This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json)
Hash identifier: C+BUs5CvfrKZhkAdS2KGOrpOuWy8qcSZw+FuqzGdE4Q=
Subject key identifier: 56:9E:4E:C2:48:A5:A7:8E:71:AC:BA:8B:48:A3:92:BF:40:A7:88:0B
Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6
Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6
Certificate serial: 0263
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
Manifest number: 0263
Signing time: Sun 25 Jan 2026 00:49:01 +0000
Manifest this update: Sun 25 Jan 2026 00:49:01 +0000
Manifest next update: Sun 01 Feb 2026 00:49:01 +0000
Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: +KthMzSX11mBlHKmdwjvipoUMM9JC4bo43Gd9e3CsEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl
rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6
Validity
Not Before: Jan 25 00:49:01 2026 GMT
Not After : Feb 1 00:49:01 2026 GMT
Subject: CN=6975687d-05d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:60:0b:ab:fa:15:8c:bb:ac:54:48:10:23:
ac:7a:8a:78:84:ce:8e:92:1a:c8:d2:f9:a0:a8:9f:
dc:32:b0:22:83:e5:e4:c7:69:ed:8c:a0:21:36:87:
93:f0:df:f3:f6:91:94:a6:cf:68:74:ff:2c:4d:a3:
a8:d8:9b:c2:ec:08:e8:b1:41:a4:12:a8:19:15:23:
ee:5f:42:eb:3c:dc:aa:fd:07:8c:23:43:0b:da:54:
f0:ac:3a:7e:d8:84:f9:df:b9:61:52:3f:94:39:88:
12:30:fc:4a:6a:e4:50:ac:32:45:7a:1f:be:eb:06:
b7:ab:a7:02:6e:12:89:89:d5:a8:60:ab:da:46:43:
da:c5:fc:88:14:f2:e0:b3:4c:69:70:09:83:d9:fe:
d6:e3:19:f9:2d:d9:6b:a4:cb:7a:f3:98:9c:fc:e3:
e0:e4:b2:a3:e7:f8:ee:13:ef:68:4f:75:76:aa:c4:
0a:b6:dc:4e:99:39:3e:e9:5c:04:d2:e7:36:06:0e:
48:4d:7b:91:21:06:5b:c5:bc:d9:b3:2b:d2:cd:53:
b4:23:85:95:1e:12:fc:b5:e8:7f:2c:55:54:aa:34:
4b:0d:44:11:7f:43:d2:d8:33:1f:78:01:45:e4:09:
37:6f:62:29:0f:5f:97:c5:77:d0:02:ac:2b:4c:4e:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9E:4E:C2:48:A5:A7:8E:71:AC:BA:8B:48:A3:92:BF:40:A7:88:0B
X509v3 Authority Key Identifier:
keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:c6:3c:4f:bf:32:e1:79:2c:2b:6d:81:25:51:d8:08:fc:df:
30:70:27:84:77:b4:8a:99:2e:b8:0a:e1:99:9d:cf:a4:40:c9:
2d:42:40:79:2a:ff:d2:95:5a:f1:ec:76:82:71:5e:cf:76:4a:
55:a6:b5:33:60:7e:b2:34:db:ac:31:8f:45:81:e0:35:42:d0:
e7:68:cc:b5:54:98:f8:45:f4:f7:c5:33:82:da:ec:25:e4:ba:
25:d6:a9:dc:05:cd:f8:a7:3a:ee:b9:2e:d9:2c:94:44:ec:bc:
05:0d:16:67:17:b5:81:9e:1d:23:c7:ba:e4:ab:ab:67:72:0c:
96:93:4e:ba:c0:bc:5e:ad:85:92:a4:91:8a:33:91:3b:c0:6b:
06:a9:d5:29:1d:32:fc:c5:64:b8:c0:48:e7:b2:91:25:41:51:
75:91:ab:c5:ea:c2:0d:6e:15:f3:b2:58:86:de:32:85:da:90:
dd:58:d1:44:8d:e3:f5:5d:66:f9:49:35:55:ed:fe:ed:76:c4:
cd:7e:d8:e7:72:6f:da:7f:5b:99:fa:43:2a:c0:98:87:42:07:
9a:21:63:57:d9:7b:83:7f:c0:42:01:9c:68:d3:56:a1:16:ba:
50:35:ba:2e:df:af:0c:ac:24:70:93:8b:77:5f:f5:71:9b:78:
79:40:1b:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM3NTYxMTAvBgNVBAUTKEE0MkQ4OEMxMkQ2NDcxODNDNzdCRkM0QUVGODI4Q0Yy
OTQ0QjlFQzYwHhcNMjYwMTI1MDA0OTAxWhcNMjYwMjAxMDA0OTAxWjAYMRYwFAYD
VQQDDA02OTc1Njg3ZC0wNWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv0xgC6v6FYy7rFRIECOseop4hM6OkhrI0vmgqJ/cMrAig+Xkx2ntjKAhNoeT
8N/z9pGUps9odP8sTaOo2JvC7AjosUGkEqgZFSPuX0LrPNyq/QeMI0ML2lTwrDp+
2IT537lhUj+UOYgSMPxKauRQrDJFeh++6wa3q6cCbhKJidWoYKvaRkPaxfyIFPLg
s0xpcAmD2f7W4xn5LdlrpMt685ic/OPg5LKj5/juE+9oT3V2qsQKttxOmTk+6VwE
0uc2Bg5ITXuRIQZbxbzZsyvSzVO0I4WVHhL8teh/LFVUqjRLDUQRf0PS2DMfeAFF
5Ak3b2IpD1+XxXfQAqwrTE55fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaeTsJI
paeOcay6i0ijkr9Ap4gLMB8GA1UdIwQYMBaAFKQtiMEtZHGDx3v8Su+CjPKUS57G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qzc1Ni8zMzc0NTQ2RTRC
NjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZUEhlX3hLNzRLTThwUkxu
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BDMkl3UzFrY1lQSGVfeEs3NEtNOHBSTG5zWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Qzc1Ni8zMzc0NTQ2RTRCNjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZ
UEhlX3hLNzRLTThwUkxuc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjxjxPvzLheSwrbYElUdgI/N8wcCeEd7SKmS64CuGZnc+kQMktQkB5
Kv/SlVrx7HaCcV7PdkpVprUzYH6yNNusMY9FgeA1QtDnaMy1VJj4RfT3xTOC2uwl
5Lol1qncBc34pzruuS7ZLJRE7LwFDRZnF7WBnh0jx7rkq6tncgyWk066wLxerYWS
pJGKM5E7wGsGqdUpHTL8xWS4wEjnspElQVF1kavF6sINbhXzsliG3jKF2pDdWNFE
jeP1XWb5STVV7f7tdsTNftjncm/af1uZ+kMqwJiHQgeaIWNX2XuDf8BCAZxo01ah
FrpQNbou368MrCRwk4t3X/Vxm3h5QBvL
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:23:39 2026 by rpki-client