This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json)
Hash identifier: ROSUpy5qIcZn2jd7kuyKVPoFkg2nQaguRo6REScH2WA=
Subject key identifier: C9:6E:CB:62:27:9C:EA:B6:A4:00:07:3B:BC:23:9C:9C:99:02:A1:0F
Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Certificate serial: 049C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
Manifest number: 0497
Signing time: Sat 24 Jan 2026 23:14:13 +0000
Manifest this update: Sat 24 Jan 2026 23:14:13 +0000
Manifest next update: Sat 31 Jan 2026 23:14:13 +0000
Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: l3XDN8OlDoQ1IQC7gudlc9h6mLP20xjbwVjAOrWsd78=)
2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: oV8jstChrG2LMgvNNWOO9hMkyB2Ar9RL1KKMQtKZSu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1180 (0x49c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Validity
Not Before: Jan 24 23:14:13 2026 GMT
Not After : Jan 31 23:14:13 2026 GMT
Subject: CN=69755245-7aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:05:fa:00:b3:3b:a8:f5:ab:cb:e0:a0:46:
34:d3:ee:b7:c0:52:3e:ee:1c:61:ed:92:43:99:a6:
57:90:ca:62:8b:b7:28:9d:c8:3e:39:54:b8:fd:37:
93:79:e4:5c:e5:ae:52:41:eb:da:09:88:a9:c7:d6:
33:43:0a:57:75:47:4a:62:8e:4e:ac:82:cb:1c:c8:
b1:16:63:61:ee:37:8f:b5:c1:a6:5e:99:4c:e6:c2:
cc:73:8e:0e:72:fc:1e:8b:cc:58:f9:58:31:ba:58:
fe:36:2f:1d:e7:03:32:50:ed:1e:f3:4b:d4:65:76:
bb:4e:78:c8:38:1b:96:4e:2a:8f:45:3f:ca:72:20:
86:69:fd:59:65:f5:43:37:98:d2:2c:a6:69:54:68:
fc:bd:72:b3:f3:cb:dd:f8:87:f9:78:c2:42:6c:8c:
77:0f:61:e7:63:1e:5c:1a:70:e1:e2:c3:4a:57:4a:
ec:8b:50:60:6b:cf:bb:59:5b:e2:41:63:4d:30:2c:
a1:51:00:0f:18:e9:61:64:aa:70:75:80:1d:d6:94:
54:b5:b0:8d:52:82:ec:70:07:58:27:ef:6d:fd:fd:
fc:49:98:ac:87:a8:e9:4c:8a:48:a9:9f:8c:72:4d:
20:f6:17:62:12:ca:85:e8:4f:41:e9:46:ec:69:93:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6E:CB:62:27:9C:EA:B6:A4:00:07:3B:BC:23:9C:9C:99:02:A1:0F
X509v3 Authority Key Identifier:
keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fc:07:bd:b0:9a:36:1e:ce:28:74:f3:3e:60:c9:45:a3:c2:
56:60:22:6b:e2:48:89:be:1f:51:81:b0:a4:84:4a:da:80:92:
24:94:f7:02:3b:79:14:76:44:11:79:c6:89:09:8e:7e:8f:fe:
3f:01:f8:a4:37:02:22:c6:1f:0c:5d:7e:b8:ca:79:53:0f:b8:
b3:43:7f:20:56:a9:ea:03:31:90:cf:13:ed:35:08:dc:53:55:
87:46:02:02:3d:42:fa:33:12:4d:44:cc:90:a4:91:76:79:6b:
db:fc:e6:df:60:96:2b:41:3d:66:28:c8:e2:3b:c1:cb:6a:d4:
2d:7f:cd:5c:dd:7b:bb:9b:24:d3:58:0e:7a:39:7f:ce:06:b3:
e6:d5:94:e6:93:75:e9:82:29:28:77:2a:fd:7c:66:4b:99:46:
3e:d7:48:06:66:32:d8:6e:a1:81:e4:f8:8a:1c:50:0c:52:08:
7a:90:d5:5b:52:31:3c:c3:e2:b3:36:a4:e9:cd:8e:eb:05:55:
b3:50:ba:28:26:1c:30:2d:d0:1b:6e:62:1a:8d:0f:b2:2c:57:
e1:50:ee:de:86:60:8d:2e:af:db:f0:88:9a:b3:b3:8c:57:a2:
c9:65:4d:b9:5f:bb:93:34:8c:02:cb:9a:3f:ec:e9:89:51:0e:
c5:fd:20:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:48 2026 by rpki-client