This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json)
Hash identifier: Zlw0rCh2eO4ta80roNVKoBS0w9TufLDFOtU2ERcRFlQ=
Subject key identifier: 47:F1:38:62:8A:7D:E9:39:EA:B4:22:DC:8A:B2:9C:EB:0E:EC:9D:F1
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial: 17D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
Manifest number: 172F
Signing time: Sat 24 Jan 2026 16:19:38 +0000
Manifest this update: Sat 24 Jan 2026 16:19:38 +0000
Manifest next update: Sat 31 Jan 2026 16:19:38 +0000
Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: eNYIL1qaWsBDoGX/bvtTIobN59VLJop+viykvA6xLCM=)
2: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: 3qsyI1RYdC4IxoOEtj35JjtCqUJZACqFj6a64FAn/R4=)
3: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: D5/phfHv7NRnNh1uVB5OcYl3HKLOcCjwwCcn5LIOY04=)
4: 987E6D9E985711F08C4D1E11C4F9AE02.roa (hash: t0aqBhUy2E1vHGSzZ+V/fFaWtfLzEKA+l6C3kep9pTU=)
5: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: z4J2zWK+daoCcDWCwroSrs4nVvB5wPQCYZ736zqUbvA=)
6: 5EB452C8D70D11F0B16F7C3995D3641D.roa (hash: QKniKB0i9U/qZ82wwtBMU77bAEO0dwptMvMlVYHgVtE=)
7: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: S7+wUQWXWYyVNfVrHQD8NP/Kenz4c8yGRRnN25FwcFg=)
8: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: +baJ4IIlVuI0qFlzRCIAXw8ieoi3Maif+6sxqFCGNb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6103 (0x17d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Validity
Not Before: Jan 24 16:19:38 2026 GMT
Not After : Jan 31 16:19:38 2026 GMT
Subject: CN=6974f11a-191f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:6c:4a:bd:6a:b9:fc:8d:00:0c:d3:b6:9d:
03:ed:2a:4a:c8:3c:96:b9:50:4b:80:36:ca:74:52:
12:4e:c3:6f:ef:b1:7d:69:bf:92:bc:66:b7:1c:33:
44:b9:ce:e7:65:a1:2e:3f:e0:11:bb:6b:e6:4f:6f:
53:d8:5e:60:cd:51:cd:3d:1e:ba:8a:28:7e:e1:87:
81:c1:27:5a:85:49:0b:f6:6a:3b:52:c2:1b:96:89:
95:46:2f:40:92:c2:08:e8:60:b6:ea:f4:ca:78:ba:
f0:2e:62:13:ac:f8:1c:67:fa:32:27:00:62:13:c6:
0f:89:68:86:76:01:16:53:99:b2:4c:89:7e:de:45:
ba:7b:34:9f:1f:c2:e6:50:7c:f1:18:79:74:ff:d8:
f3:2b:36:3c:90:e3:ec:ae:ea:a0:79:c6:bf:8e:0e:
e9:a6:47:c9:5f:eb:b2:79:ad:04:d6:ca:19:9a:9b:
1f:1b:13:9e:37:c5:ac:e7:e0:5e:a8:3d:d8:bb:f5:
82:d8:49:4d:d9:95:ba:f0:00:c3:db:30:d4:d3:90:
3e:2c:99:80:ed:8e:51:bd:54:60:d5:a5:34:b6:f9:
25:fc:0d:25:af:85:75:36:df:7d:cf:8b:0f:a5:8a:
ad:05:24:d3:95:2f:d4:56:56:79:52:39:37:f5:74:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F1:38:62:8A:7D:E9:39:EA:B4:22:DC:8A:B2:9C:EB:0E:EC:9D:F1
X509v3 Authority Key Identifier:
keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:1b:a8:ff:8c:8b:a9:26:d6:a2:b0:74:fc:f5:5e:0a:7e:44:
48:8c:30:4d:47:be:23:d2:87:ca:cf:22:73:8f:d6:f9:38:48:
fb:25:dc:58:43:37:80:7a:ba:e4:4f:42:99:2c:11:cb:4d:82:
55:a1:32:09:b4:19:d6:7f:66:bd:bd:2f:64:ce:28:65:fa:09:
2f:38:d0:6e:82:7d:b1:aa:f6:21:75:fe:47:be:8a:22:db:31:
88:a7:52:5e:33:f7:25:12:06:f6:55:69:f5:d3:c5:b5:a2:fe:
fa:d5:f4:cf:39:b8:bb:b1:f7:34:49:56:a8:4c:53:26:2b:fb:
37:0c:44:08:7c:ae:42:6c:e3:76:7d:da:40:45:5d:5b:f6:92:
aa:31:1c:e2:0c:d1:8e:7c:83:a6:a8:9d:f5:1a:14:e5:1b:4f:
34:b3:85:17:38:51:ec:6c:b2:ae:26:84:16:18:29:f5:dc:28:
70:52:30:a7:3f:33:5e:a5:3b:03:45:26:09:b6:1b:07:cf:ba:
b1:68:ae:f9:07:dd:1c:fd:51:38:78:6a:e3:c4:7a:b6:25:51:
de:6e:ca:d4:81:18:d2:7e:42:ac:ae:d7:dd:07:15:ec:1e:0f:
d9:88:57:70:99:ce:ae:93:d4:e6:51:3a:76:1d:9b:b0:b5:fa:
da:45:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:31:02 2026 by rpki-client