This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json)
Hash identifier: 6qjf55z5X7SN7naRrtjGzDQbd6fiGUaz7ZMtTQUYWCU=
Subject key identifier: D0:42:5D:03:B0:83:85:2B:5F:2A:F3:F8:0D:E5:09:84:E9:F2:C1:4B
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial: 0401
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
Manifest number: 03D2
Signing time: Sat 24 Jan 2026 23:51:35 +0000
Manifest this update: Sat 24 Jan 2026 23:51:34 +0000
Manifest next update: Sat 31 Jan 2026 23:51:34 +0000
Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: mqrl26SWW4fMYp+euEfYGN+Ie/BCHHAmWXYzF4yYm6g=)
2: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: AVY0d5/NDiEX5/XcV/ITBN3dlkJ2RLeGLkg0Eo543zw=)
3: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: BIcjECgUWsQ4hPpYoXe2O+HNYZxFLkHcHH/BGhRf0OQ=)
4: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: ETk4yckaIN4zob6tGTfs6vKP9pAP7tygu9LlkOfrkSU=)
5: E0AE0960457811EDA501504AC4F9AE02.roa (hash: 1sOapiiUanKllNe/+g0UPifOXHz9i1edOTGe9WGOS80=)
6: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: HgWyC5qLUIQClxHJEnvtF6CqTubXKBmljCRRSfRxHP0=)
7: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: R2unzPo0vV/yNS9/vpK5AzQ4ju39sQQVsnw2HUUIUOo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Validity
Not Before: Jan 24 23:51:34 2026 GMT
Not After : Jan 31 23:51:34 2026 GMT
Subject: CN=69755b07-9004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:65:a2:e2:25:7e:ff:50:4e:f8:7f:f7:e3:
8e:6b:18:ff:d7:15:af:41:36:e2:fc:62:a3:21:5d:
29:a6:61:65:e9:45:1f:27:ce:41:d4:9b:45:4f:30:
fd:34:c8:da:20:ff:d9:b3:1d:7b:f1:03:00:91:44:
6c:6b:8b:67:db:34:d0:8d:7b:0e:e8:ac:ff:c5:48:
64:14:8b:d1:46:33:d2:ca:bf:09:5b:73:51:d9:78:
a4:21:fb:bf:ba:81:89:b5:c8:8d:26:2a:57:34:86:
a3:bc:a5:1d:62:10:f2:0b:07:14:3d:26:fa:b4:a7:
61:e5:c7:ec:84:bc:15:97:d1:55:55:47:1c:e6:9d:
52:f8:37:06:12:fc:8d:1b:ac:e5:ec:48:d7:90:78:
4d:ac:e3:33:9f:23:51:6d:7d:8a:aa:ba:5d:f8:fd:
a6:54:87:41:8e:90:7e:b5:8f:51:e8:9c:a8:80:f5:
22:1c:67:65:7a:cd:d8:45:c9:9a:a6:9d:8f:98:1e:
34:49:6a:eb:46:da:28:42:8b:1d:70:18:f8:e9:86:
bf:c6:83:8e:12:03:dc:8f:51:dc:d2:38:eb:15:f8:
cc:21:87:9a:59:45:31:f0:a2:66:a8:89:16:d1:08:
e6:00:3f:dd:1a:9e:be:97:a3:b2:7a:ff:a8:8c:a7:
1f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:42:5D:03:B0:83:85:2B:5F:2A:F3:F8:0D:E5:09:84:E9:F2:C1:4B
X509v3 Authority Key Identifier:
keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:d9:46:75:3c:08:7a:cb:d8:30:70:86:52:f2:7b:db:ee:7d:
b2:6c:86:c3:22:00:a0:2f:15:a4:9e:08:01:38:44:0b:44:d0:
f8:b1:62:74:15:d6:44:37:6f:c9:b2:a5:4c:63:54:43:7a:30:
ca:7c:71:0c:65:e4:49:26:4a:4b:d5:27:de:a2:fa:e3:9b:a3:
ea:20:33:5f:5c:a9:6d:73:49:99:12:23:74:20:3c:08:af:93:
54:f8:03:02:a7:a4:3b:08:3c:d0:65:a6:e1:32:6b:8b:87:b1:
03:0d:4f:6a:e5:5a:ce:eb:a4:38:1e:36:ad:dc:08:e6:d2:f7:
4e:b5:eb:53:80:85:55:5e:0f:68:2e:04:2d:18:46:b6:15:2a:
19:93:65:fd:70:87:af:a9:98:bd:ec:8d:9a:b6:13:d1:a0:70:
2e:72:95:ab:c8:b3:55:b3:d7:90:0a:94:11:cd:d7:9b:6f:be:
0c:56:17:55:81:a8:38:0e:68:17:34:57:aa:e0:bb:48:30:8c:
36:0d:f6:fd:9c:17:60:20:eb:a4:be:44:0b:b8:44:77:7c:9a:
94:fa:f6:bd:00:b8:70:b2:e8:a1:9c:db:41:6a:08:dc:43:e7:
d6:27:af:21:87:12:cd:05:df:a7:87:6b:bf:31:44:bd:e6:cd:
07:54:39:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:29:03 2026 by rpki-client