This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json)
Hash identifier: +/96MgY2vKm5yBocfnA4x0pY5chBsBpCCTGSuc35u2o=
Subject key identifier: 0C:78:84:8C:2F:AB:B5:C7:49:CB:15:8C:FF:4E:F4:74:D6:BD:70:44
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial: 10CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
Manifest number: 1092
Signing time: Sat 24 Jan 2026 17:04:03 +0000
Manifest this update: Sat 24 Jan 2026 17:04:03 +0000
Manifest next update: Sat 31 Jan 2026 17:04:03 +0000
Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: zwPin0Zn4Rvyqt1OYwRxOHvoj8ds6cWh2OB4AH3UV7s=)
2: 3848F884F23311EE97946A35C4F9AE02.roa (hash: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q=)
3: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: bMzkx/wFNepXXNSOPh8Vc6hh0XPBuOSFoU3g8UlRrqg=)
4: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg=)
5: 5E46267A46B111E98B793856C4F9AE02.roa (hash: ggdry6EXThW8/Iqa+JecYkvu6rQ2Ed52IzTRWBsgoGk=)
6: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 9HyQ/57eR9eFUhHAz1W5cHWihQdkbA5M8sMmhzOnJTs=)
7: 6007188446B111E98B793856C4F9AE02.roa (hash: YvD8e8mnmsaHRmkbd47odePbEhpcv8nyM6tzBDa3QPk=)
8: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4300 (0x10cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Validity
Not Before: Jan 24 17:04:03 2026 GMT
Not After : Jan 31 17:04:03 2026 GMT
Subject: CN=6974fb83-c0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:7f:b6:6c:36:15:f6:c6:51:aa:40:1d:d3:
00:36:24:50:68:af:92:17:9a:e9:32:58:bc:5f:81:
78:9b:6c:1a:a8:f2:2d:53:48:3d:0a:a4:60:39:92:
9c:35:46:4e:e9:2d:41:e1:1c:bd:30:49:d6:9d:c6:
8d:af:fb:a2:b0:76:3f:99:6d:5a:08:cb:d8:d3:bf:
67:8a:70:2b:cd:33:55:e4:86:0a:1e:d3:66:1d:ca:
74:2a:b6:d3:cf:f4:a5:8a:67:66:aa:85:9f:01:fc:
0c:2e:6b:14:84:79:5f:65:3c:a7:38:47:fd:c8:1b:
99:dd:b9:7f:4e:cc:41:f0:6e:3c:34:7a:d4:72:f2:
03:5a:9e:83:91:62:a7:b2:a5:0c:f7:4d:84:55:cc:
46:d7:fd:66:28:ef:df:58:06:cf:16:a1:70:3f:d5:
cf:a2:80:27:ab:bf:5c:f8:fd:12:81:1d:e2:d5:a8:
e2:2c:0b:d0:19:46:92:e5:79:ec:c3:38:f4:64:5d:
b5:84:92:26:8b:48:0b:f3:76:51:b5:2b:2a:63:f7:
f4:38:ee:6f:17:be:a0:8d:87:fd:49:22:fe:31:d5:
8c:39:36:cc:9d:50:df:ba:85:42:2c:75:78:60:bc:
6d:1d:76:3e:62:68:4a:93:f7:1b:e3:81:6a:e0:b0:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:78:84:8C:2F:AB:B5:C7:49:CB:15:8C:FF:4E:F4:74:D6:BD:70:44
X509v3 Authority Key Identifier:
keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:61:15:01:91:e9:18:80:b5:f2:07:be:a5:30:67:75:3c:4d:
ba:83:1d:15:96:6d:37:bf:18:af:7e:f4:19:0e:2a:b8:fc:51:
8c:79:cc:2c:71:75:bd:a3:4d:82:27:df:3f:de:1c:17:47:48:
3a:57:ae:7f:ce:8f:8c:8e:1a:c3:c8:ee:cd:86:e5:ed:73:10:
69:49:21:fc:37:a1:13:9f:1b:9a:a2:7e:54:0f:fb:c3:3a:28:
9f:db:ac:0f:77:fe:e6:63:b4:c5:0b:30:e9:4d:8e:7c:85:02:
5f:77:45:e7:fa:ed:25:47:82:0c:5e:f0:78:f9:2c:81:94:85:
76:34:0d:9a:a9:b7:b9:af:66:b3:9d:0a:15:14:74:9f:90:ef:
f4:59:2a:8f:76:16:2b:bd:c9:64:84:f3:53:f2:2a:94:6d:3e:
37:90:d5:99:a1:1d:93:ba:72:ce:05:54:4c:14:0d:8a:32:05:
a3:8d:97:4c:f3:4e:d0:0a:a1:d7:8b:c8:7a:55:04:77:6f:92:
76:a3:23:78:c8:7d:52:47:1e:4b:d2:f5:ca:d2:bf:3b:f4:e0:
92:8a:83:69:fe:30:ea:ae:cc:f2:3d:d1:db:78:15:93:93:04:
ad:b8:08:60:3e:c3:de:80:0c:e7:e3:a8:05:c0:ee:11:b0:5a:
72:2f:bc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:02:44 2026 by rpki-client