This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json)
Hash identifier: 5sU8hcHtsPuYXIA8ae/HjbMEX/bbsQkRa8GoSAUzG0A=
Subject key identifier: 4F:97:47:71:D6:83:33:8F:79:F4:63:09:7C:9F:0B:17:18:A5:95:0F
Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE
Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE
Certificate serial: 10BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
Manifest number: 10A9
Signing time: Sat 24 Jan 2026 17:03:46 +0000
Manifest this update: Sat 24 Jan 2026 17:03:46 +0000
Manifest next update: Sat 31 Jan 2026 17:03:46 +0000
Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: zhThtJ7MQzrpy94A7tpYqSMNAqNZzktnkBWibI1INXQ=)
2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: f+ssEZLOjLj3KCxNpmhhNkb36lPb0XOjNkCdaat32A0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl
rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4287 (0x10bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE
Validity
Not Before: Jan 24 17:03:46 2026 GMT
Not After : Jan 31 17:03:46 2026 GMT
Subject: CN=6974fb72-8b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:b0:15:33:82:75:9a:0f:08:c1:72:30:12:
40:8b:38:4e:a2:09:49:d6:86:3d:2e:48:2f:8e:67:
27:4a:a0:6d:6d:71:68:2b:fb:7c:50:64:1a:fd:19:
a1:81:26:ff:c8:09:0e:71:85:bd:0d:ff:f4:17:6a:
11:5b:17:a6:84:1b:1a:f5:34:1b:be:e4:30:77:43:
67:58:cf:1d:cb:c4:3b:57:7e:a1:34:6a:b0:40:f0:
81:47:7b:08:63:a9:ef:e7:d7:58:fa:fd:ff:98:23:
fd:71:56:44:0e:d6:90:d7:6c:a0:7f:63:7a:03:c3:
b5:de:0c:da:a8:fe:81:c3:05:7a:4a:17:a1:f7:96:
88:7e:5e:e0:18:dd:f5:39:2d:3e:9e:f3:4f:b4:ac:
36:e6:13:a2:df:8f:52:5a:4c:48:1d:11:14:4c:2e:
6a:97:75:53:03:a9:93:0b:72:78:95:00:09:84:37:
90:bf:86:84:b2:f3:ed:be:08:23:be:6f:b5:70:6b:
23:da:54:b0:70:23:6c:0c:8e:85:be:59:da:22:7c:
a6:af:88:16:f8:5d:aa:4f:32:cd:85:8c:1f:23:2a:
87:5e:92:e7:1c:04:c8:23:a4:0c:6b:1d:bb:c9:93:
20:8a:97:ed:89:c8:b5:37:c4:b8:66:18:a3:2b:2a:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:97:47:71:D6:83:33:8F:79:F4:63:09:7C:9F:0B:17:18:A5:95:0F
X509v3 Authority Key Identifier:
keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:79:26:74:91:67:0b:aa:bc:15:b7:62:82:8e:61:2e:bc:91:
b7:87:5c:7d:2e:7a:71:8a:ca:9a:39:1c:77:8b:57:3a:80:29:
e1:a7:eb:08:7c:c7:c9:93:d9:c5:e5:40:28:b6:dc:f9:a2:74:
0c:4d:3a:e3:b3:07:28:9e:33:6e:5e:37:f6:fe:69:8f:9f:fa:
62:68:28:28:71:24:70:6b:50:6e:ad:26:4e:ef:3e:70:09:86:
dc:ba:71:0f:5d:76:1e:01:da:fc:68:ea:20:77:33:57:6d:86:
f1:88:63:69:57:2d:c2:4c:6b:f1:00:bf:4e:72:0b:bb:47:47:
2e:17:0a:4e:01:de:81:b9:26:56:8a:88:23:9d:ee:c3:48:cf:
84:cb:51:85:8f:9c:a4:58:b8:53:2b:87:6a:af:cb:b2:56:41:
15:e3:40:66:52:42:97:09:e9:13:bc:ce:1b:c3:bb:22:cf:e4:
79:dc:1d:88:0a:72:21:d3:9a:1b:ec:f1:aa:09:3a:0e:61:2b:
16:5b:fe:6f:4a:b1:de:d4:cf:93:5b:a9:49:86:2f:16:dc:be:
5e:27:68:43:fa:14:7c:46:7e:da:bf:ac:f3:7a:26:19:dc:32:
e8:28:b5:d7:5a:5a:c9:40:ca:f4:bc:79:e0:59:d1:6f:73:fb:
73:f5:1f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:52:29 2026 by rpki-client