This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json)
Hash identifier: 7H3YhqPRAka50ByrAjo4dFDiATr99WSfPCPGKO/Pd+E=
Subject key identifier: 4B:85:2B:5B:5C:11:99:45:CD:3B:3D:48:D9:ED:52:F5:90:F7:F8:36
Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Certificate serial: 0BBB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
Manifest number: 0BA4
Signing time: Sat 24 Jan 2026 18:33:49 +0000
Manifest this update: Sat 24 Jan 2026 18:33:49 +0000
Manifest next update: Sat 31 Jan 2026 18:33:49 +0000
Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: IZX66+jqLgpPizUX7lX7lg6KQ9R1Ym2URr62IfrmWDY=)
2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: 1JlSj0jibLQBYUZDl8FfRdFm1NJZVGdp1slha+X5ouk=)
3: E324E2F6F40611EAA5B2244FC4F9AE02.roa (hash: JjlHcRfhosfD6kjrFJUxOquQczoFwZ+SbHdvTDfS9h8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3003 (0xbbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Validity
Not Before: Jan 24 18:33:49 2026 GMT
Not After : Jan 31 18:33:49 2026 GMT
Subject: CN=6975108d-c4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:8a:d1:6e:42:77:cc:03:1c:95:2c:30:82:
3b:b7:bb:7b:20:dd:2f:a5:4d:f6:a6:e9:bd:d2:0a:
2d:57:d5:13:9e:6e:bd:2e:df:c7:57:00:8b:95:82:
a8:c2:41:bd:aa:7e:16:36:88:49:09:37:9b:41:f6:
0a:09:f0:be:83:44:2e:a5:9f:4f:89:28:06:96:73:
b5:53:a6:85:db:0e:48:4d:b8:ec:6d:e4:e8:48:b3:
f9:5b:3b:97:d6:ad:ed:a1:5a:32:f4:93:fd:d8:2a:
11:d6:5f:0e:e8:5c:9c:ca:0f:0e:55:07:4b:a9:6f:
fa:f8:80:e1:80:05:88:67:a1:8d:7c:1f:07:f8:7b:
8e:85:8f:06:fa:94:31:fb:06:e3:a4:6e:f3:7b:31:
70:2a:dc:53:83:68:10:40:9a:61:6a:f1:d9:bd:a9:
45:a3:4f:7b:1a:61:88:48:ae:94:c7:84:ea:ab:1b:
68:a6:ef:c0:b8:e4:db:27:ab:ba:ac:e7:e2:5d:36:
d3:23:6e:65:08:36:2f:7a:07:4b:3b:17:d9:09:21:
6e:07:7c:39:3c:22:16:8d:60:e3:86:67:84:fd:84:
26:e5:88:50:3a:68:64:41:1d:aa:4c:78:38:7e:8b:
93:01:73:02:fe:a4:37:84:35:35:40:3f:5d:20:b5:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:85:2B:5B:5C:11:99:45:CD:3B:3D:48:D9:ED:52:F5:90:F7:F8:36
X509v3 Authority Key Identifier:
keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e0:1b:33:ad:1a:bd:f0:c4:e8:00:7a:f0:86:31:fb:91:73:
77:a9:06:18:21:fa:6a:e8:c1:b9:ac:38:02:e1:8d:81:6d:3b:
b9:11:22:8d:5b:b4:6c:b9:94:34:70:cb:3e:5b:32:e7:bc:ea:
77:52:19:87:8d:67:5d:3e:ed:32:26:1e:2b:4e:3e:48:bf:87:
93:22:80:d5:c8:9e:f3:db:07:74:f2:98:3b:7b:88:9b:2d:91:
a0:54:46:c4:7a:70:ab:21:f0:27:c2:6d:33:72:bc:98:e6:84:
1b:2b:a4:e0:0f:de:a7:d4:17:95:30:45:29:1f:c5:37:6e:51:
f2:bd:e7:31:26:35:d2:0b:56:59:41:14:ff:96:8e:36:0e:af:
34:a9:44:77:94:e2:30:00:7d:6f:7d:eb:9a:a2:5f:06:d6:d2:
01:2f:45:5a:36:92:26:40:55:e8:e2:ff:03:d2:8f:76:e3:34:
f1:b2:03:6f:e0:cd:7c:b6:ce:6c:2d:15:ac:32:48:cf:03:21:
69:d1:cc:48:56:c0:1f:f7:c5:65:01:6d:57:04:db:bd:41:3e:
a3:46:06:09:cf:23:03:1a:61:47:a7:01:55:2d:70:bb:90:e3:
d9:61:8d:b4:3f:fb:11:4b:e9:b7:07:37:5f:b5:7f:62:c9:ec:
6c:da:c0:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM4OEQxMTAvBgNVBAUTKDMyNjQ0MzY0NzlBNTBFRDQwQ0NGRDJCNzA0RTYwMjQ5
NjA4RTQzQTgwHhcNMjYwMTI0MTgzMzQ5WhcNMjYwMTMxMTgzMzQ5WjAYMRYwFAYD
VQQDDA02OTc1MTA4ZC1jNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmuOK0W5Cd8wDHJUsMII7t7t7IN0vpU32pum90gotV9UTnm69Lt/HVwCLlYKo
wkG9qn4WNohJCTebQfYKCfC+g0QupZ9PiSgGlnO1U6aF2w5ITbjsbeToSLP5WzuX
1q3toVoy9JP92CoR1l8O6Fycyg8OVQdLqW/6+IDhgAWIZ6GNfB8H+HuOhY8G+pQx
+wbjpG7zezFwKtxTg2gQQJphavHZvalFo097GmGISK6Ux4Tqqxtopu/AuOTbJ6u6
rOfiXTbTI25lCDYvegdLOxfZCSFuB3w5PCIWjWDjhmeE/YQm5YhQOmhkQR2qTHg4
fouTAXMC/qQ3hDU1QD9dILV8XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuFK1tc
EZlFzTs9SNntUvWQ9/g2MB8GA1UdIwQYMBaAFDJkQ2R5pQ7UDM/StwTmAklgjkOo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzg4RC8zOEFCNTkxRTNE
QzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0UU16OUszQk9ZQ1NXQ09R
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01tUkRaSG1sRHRRTXo5SzNCT1lDU1dDT1E2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Qzg4RC8zOEFCNTkxRTNEQzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0
UU16OUszQk9ZQ1NXQ09RNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCO4BszrRq98MToAHrwhjH7kXN3qQYYIfpq6MG5rDgC4Y2BbTu5ESKN
W7RsuZQ0cMs+WzLnvOp3UhmHjWddPu0yJh4rTj5Iv4eTIoDVyJ7z2wd08pg7e4ib
LZGgVEbEenCrIfAnwm0zcryY5oQbK6TgD96n1BeVMEUpH8U3blHyvecxJjXSC1ZZ
QRT/lo42Dq80qUR3lOIwAH1vfeuaol8G1tIBL0VaNpImQFXo4v8D0o924zTxsgNv
4M18ts5sLRWsMkjPAyFp0cxIVsAf98VlAW1XBNu9QT6jRgYJzyMDGmFHpwFVLXC7
kOPZYY20P/sRS+m3BzdftX9iyexs2sDc
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:48:55 2026 by rpki-client