b4:dc:79:25:e8:31:
af:2b:98:d7:79:9c:90:41:f7:41:05:77:cd:23:07:ed:45:40:
f9:47:ed:48:f3:40:cb:9a:11:67:cf:02:cd:47:c9:cd:58:42:
52:c2:b0:24:4d:0e:dc:86:4a:44:01:83:f2:34:f8:84:78:64:
3b:74:e6:77:59:91:30:8e:e8:ce:37:0e:52:48:9d:4f:e6:d1:
18:bf:c2:6f:28:55:98:5d:14:c1:38:56:33:a2:7f:80:e3:01:
4b:92:7c:dd:f9:38:59:53:c8:fe:c4:e3:6b:2e:28:20:fa:43:
0c:6c:29:56:f3:c3:64:0e:8b:f2:6b:c3:6a:ac:b8:5d:fc:44:
1d:cb:2e:68:ec:9d:b1:76:da:23:0d:3a:5d:0f:ae:de:3c:92:
64:f6:eb:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdCNTAxMTAvBgNVBAUTKDk5MUIzRjE3MDg0Rjc2RjEyRjlGMDUwOUQ1OTdGMEZG
RUNBMDRCNEEwHhcNMjYwMTI0MTQzNzU0WhcNMjYwMTMxMTQzNzU0WjAYMRYwFAYD
VQQDDA02OTc0ZDk0My05OGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt2+LLEliOzk+nyAqPBnAU25k695Vg4mf/YTY+ZKkz9T9Y3ndRTYsmvd2S9o5
R79igvw+Tw8Ghdky8aczVRMVlyufXVYa6niq2gKjfrfcCBLekc/slN0rPx2OI86h
NdcPlimaxEtoRykK2FrosRvY+QiCScdIwv6Uh3Qb9k017XfhRF0O8ySoEv5IMixh
bmKnPiVsRCcNYsYQvaYRLJmKsx/C3AR1AszvVpdx+8V603+QYgLKd1C1wTAISwkk
/QTo/n832hNVppQholq2noE45I4Fy22fJk0QL3Nbt+jtKsK0Rwe+zzY5Cl1SOHcn
r/npk8+lGI6SzVcnnlk73/qdiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP96R3Pu
FZJtuCKgcgtRV1Kw7SUHMB8GA1UdIwQYMBaAFJkbPxcIT3bxL58FCdWX8P/soEtK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I1MC85RDEzMDVDODFE
OEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2RXZud1VKMVpmd18teWdT
MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21Sc19Gd2hQZHZFdm53VUoxWmZ3Xy15Z1Mwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0I1MC85RDEzMDVDODFEOEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2
RXZud1VKMVpmd18teWdTMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1729Pe3RXu5jxHpEdmqbSdVfykgsH3JmGbgIMl3cHc7MOxKe8gBI1
nN0zhAKcW4Ih11QNLljVyBJc76utn4WI0E3ctv4Xl1D6hEZOW6eInAWt6xYXlicH
yK6R+MVZZFrh6FXqT+m03Hkl6DGvK5jXeZyQQfdBBXfNIwftRUD5R+1I80DLmhFn
zwLNR8nNWEJSwrAkTQ7chkpEAYPyNPiEeGQ7dOZ3WZEwjujONw5SSJ1P5tEYv8Jv
KFWYXRTBOFYzon+A4wFLknzd+ThZU8j+xONrLigg+kMMbClW88NkDovya8NqrLhd
/EQdyy5o7J2xdtojDTpdD67ePJJk9us0
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:39 2026 by rpki-client