This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
File: _eNrbpSTmOUtleidQL32CyXbabk.mft (raw, json)
Hash identifier: JofLt2N8OHYUX5HZcCFmyMTTTUh3njZjPWDd+d8ULGM=
Subject key identifier: 07:4C:B2:25:AA:CE:72:B8:F9:38:78:BB:84:02:5A:D5:52:74:BF:C2
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial: 190D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
Manifest number: 187B
Signing time: Sat 24 Jan 2026 16:19:40 +0000
Manifest this update: Sat 24 Jan 2026 16:19:40 +0000
Manifest next update: Sat 31 Jan 2026 16:19:40 +0000
Files and hashes: 1: _eNrbpSTmOUtleidQL32CyXbabk.crl (hash: Jh8svK9dujRVCj1JOhf0h0vrgFC2jOS4HXRt7xwyMOg=)
2: E807C5CC52A411EEB770555CC4F9AE02.roa (hash: MYDMwEH13UUV8AshJhyD48FZfAvalduY5XFAT0V7ih0=)
3: 0717511C564511F0A1E8983AC4F9AE02.roa (hash: xG2LS6C8x8CQUK4qPW/RvBSwEnqkcjEWwMOeK61dfdw=)
4: 4409B8649D1011F0B28FB758C4F9AE02.roa (hash: A/zZSRGjkMwADjlZyW6cF/auyn1kJtFRTWSHvAVO1hc=)
5: AF2BF494314B11F0BDC2D637C4F9AE02.roa (hash: /1J4f9DUb/35uCpXwmz+NmbAI2453+Nij3SziuypiQY=)
6: EF885538C28B11EBBF310469C4F9AE02.roa (hash: zCtYWfWmMHrxhAWz295ThSf+06H/coZnMyFAor81eJY=)
7: 5D75149CD70D11F0B16F7C3995D3641D.roa (hash: W2WG2pihA0Y79l/nVFRnSUeCLL6oNnSZep7NvPbt3Ek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6413 (0x190d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Validity
Not Before: Jan 24 16:19:40 2026 GMT
Not After : Jan 31 16:19:40 2026 GMT
Subject: CN=6974f11c-7c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:c4:a9:e4:45:fc:a2:92:f2:49:0e:b0:85:
d4:a5:e0:dc:ae:bf:24:c9:83:ae:48:7e:6f:ff:ff:
7a:a9:19:c4:dc:31:32:15:d6:d6:5e:54:98:59:72:
10:19:20:7b:dd:97:75:84:99:ac:90:f4:a9:c4:5e:
06:bc:d0:b2:39:36:b8:6c:4e:e2:05:68:fc:cd:bd:
10:45:9b:40:56:04:ce:81:ef:da:3c:9b:29:42:19:
7b:9d:6f:1a:d1:ca:08:71:82:16:b7:7c:0f:af:ce:
6c:7b:39:5a:05:f3:2b:83:d4:2c:26:e5:bb:4d:46:
6b:88:0d:af:54:19:d9:19:18:ac:2a:b7:1b:df:0c:
3a:67:ff:14:70:65:c1:5c:ef:14:0c:1d:4c:f0:5b:
8c:5d:9e:5f:01:55:df:1a:d0:13:13:28:88:b0:09:
39:8d:b3:da:d3:cb:df:b8:56:02:59:73:34:71:48:
d9:2d:ac:91:38:d6:0d:2c:18:c6:12:9f:33:6c:61:
f8:16:70:fe:2b:cc:d9:ca:64:ae:8d:5e:57:11:84:
26:ce:e9:bc:3e:bf:b5:42:cf:e7:97:67:e3:b6:e1:
21:83:0c:95:61:c9:be:24:86:c2:a6:7a:0f:aa:88:
9d:f9:53:3a:d8:46:26:e9:98:09:68:0b:ce:22:9b:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4C:B2:25:AA:CE:72:B8:F9:38:78:BB:84:02:5A:D5:52:74:BF:C2
X509v3 Authority Key Identifier:
keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:04:e0:38:41:e2:18:a8:17:3b:9f:05:ec:7e:a1:4d:be:82:
30:0d:f1:10:78:d2:9f:23:ba:c4:40:b2:0c:18:7c:74:c8:ca:
8f:c5:b0:b2:42:b8:85:44:80:89:c7:bd:fc:72:f9:2d:91:df:
39:73:8e:5e:04:ea:50:7b:8f:0d:8f:7c:a9:f5:d6:a2:a6:f7:
59:d6:9a:e9:ef:79:ac:6f:75:79:ee:10:2e:9b:b0:20:80:c0:
57:6a:7f:1e:eb:08:9a:6c:48:7b:47:05:dd:8e:28:4c:5a:1f:
c2:79:9f:ea:d0:10:69:f6:ec:28:26:ec:20:58:e3:cd:15:e1:
83:83:83:b5:0b:0c:e9:4f:2f:99:f3:88:29:bc:82:41:e8:af:
c6:45:3b:46:2d:bf:80:93:d7:39:e3:e2:be:dd:de:43:f6:87:
c5:23:08:52:48:f1:5c:73:d2:c1:61:64:cb:06:a4:b5:25:4a:
9e:8e:02:0c:f7:7f:e3:9d:17:5f:96:c9:d9:70:a6:35:a5:b3:
0f:3a:ee:83:30:69:82:b5:79:b8:24:cc:92:8f:70:6c:82:29:
38:41:ce:cb:b9:0c:b2:06:14:ad:c3:35:48:de:67:f7:a7:30:
24:37:b6:16:a7:ac:9a:8e:3c:41:5e:cd:23:86:64:9f:68:1e:
17:27:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:42:54 2026 by rpki-client