This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json)
Hash identifier: i88EPiA5+RLZmO3rbJh4/SQH1n4bDAlyzSbvW9xDzl8=
Subject key identifier: 4D:F2:33:AB:79:19:87:0F:17:FE:83:75:4E:22:F1:6D:79:52:4D:B6
Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24
Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
Certificate serial: 0CD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
Manifest number: 0CCB
Signing time: Sat 24 Jan 2026 17:51:01 +0000
Manifest this update: Sat 24 Jan 2026 17:51:01 +0000
Manifest next update: Sat 31 Jan 2026 17:51:01 +0000
Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: ANXljqbBCVmGIsnKeknolO06xGdTmkH+GILaaQH/sEg=)
2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: LXTrgQN3T+0OVcDzvaM6T5a0p0NXB+0zRwSrfQRhFSw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl
rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3282 (0xcd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CAC7, serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
Validity
Not Before: Jan 24 17:51:01 2026 GMT
Not After : Jan 31 17:51:01 2026 GMT
Subject: CN=69750685-ab67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:4a:09:eb:18:49:c5:84:51:25:24:f3:a7:
2e:01:3a:0d:7e:e5:8b:d0:ea:e7:ec:de:1c:0e:d1:
b7:f1:ce:a7:19:31:3c:74:0a:77:fd:00:0f:ef:70:
27:ac:d1:d4:c1:d2:f4:f3:a6:28:88:63:90:f0:82:
ac:67:d7:d1:a4:cf:ba:d6:67:da:67:e1:a6:15:39:
06:cb:ea:0c:07:78:16:6f:5d:7d:8e:f1:b7:cf:22:
90:f2:80:5a:39:e1:f6:64:f8:7c:d0:9e:b6:6e:73:
d4:86:09:11:c3:f8:b2:19:89:bf:3a:25:0a:96:64:
e3:8a:10:fe:e6:a8:ec:c4:d6:ee:88:df:31:41:5c:
ac:1a:ed:8e:bf:09:94:d4:7d:fd:74:ac:f7:75:16:
5d:86:c0:29:39:13:02:2d:1c:7c:8b:39:69:a5:e5:
b9:9f:3b:6c:f8:ca:7e:ea:f8:b3:c9:99:b0:87:1e:
c8:ec:91:63:87:4d:af:aa:fd:e4:37:d3:a7:94:e3:
9d:ad:86:86:22:3f:7b:31:03:3b:e7:06:62:80:c3:
1e:29:ec:a7:78:b7:5d:e0:21:78:ce:2d:c3:f5:36:
04:10:6b:07:fe:cf:af:65:cf:c0:1b:d0:3b:76:8d:
90:97:7e:41:9d:d7:16:70:28:81:f2:c4:e4:05:3f:
45:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F2:33:AB:79:19:87:0F:17:FE:83:75:4E:22:F1:6D:79:52:4D:B6
X509v3 Authority Key Identifier:
keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1c:38:94:a4:90:94:41:cb:4b:c5:ba:a8:2c:6b:9d:fa:8e:
31:2d:f2:5e:6d:cd:02:7e:99:0a:90:d8:42:a5:17:fe:6f:25:
09:e7:65:d4:52:91:47:66:4d:d6:d6:c7:fa:3e:50:e7:98:48:
cd:e7:e1:4a:ff:32:63:c0:38:56:d3:16:bc:83:5f:e3:82:86:
d5:3b:5c:63:74:cb:67:d3:0f:9f:09:7b:91:a2:f8:b4:a9:ee:
f3:5e:79:67:39:f4:2f:cc:ae:f9:c6:a2:4a:1a:ac:cf:5e:39:
40:16:70:a8:a9:2f:54:97:77:ef:9a:b3:28:71:01:fc:54:fc:
1b:3d:02:e6:90:2d:c7:db:38:e4:b2:46:28:4f:bc:ca:45:9d:
d7:07:dc:04:72:c6:de:71:25:4b:2e:fb:35:5a:1d:f8:1b:b1:
6b:46:20:d5:74:5d:69:90:9f:96:0c:04:03:27:4f:8a:26:f4:
d2:11:6c:63:99:66:65:19:cd:c2:61:fe:5b:7c:f6:a6:8f:c8:
a6:3d:16:f8:46:5a:28:f5:c0:4f:f3:18:ff:97:28:a5:87:34:
a2:a4:0d:07:7d:b0:59:b2:72:ac:21:62:23:2a:97:66:f7:bb:
5c:12:01:b1:86:f3:11:1a:00:3f:83:44:d7:25:da:fb:1a:af:
fc:eb:31:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNBQzcxMTAvBgNVBAUTKDMwQkMyRUU1Qjc1NjRGRTBGREYyMDBFNzg5QjIzQTJD
MEQ4RTkyMjQwHhcNMjYwMTI0MTc1MTAxWhcNMjYwMTMxMTc1MTAxWjAYMRYwFAYD
VQQDDA02OTc1MDY4NS1hYjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1qFKCesYScWEUSUk86cuAToNfuWL0Orn7N4cDtG38c6nGTE8dAp3/QAP73An
rNHUwdL086YoiGOQ8IKsZ9fRpM+61mfaZ+GmFTkGy+oMB3gWb119jvG3zyKQ8oBa
OeH2ZPh80J62bnPUhgkRw/iyGYm/OiUKlmTjihD+5qjsxNbuiN8xQVysGu2OvwmU
1H39dKz3dRZdhsApORMCLRx8izlppeW5nzts+Mp+6vizyZmwhx7I7JFjh02vqv3k
N9OnlOOdrYaGIj97MQM75wZigMMeKeyneLdd4CF4zi3D9TYEEGsH/s+vZc/AG9A7
do2Ql35BndcWcCiB8sTkBT9F+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3yM6t5
GYcPF/6DdU4i8W15Uk22MB8GA1UdIwQYMBaAFDC8LuW3Vk/g/fIA54myOiwNjpIk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FDNy9DMTM5REFCQTAy
MkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1QtRDk4Z0RuaWJJNkxBMk9r
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01Md3U1YmRXVC1EOThnRG5pYkk2TEEyT2tpUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0FDNy9DMTM5REFCQTAyMkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1Qt
RDk4Z0RuaWJJNkxBMk9raVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPHDiUpJCUQctLxbqoLGud+o4xLfJebc0CfpkKkNhCpRf+byUJ52XU
UpFHZk3W1sf6PlDnmEjN5+FK/zJjwDhW0xa8g1/jgobVO1xjdMtn0w+fCXuRovi0
qe7zXnlnOfQvzK75xqJKGqzPXjlAFnCoqS9Ul3fvmrMocQH8VPwbPQLmkC3H2zjk
skYoT7zKRZ3XB9wEcsbecSVLLvs1Wh34G7FrRiDVdF1pkJ+WDAQDJ0+KJvTSEWxj
mWZlGc3CYf5bfPamj8imPRb4Rloo9cBP8xj/lyilhzSipA0HfbBZsnKsIWIjKpdm
97tcEgGxhvMRGgA/g0TXJdr7Gq/86zGw
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:22:59 2026 by rpki-client