This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
File: tNHFfu7y2pEKr3lGCpvLIab80v0.mft (raw, json)
Hash identifier: h49RfvnHSmsM7kiz0avYuH1Z6KqBVfdR4MfEqqWpwjg=
Subject key identifier: B2:D9:8E:02:E8:61:7D:44:7B:5D:07:14:9E:BF:C6:3D:E2:38:0D:9D
Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD
Certificate issuer: /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD
Certificate serial: 07CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
Manifest number: 07C3
Signing time: Sat 24 Jan 2026 20:42:28 +0000
Manifest this update: Sat 24 Jan 2026 20:42:27 +0000
Manifest next update: Sat 31 Jan 2026 20:42:27 +0000
Files and hashes: 1: tNHFfu7y2pEKr3lGCpvLIab80v0.crl (hash: MeY48DayL2xs4ZwbjnWiRtKiZLYMdH7LEgxxXq5s/nc=)
2: EB0FEBAA295811EBB519AC70C4F9AE02.roa (hash: 23TiuLPxAaSrXTY2xFHwDsaNfyE9NetpuIlQb209liA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl
rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A033, serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD
Validity
Not Before: Jan 24 20:42:27 2026 GMT
Not After : Jan 31 20:42:27 2026 GMT
Subject: CN=69752eb4-f4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:d4:06:89:97:92:c6:c2:b9:8e:da:d8:37:
1f:e4:a1:b9:22:73:79:4a:6c:1f:f2:41:53:17:dc:
e1:4f:81:71:d4:8e:53:c1:52:e2:72:cd:09:8b:17:
2e:11:be:22:ab:8e:3d:6e:d8:34:ca:26:cc:cd:eb:
8b:3e:ed:14:50:05:5e:8d:06:33:16:88:9a:53:a9:
70:ea:34:7a:80:92:35:0d:28:ad:2a:9a:80:94:f1:
54:bf:ef:7d:15:2a:f9:6a:2e:b7:83:1d:4d:61:72:
1c:d2:bc:cb:92:30:0f:0c:e7:ec:67:57:7b:88:74:
34:00:3d:0f:b1:e0:ed:f5:2c:7a:5f:2e:cb:0c:af:
d9:b9:82:2e:13:3b:60:04:2f:71:df:64:d9:4a:8c:
4b:c0:60:70:53:25:4d:90:44:00:de:d5:4c:51:4e:
95:09:54:75:de:11:7c:95:0b:5d:d3:54:32:bb:54:
06:6a:ed:c4:73:3a:dd:7d:35:08:17:5c:f6:ad:2f:
5a:d3:38:18:a5:27:45:41:42:3f:f1:2b:d2:97:52:
4f:d9:3f:a8:3c:cd:79:aa:9c:dc:81:79:25:b8:e9:
7d:58:32:57:17:b0:56:78:0b:e6:3c:df:87:bb:03:
ee:6e:9f:32:64:73:0b:32:b2:b7:d9:1b:22:41:4f:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D9:8E:02:E8:61:7D:44:7B:5D:07:14:9E:BF:C6:3D:E2:38:0D:9D
X509v3 Authority Key Identifier:
keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:d0:de:22:ba:05:a0:45:75:30:20:a4:0b:6a:ea:ab:3e:e6:
39:a9:11:64:35:e9:c3:f9:d6:03:57:14:e5:bb:0d:9d:48:70:
bb:d1:9c:ce:66:e6:c7:6d:c0:62:b3:d1:7d:ea:07:d9:8b:a9:
ef:66:d5:3b:bd:00:58:e8:93:29:3b:24:54:f7:46:22:35:c5:
d8:81:6f:13:6b:e6:0c:82:db:07:97:d8:16:e9:e5:96:28:b4:
5a:c1:dd:a5:b5:05:33:6e:9b:fa:c0:72:53:29:f6:f5:31:7e:
27:5c:a9:12:6d:2d:98:fb:3b:70:c0:ff:d2:80:7b:db:77:f2:
6c:aa:3a:fd:43:ab:ba:37:c9:0a:ca:cf:a2:ed:df:4f:dc:df:
c3:a7:ad:d6:88:2c:b0:2e:37:69:d5:a3:0d:41:19:67:72:96:
ac:52:a4:e7:dc:7a:d7:3b:e1:2d:a1:ca:17:96:51:18:ca:69:
ed:03:bd:21:6f:1b:74:aa:9f:3a:8d:c8:5c:72:b7:ec:cf:fe:
24:d8:66:f3:99:6b:42:81:1f:ec:f8:d6:5e:a9:65:05:5d:75:
b8:55:d8:18:3c:b1:4a:3f:80:48:c5:50:75:21:4e:ae:e1:8d:
25:48:b3:fc:73:2a:1d:75:b7:13:f1:fb:9c:d6:00:50:0b:5c:
e4:b9:21:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEwMzMxMTAvBgNVBAUTKEI0RDFDNTdFRUVGMkRBOTEwQUFGNzk0NjBBOUJDQjIx
QTZGQ0QyRkQwHhcNMjYwMTI0MjA0MjI3WhcNMjYwMTMxMjA0MjI3WjAYMRYwFAYD
VQQDDA02OTc1MmViNC1mNGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzJrUBomXksbCuY7a2Dcf5KG5InN5Smwf8kFTF9zhT4Fx1I5TwVLics0Jixcu
Eb4iq449btg0yibMzeuLPu0UUAVejQYzFoiaU6lw6jR6gJI1DSitKpqAlPFUv+99
FSr5ai63gx1NYXIc0rzLkjAPDOfsZ1d7iHQ0AD0PseDt9Sx6Xy7LDK/ZuYIuEztg
BC9x32TZSoxLwGBwUyVNkEQA3tVMUU6VCVR13hF8lQtd01Qyu1QGau3EczrdfTUI
F1z2rS9a0zgYpSdFQUI/8SvSl1JP2T+oPM15qpzcgXkluOl9WDJXF7BWeAvmPN+H
uwPubp8yZHMLMrK32RsiQU/WyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLZjgLo
YX1Ee10HFJ6/xj3iOA2dMB8GA1UdIwQYMBaAFLTRxX7u8tqRCq95RgqbyyGm/NL9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAzMy84QkFFOEI4ODI5
NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJwRUtyM2xHQ3B2TElhYjgw
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ROSEZmdTd5MnBFS3IzbEdDcHZMSWFiODB2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTAzMy84QkFFOEI4ODI5NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJw
RUtyM2xHQ3B2TElhYjgwdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCS0N4iugWgRXUwIKQLauqrPuY5qRFkNenD+dYDVxTluw2dSHC70ZzO
ZubHbcBis9F96gfZi6nvZtU7vQBY6JMpOyRU90YiNcXYgW8Ta+YMgtsHl9gW6eWW
KLRawd2ltQUzbpv6wHJTKfb1MX4nXKkSbS2Y+ztwwP/SgHvbd/Jsqjr9Q6u6N8kK
ys+i7d9P3N/Dp63WiCywLjdp1aMNQRlncpasUqTn3HrXO+EtocoXllEYymntA70h
bxt0qp86jchccrfsz/4k2GbzmWtCgR/s+NZeqWUFXXW4VdgYPLFKP4BIxVB1IU6u
4Y0lSLP8cyoddbcT8fuc1gBQC1zkuSF6
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:58:17 2026 by rpki-client