This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
File: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json)
Hash identifier: EsYTBlPC8vIJFGAJUKy5w6ympxBl8eAStkEgKrqSAbs=
Subject key identifier: 56:F0:3B:5C:68:0C:04:32:A5:76:23:1D:B0:E9:D1:D5:BD:7E:C7:7B
Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E
Certificate issuer: /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
Certificate serial: 06AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
Manifest number: 06AB
Signing time: Sat 24 Jan 2026 21:37:09 +0000
Manifest this update: Sat 24 Jan 2026 21:37:09 +0000
Manifest next update: Sat 31 Jan 2026 21:37:09 +0000
Files and hashes: 1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: yA+VE8yoO9Eut3aN4rYRSazuJxTLMiAvcA6keGlovf8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl
rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1707 (0x6ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
Validity
Not Before: Jan 24 21:37:09 2026 GMT
Not After : Jan 31 21:37:09 2026 GMT
Subject: CN=69753b85-1961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:1c:0b:2d:32:23:8c:d4:cc:81:41:d9:77:
19:0f:8f:9a:66:f5:92:12:fc:f5:93:50:18:07:63:
6b:3e:5b:21:a7:1e:4f:61:a9:a1:23:b9:34:3e:c0:
44:dc:d3:9b:34:d3:12:95:4f:d0:51:0c:ba:2b:02:
49:bb:0e:bd:f8:92:47:b7:76:ee:f8:87:64:39:f3:
1f:43:48:5e:f0:75:10:ac:e5:03:f3:de:e3:c1:fe:
49:5e:ed:ca:da:02:ab:b6:df:4f:ad:4f:9d:d5:9c:
25:9f:fa:fe:88:91:7c:51:e7:04:8e:a4:32:55:cf:
26:5f:ec:eb:23:ad:30:d4:3a:2d:e5:44:6e:4d:66:
13:62:8e:7a:09:f9:73:de:d4:70:f7:3d:ce:80:e5:
2b:1c:bd:50:d2:9d:1d:05:c9:04:b8:89:ba:40:e8:
76:b6:b6:c0:38:b7:29:3e:7b:29:80:56:a9:ba:a7:
4e:3d:c3:42:df:df:50:fe:db:5e:74:69:0d:e7:dd:
b1:68:f1:57:1c:2a:d9:e2:4b:db:be:b2:24:a3:6a:
c3:6b:3b:d5:9f:99:f1:29:8c:be:b7:cf:94:4d:8d:
a9:9c:73:97:71:43:b7:67:4d:8e:9e:fc:20:1f:a9:
d4:28:ad:60:b5:96:73:46:86:f8:48:44:5b:0b:53:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F0:3B:5C:68:0C:04:32:A5:76:23:1D:B0:E9:D1:D5:BD:7E:C7:7B
X509v3 Authority Key Identifier:
keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e2:47:01:7a:54:82:06:44:3b:70:b2:af:87:3b:15:67:70:
83:82:df:49:23:fc:d3:f2:2f:cf:73:51:73:bc:b4:d7:bf:de:
c9:67:73:97:fc:15:ad:dd:7d:af:07:0d:e7:80:29:19:86:3f:
77:7e:02:43:93:fb:37:ca:9e:d8:b5:1b:27:19:0e:6a:fb:85:
1d:30:87:88:25:ae:5c:39:5c:c9:98:43:2e:c6:d0:c2:83:da:
59:2a:1e:b9:9c:c4:81:34:f5:94:dc:e6:37:81:15:da:b1:83:
f1:5e:8b:3c:76:e7:1d:01:e7:be:a5:10:c5:52:4b:9b:58:a1:
d6:b2:96:86:bc:c5:40:d5:82:f7:d9:a4:3a:ec:06:bc:2e:d8:
b6:d4:63:7e:ff:69:2a:d2:0a:16:b8:11:16:b4:2d:43:f9:8b:
2a:ae:31:5d:b4:1c:62:56:58:0e:9b:51:0f:97:03:d8:9d:5e:
76:05:58:c7:9b:10:02:7b:4d:8a:9a:4e:7b:5e:12:22:44:31:
ec:81:f5:3d:65:04:3b:90:d4:15:d5:1e:7f:fc:89:bd:7d:2a:
25:c6:02:b4:b6:51:83:d6:e5:b9:54:bc:38:dd:72:4a:a1:29:
70:bf:ac:c8:b0:f0:b0:2c:5a:3e:ee:3a:0c:7d:82:3e:24:77:
e2:09:da:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM4N0YxMTAvBgNVBAUTKDQ4MEJDRDlFRUE4OEYwQTZEQTE3REY5ODQzQjlCQTZG
NTlDMjdFOUUwHhcNMjYwMTI0MjEzNzA5WhcNMjYwMTMxMjEzNzA5WjAYMRYwFAYD
VQQDDA02OTc1M2I4NS0xOTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1+UcCy0yI4zUzIFB2XcZD4+aZvWSEvz1k1AYB2NrPlshpx5PYamhI7k0PsBE
3NObNNMSlU/QUQy6KwJJuw69+JJHt3bu+IdkOfMfQ0he8HUQrOUD897jwf5JXu3K
2gKrtt9PrU+d1Zwln/r+iJF8UecEjqQyVc8mX+zrI60w1Dot5URuTWYTYo56Cflz
3tRw9z3OgOUrHL1Q0p0dBckEuIm6QOh2trbAOLcpPnspgFapuqdOPcNC399Q/tte
dGkN592xaPFXHCrZ4kvbvrIko2rDazvVn5nxKYy+t8+UTY2pnHOXcUO3Z02Onvwg
H6nUKK1gtZZzRob4SERbC1M1TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbwO1xo
DAQypXYjHbDp0dW9fsd7MB8GA1UdIwQYMBaAFEgLzZ7qiPCm2hffmEO5um9Zwn6e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9BQkEyMTk2Qzkz
NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThLYmFGOS1ZUTdtNmIxbkNm
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1NBdk5udXFJOEtiYUY5LVlRN202YjFuQ2ZwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mzg3Ri9BQkEyMTk2QzkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThL
YmFGOS1ZUTdtNmIxbkNmcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDF4kcBelSCBkQ7cLKvhzsVZ3CDgt9JI/zT8i/Pc1FzvLTXv97JZ3OX
/BWt3X2vBw3ngCkZhj93fgJDk/s3yp7YtRsnGQ5q+4UdMIeIJa5cOVzJmEMuxtDC
g9pZKh65nMSBNPWU3OY3gRXasYPxXos8ducdAee+pRDFUkubWKHWspaGvMVA1YL3
2aQ67Aa8Lti21GN+/2kq0goWuBEWtC1D+YsqrjFdtBxiVlgOm1EPlwPYnV52BVjH
mxACe02Kmk57XhIiRDHsgfU9ZQQ7kNQV1R5//Im9fSolxgK0tlGD1uW5VLw43XJK
oSlwv6zIsPCwLFo+7joMfYI+JHfiCdp8
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:09:32 2026 by rpki-client