This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json)
Hash identifier: 8pB9DMX5XCmMUuXBCekYrfdvI3vOGSF7arJEqw/WjA0=
Subject key identifier: 4B:02:9C:E0:0E:8C:E2:34:3F:61:01:52:AE:D1:22:CE:3D:78:D7:BC
Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Certificate serial: 0857
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
Manifest number: 14BF
Signing time: Sat 24 Jan 2026 18:07:45 +0000
Manifest this update: Sat 24 Jan 2026 18:07:44 +0000
Manifest next update: Sat 31 Jan 2026 18:07:44 +0000
Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: SiGKz7i/3wc2Rr0WUqP+ozOGejXJHru4iEhRkQSK3IQ=)
2: 3C73210E29E711F0AB5EBA80C4F9AE02.roa (hash: Y/kIeencj/taxOJRNaw/dIwoKt74Xz/Efsc6Lm3bUIc=)
3: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: LHvxfj3VCNmuKnrLv2NsZrToWYHoHHWWd+F8Qkfp44A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135 (0x857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Validity
Not Before: Jan 24 18:07:44 2026 GMT
Not After : Jan 31 18:07:44 2026 GMT
Subject: CN=69750a70-5dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:ee:47:e7:2a:c8:f9:c5:3e:ee:05:c8:dc:
b9:f9:10:de:21:70:f8:15:4e:2f:6d:44:12:c3:01:
d6:21:80:a7:7b:70:87:a8:1a:16:3f:87:30:27:c2:
3d:e5:89:cd:ea:1b:3f:aa:5d:7d:4b:e5:36:43:e8:
a0:d5:46:90:d0:24:65:13:02:78:17:ad:5a:be:1c:
47:13:46:05:6e:7d:6e:ff:1e:a3:fe:df:4a:89:4c:
6c:86:21:1f:10:f2:09:b9:01:c5:cb:2f:d3:66:38:
c8:a5:a1:1d:8a:ce:09:56:8c:62:a2:97:63:1d:4c:
f5:ae:d8:b8:53:3b:2b:5b:32:ac:89:dd:e3:2d:0d:
6b:30:fc:bf:fc:d9:c7:70:59:1a:a0:85:64:54:77:
73:f2:df:01:2f:77:41:25:87:3e:11:42:d4:c6:3c:
a0:3d:74:64:66:b0:b9:eb:34:f5:0d:18:28:ba:0d:
5c:5f:0f:da:11:72:fe:d4:97:77:11:a2:92:8b:0a:
09:9b:07:dd:17:30:8f:b5:ca:a1:f2:bf:41:df:de:
8d:54:13:73:83:6f:6c:49:1e:d6:15:07:2c:33:5b:
d3:1c:54:e8:9a:2c:24:05:3c:24:df:0e:f2:40:c4:
04:a6:9e:bb:19:1e:0f:f6:dd:2c:8a:c0:4f:69:17:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:02:9C:E0:0E:8C:E2:34:3F:61:01:52:AE:D1:22:CE:3D:78:D7:BC
X509v3 Authority Key Identifier:
keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:3c:6d:31:28:6b:27:e7:73:68:a0:5d:ee:38:59:34:2e:d8:
4c:b9:f0:41:20:20:c5:df:e7:08:d8:16:12:8a:7b:89:a5:e9:
40:c6:26:8b:44:cb:4b:53:a4:5a:23:6d:6f:fb:b7:74:85:43:
89:a1:6b:7a:3a:2e:2b:01:68:86:5e:20:7c:32:7f:b5:67:95:
b1:85:38:6a:9d:29:03:93:f0:1d:3b:d7:a9:65:86:b8:74:60:
5d:3f:ff:b9:0c:df:d5:a2:c2:d0:13:e0:b2:5f:f4:95:10:1e:
1a:55:93:7a:97:90:ce:e9:41:5f:eb:f6:a4:a6:61:9d:1b:19:
63:38:f4:83:ee:a7:cf:c0:c9:a4:53:ed:99:3a:82:9a:49:1d:
de:f1:00:3a:c7:ff:47:6a:c2:ed:91:61:de:7c:8a:7c:6f:65:
74:09:ba:72:ce:04:cd:28:44:3a:f4:cc:b3:92:dd:78:74:40:
ed:ca:76:46:99:0e:3f:a6:a5:b2:8c:50:35:d7:d3:93:f7:d8:
36:09:db:2c:cc:06:84:c1:ed:64:01:b3:5f:72:aa:db:87:b9:
39:32:45:60:b4:00:a8:ee:17:29:0b:12:70:a3:ad:af:90:de:
67:02:c3:84:52:03:df:20:e2:1d:8d:f6:60:d4:77:90:79:da:
f3:23:e1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:47 2026 by rpki-client