This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json)
Hash identifier: jXscPM2HzmQs8KBRIc2OOXtG7L2gOwwDstot0Kddfnc=
Subject key identifier: 68:66:83:3E:30:3D:9C:C7:4A:D5:4B:80:42:CF:A6:DD:00:F7:49:C7
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial: 0D34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
Manifest number: 0D16
Signing time: Sat 24 Jan 2026 17:44:15 +0000
Manifest this update: Sat 24 Jan 2026 17:44:14 +0000
Manifest next update: Sat 31 Jan 2026 17:44:14 +0000
Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: S2yjo4WhJvHoDmMK/GZOaQ0BuFrsQX85pCBpi7qwIWU=)
2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: bcWV9If/HkIEw6hnBH3pLaQkTOmCSNPL+NkOOV2t9w0=)
3: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: 9K94XURicN1zdV3E+GS8wi/6Xv8R6a1xqP7qJN2QSyU=)
4: 4AD97410632C11EE96048122C4F9AE02.roa (hash: Kha4B3O3qamR+l9aTTTF0PytPbYw8JUKGu9zz6Pcn9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3380 (0xd34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Validity
Not Before: Jan 24 17:44:14 2026 GMT
Not After : Jan 31 17:44:14 2026 GMT
Subject: CN=697504ef-7ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:b3:bb:5f:31:28:bb:59:43:37:c7:ca:be:
e6:7c:56:83:93:35:ce:d2:95:17:e9:cf:9d:4f:be:
6b:ee:26:a3:ee:b7:a5:e1:6d:d9:9a:ee:e3:8e:cb:
41:ad:83:06:98:60:ee:4a:f7:2a:05:29:e6:a5:d4:
25:9c:1c:c3:ed:f4:5c:3a:87:5b:ec:ff:dd:43:e1:
99:0f:f5:f7:42:7d:28:4e:1d:ea:66:be:be:e7:66:
e6:e8:0c:98:93:52:93:bd:a6:87:ec:9f:93:59:b4:
b4:72:58:1b:7c:d1:8e:0a:42:18:06:c3:55:cd:e5:
45:dd:70:f7:99:76:5c:8f:5f:be:1e:0b:19:a8:b7:
ce:a6:af:57:54:c3:28:2f:3b:38:52:cf:78:dc:95:
d1:0c:26:0c:7d:66:5b:2b:30:1f:01:38:10:89:d9:
b1:df:78:40:dd:30:5a:43:98:f7:ff:59:8e:7a:6c:
e7:41:59:50:53:db:9b:f9:b3:da:93:08:bd:e6:70:
1a:6b:4a:2f:bc:d9:20:7e:e0:96:39:3f:43:33:14:
1e:dd:9a:61:ac:bd:78:5d:0f:70:59:24:36:b5:6f:
f2:8b:8c:59:5c:bd:02:ca:6a:05:52:bd:cc:73:99:
fe:39:1d:8c:0b:09:9f:96:87:13:e7:e3:77:e1:37:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:66:83:3E:30:3D:9C:C7:4A:D5:4B:80:42:CF:A6:DD:00:F7:49:C7
X509v3 Authority Key Identifier:
keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:9e:e0:1e:85:ac:04:11:32:67:4d:2a:45:34:93:2c:ae:aa:
02:fd:8b:42:6c:17:d5:b1:b0:2b:ce:4b:9b:2c:e6:38:aa:10:
d7:99:99:c1:e6:0a:7d:d2:1b:50:50:04:09:d6:b8:89:af:36:
e6:ad:18:f9:bf:ef:54:e3:4c:af:4c:2d:18:37:0b:06:fa:82:
6f:13:f8:27:1e:22:3d:88:67:0c:f5:9a:a0:c0:5f:89:5d:90:
55:7a:92:df:b1:42:ef:ff:30:4e:5c:5f:ba:92:d9:bd:79:97:
ee:ee:fe:06:e9:1e:35:f2:f4:cd:48:27:96:4e:be:8d:81:83:
d2:a0:51:fc:04:d9:49:63:f7:50:61:56:15:4a:3b:5e:0d:15:
be:36:46:8c:6e:9e:26:83:1f:1b:64:97:61:d2:87:6a:ed:51:
f5:02:e4:5f:f6:78:9a:75:01:53:78:85:fd:e6:28:54:c1:3e:
c3:d5:16:01:09:fd:c5:5d:aa:ee:4e:41:f9:28:ae:75:29:08:
98:cd:69:db:73:67:eb:fc:9d:e1:2b:c2:89:43:88:cd:89:86:
8c:84:43:ca:90:36:41:cc:af:2b:e3:8d:b8:77:47:60:38:55:
e3:61:b7:06:e2:1c:22:26:e8:dd:58:51:1d:2f:84:1a:e3:51:
14:26:7c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:02:30 2026 by rpki-client