This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json)
Hash identifier: hO5I3ukVaJykkkIQ630si/avYeHV211qQljJWrwI3AU=
Subject key identifier: 7D:A7:62:C2:09:E1:BA:16:33:C5:9E:6A:77:03:5A:52:E3:CB:D3:D9
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial: 13AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
Manifest number: 134C
Signing time: Sat 24 Jan 2026 16:46:18 +0000
Manifest this update: Sat 24 Jan 2026 16:46:17 +0000
Manifest next update: Sat 31 Jan 2026 16:46:17 +0000
Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: w6nyGqSFZUqm3yXfdc86EJ8Skf+YPCZPtmVjMODS69E=)
2: 0F1831F8D64011F0B09E955FA6248E41.roa (hash: hYtEXW/iaGWJ5CAMMt+GChIgNUjP9csJ80/vIv3EQTU=)
3: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: JtAyYvcjsSIbHjMavRbf74w0IIhNg4IBABZJn0wcwzQ=)
4: A65587CEDC8E11F084B8ABC03D6F56BC.roa (hash: JT6R5UcPylnieSp1rzG2Ha5fD/GJZdOtx+Vs3dIZPEY=)
5: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: 3fdnPO7nIXug6dYvzk2siFXVuDYGDIdJas3DCvUTWPA=)
6: DEF977A6E53611EB81682769C4F9AE02.roa (hash: SO0gHlbHvBD1Qdf3mOeX+9pYdaFRkZquUMH00OZSNZ4=)
7: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: DOUd4Ct4uA10KaiPoOZjeWOyNrfXwTZYgvv/v0X/i0Y=)
8: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: pmGjv9e4kJuui8gahJeniJTVkFZxLqAkqBkutIyaUmM=)
9: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: tcTX6kZmqsdJd+B/8db69mDZUmsHPhGW4JI/hjxoyFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5037 (0x13ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Validity
Not Before: Jan 24 16:46:17 2026 GMT
Not After : Jan 31 16:46:17 2026 GMT
Subject: CN=6974f75a-b41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:ab:02:35:28:87:8b:25:6c:01:26:15:32:
dd:d7:c3:23:e0:2c:72:91:f0:cc:e1:de:06:2f:9f:
84:c2:83:71:e7:68:bc:62:44:4f:92:c6:1d:56:3b:
14:9a:e6:c3:03:f3:04:39:78:17:53:d4:15:40:d3:
a0:07:4f:6d:1a:ee:62:06:19:1a:9a:57:f1:1e:02:
e1:d1:eb:8c:44:b4:ac:9c:bf:ce:8f:c3:27:e2:6b:
86:af:2e:a1:5a:b5:e5:37:b6:c9:88:b1:de:9a:3d:
b1:c5:eb:90:d6:ea:96:17:6c:27:f1:24:cd:a8:60:
d2:2d:d3:97:4a:84:3c:8b:51:78:cb:c4:06:4d:7b:
13:56:d3:1e:df:36:66:76:22:76:fb:c2:40:0b:ec:
e8:eb:56:9e:eb:89:fc:c4:e5:fe:0b:d5:de:68:d9:
b6:cc:a4:a6:3d:c4:28:80:ea:7c:59:4e:2e:72:42:
b9:43:bb:ea:1a:72:10:df:8f:c2:53:05:0e:c9:1f:
91:86:62:7f:c2:22:ba:37:61:4c:77:91:8f:61:0f:
ac:93:cc:1f:24:67:c5:0f:6d:35:40:93:83:79:23:
02:2a:81:11:27:5b:02:30:1e:13:e6:0a:ff:df:50:
55:03:6b:2b:91:12:88:e1:82:70:07:09:1e:a1:2b:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A7:62:C2:09:E1:BA:16:33:C5:9E:6A:77:03:5A:52:E3:CB:D3:D9
X509v3 Authority Key Identifier:
keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:ee:96:9a:3d:7e:e2:6c:3d:6c:cf:75:73:ed:7d:28:5d:64:
b7:65:b9:aa:9b:da:67:be:52:57:5e:a7:48:23:66:a3:34:c3:
8b:d7:d0:5b:e9:7e:c9:1e:c8:0c:5a:60:5d:17:d2:2d:d0:24:
56:14:61:b7:6e:a5:40:8b:47:9f:dd:ef:fb:d3:21:c8:e1:30:
b1:3b:67:dc:f7:b0:f9:cb:c0:45:36:24:4f:b0:e3:60:f1:ee:
cc:84:26:99:a6:b7:99:7d:63:10:36:70:93:21:50:d5:a2:e8:
74:44:fb:a2:d3:0b:05:87:18:cb:2f:f7:e5:e7:d7:22:4d:ea:
d4:6b:59:a3:67:95:4c:f4:5e:43:9e:d9:b2:a9:e5:7e:21:ea:
1b:81:33:b9:81:57:fb:48:a7:7b:00:a8:d9:00:c7:f8:a4:1e:
7e:f9:19:31:fd:fd:68:99:0b:03:80:4e:20:9d:b2:55:22:23:
71:52:4d:90:a7:e0:ff:ee:2d:ad:09:c9:9b:32:d7:ee:1a:86:
84:fe:79:f8:f7:db:e6:ba:22:67:a4:8d:f9:25:4b:6c:48:f1:
f0:6d:10:c7:fa:e2:83:fd:f8:04:8f:f8:a1:51:9f:b2:a0:ea:
b5:01:44:87:73:9e:ce:22:f6:f5:a6:02:98:17:69:77:f9:3b:
37:93:6f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:00:16 2026 by rpki-client