This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
File: aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft (raw, json)
Hash identifier: +hJskxdbmvNG1w/CqF0owSRMBmAITsgVESU44GE0JRU=
Subject key identifier: 16:17:35:26:0B:54:9C:A0:86:DD:F1:6E:04:37:49:EF:5D:37:B7:5B
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Certificate issuer: /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial: 0764
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
Manifest number: 075C
Signing time: Sat 24 Jan 2026 20:59:00 +0000
Manifest this update: Sat 24 Jan 2026 20:59:00 +0000
Manifest next update: Sat 31 Jan 2026 20:59:00 +0000
Files and hashes: 1: aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl (hash: Dg91QEVxxUdaq2Z6lkQvht8VtEf22RqlILsMg6ltQzE=)
2: 8F1629524FD411EB9F1A0673C4F9AE02.roa (hash: 0+1qqFR2dQAbs8bJZhkVHckF6TnHu8C+B8873r1KDqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:58:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1892 (0x764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Validity
Not Before: Jan 24 20:59:00 2026 GMT
Not After : Jan 31 20:59:00 2026 GMT
Subject: CN=69753294-9aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:08:b0:11:b6:9a:31:02:38:e8:5f:94:28:
54:12:7b:89:18:6f:18:b4:4d:c1:0f:a8:e7:f9:38:
a4:cc:e7:e3:9c:91:c5:5b:9f:03:51:b3:f7:dc:58:
43:d4:2c:66:7a:52:1c:d5:c1:c8:18:3b:61:ff:05:
6e:d1:f9:c5:ee:31:15:ab:b3:fb:48:00:38:24:a3:
11:0a:81:47:b2:f4:ea:b7:2e:30:91:3f:97:16:24:
fd:4f:dd:3e:78:d3:4d:ac:a7:08:9a:bd:5d:26:63:
04:47:94:0e:8a:bb:c8:f8:78:8a:3f:10:c5:72:44:
bf:bd:45:03:7d:34:03:a1:16:60:8f:4c:75:a8:19:
f6:2f:45:4f:d3:32:44:45:7d:43:38:5a:40:d7:c0:
f7:9c:b3:58:41:a7:22:4c:2e:c6:e9:b4:6b:9b:b7:
bf:84:53:f3:e4:ce:5e:19:cc:81:1a:82:b6:a9:93:
e9:92:de:02:f4:f6:a5:c9:f5:9e:c5:25:55:0a:e4:
cc:2f:a9:4a:0b:97:78:da:42:b3:98:e3:7b:6d:f6:
5d:ac:34:72:44:a0:14:61:bf:44:c0:29:6e:3d:ed:
07:69:01:f3:15:c4:c2:ae:01:04:d1:72:76:d2:f3:
70:8f:05:e8:0e:23:c9:e7:72:6a:9c:2b:2e:12:9f:
a8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:17:35:26:0B:54:9C:A0:86:DD:F1:6E:04:37:49:EF:5D:37:B7:5B
X509v3 Authority Key Identifier:
keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:af:cd:46:bd:b1:93:21:76:4b:5a:3c:54:fc:fb:91:d8:e1:
ac:20:bf:5b:6a:3c:25:b6:dc:71:5f:37:98:91:71:30:a9:28:
2e:2d:ee:8a:2f:c8:24:89:4a:09:3f:e7:d4:93:e5:ec:24:b0:
e8:eb:dc:d2:03:b7:54:e2:97:d4:0d:1c:02:bd:bb:53:f5:52:
03:e0:58:7a:42:27:95:47:93:b2:15:5a:71:d6:5e:03:97:57:
ea:98:9d:87:8e:98:d1:54:8a:08:fb:ac:03:0a:22:c9:fa:ea:
26:6c:1d:66:42:ca:c9:63:bd:8a:98:40:1f:47:a1:9a:b8:63:
eb:b8:4c:0d:cb:44:17:6d:33:96:3d:5c:d7:d1:59:71:93:f0:
5d:04:90:a9:4e:5d:87:d4:2a:ad:2f:c1:b1:54:17:a6:2b:46:
b4:95:46:e5:4e:f1:74:d6:bb:c7:75:f0:f5:ef:6f:0d:6f:85:
e4:80:86:08:de:93:03:b7:f2:4c:1b:fb:3d:93:0d:53:da:0e:
45:f2:f7:f4:7f:d8:ec:a2:d8:2c:04:da:bc:0c:dc:dc:f1:12:
f6:7f:af:86:3c:07:eb:3c:a8:ee:e9:15:ba:18:c6:32:ff:2f:
ac:0e:6c:7d:b5:c5:a8:c2:a9:e6:09:47:bf:41:28:24:a9:ed:
18:ce:47:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M2RDkxMTAvBgNVBAUTKDY5NjlEMTUwQUQwMzQ4MjA4MUJCMUJEN0MxM0JFNUYw
MERDNTNBMzgwHhcNMjYwMTI0MjA1OTAwWhcNMjYwMTMxMjA1OTAwWjAYMRYwFAYD
VQQDDA02OTc1MzI5NC05YWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnCEIsBG2mjECOOhflChUEnuJGG8YtE3BD6jn+TikzOfjnJHFW58DUbP33FhD
1CxmelIc1cHIGDth/wVu0fnF7jEVq7P7SAA4JKMRCoFHsvTqty4wkT+XFiT9T90+
eNNNrKcImr1dJmMER5QOirvI+HiKPxDFckS/vUUDfTQDoRZgj0x1qBn2L0VP0zJE
RX1DOFpA18D3nLNYQaciTC7G6bRrm7e/hFPz5M5eGcyBGoK2qZPpkt4C9PalyfWe
xSVVCuTML6lKC5d42kKzmON7bfZdrDRyRKAUYb9EwCluPe0HaQHzFcTCrgEE0XJ2
0vNwjwXoDiPJ53JqnCsuEp+o+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYXNSYL
VJyght3xbgQ3Se9dN7dbMB8GA1UdIwQYMBaAFGlp0VCtA0gggbsb18E75fANxTo4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzZEOS82QTVGMTMyNDRG
RDExMUVCQUZCMTY3NkJDNEY5QUUwMi9hV25SVUswRFNDQ0J1eHZYd1R2bDhBM0ZP
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FXblJVSzBEU0NDQnV4dlh3VHZsOEEzRk9qZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzZEOS82QTVGMTMyNDRGRDExMUVCQUZCMTY3NkJDNEY5QUUwMi9hV25SVUswRFND
Q0J1eHZYd1R2bDhBM0ZPamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUr81GvbGTIXZLWjxU/PuR2OGsIL9bajwlttxxXzeYkXEwqSguLe6K
L8gkiUoJP+fUk+XsJLDo69zSA7dU4pfUDRwCvbtT9VID4Fh6QieVR5OyFVpx1l4D
l1fqmJ2HjpjRVIoI+6wDCiLJ+uombB1mQsrJY72KmEAfR6GauGPruEwNy0QXbTOW
PVzX0Vlxk/BdBJCpTl2H1CqtL8GxVBemK0a0lUblTvF01rvHdfD1728Nb4XkgIYI
3pMDt/JMG/s9kw1T2g5F8vf0f9jsotgsBNq8DNzc8RL2f6+GPAfrPKju6RW6GMYy
/y+sDmx9tcWowqnmCUe/QSgkqe0Yzkcd
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:38 2026 by rpki-client