This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier: tHC1oDrX58pLvaVuIpWW+MyBs8AlfYs9SPZHweapBeE=
Subject key identifier: 23:5B:FA:CF:57:FA:A2:69:45:9B:3F:6F:8D:59:8D:A8:4D:0D:CB:54
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial: 0331
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number: 0322
Signing time: Sun 25 Jan 2026 00:17:18 +0000
Manifest this update: Sun 25 Jan 2026 00:17:18 +0000
Manifest next update: Sun 01 Feb 2026 00:17:18 +0000
Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: fyaFF5u+EFkOjGmQBEub0Y9s/A0JBb9EAT7FvOEgWwA=)
2: AA314EC8249811EF971CED52C4F9AE02.roa (hash: xP/jJhS+dRDMFII7/oN+e6tmZGRsaM2PF5rzA01lyJ8=)
3: C79B240C249811EFABD23253C4F9AE02.roa (hash: 82ItOlvihDjqVoWpSyFuHxJCD90xjXFw0eTtjvUUFXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
Validity
Not Before: Jan 25 00:17:18 2026 GMT
Not After : Feb 1 00:17:18 2026 GMT
Subject: CN=6975610e-8a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:63:f2:72:0f:0a:80:c4:57:d0:ee:cb:4b:
39:aa:35:30:94:0e:79:9c:05:21:c6:dc:9b:8c:6a:
be:5e:35:91:4e:7c:9c:63:90:68:e5:6a:0d:1d:64:
ee:f5:2f:15:e3:c8:27:71:97:27:2d:a4:6d:9c:7f:
89:dd:76:2e:d7:64:50:fe:ec:48:ac:b0:c7:c9:64:
5f:67:ad:65:c4:e7:cd:fe:95:1e:55:04:53:f8:51:
5e:54:f0:24:1c:3c:55:2b:51:bb:52:d7:7b:ec:77:
c3:4b:96:44:86:43:8d:17:2a:a2:51:23:a9:34:f0:
6b:be:66:6c:fd:77:6e:e9:4c:25:3b:af:29:35:64:
7a:51:8f:77:42:58:01:d4:92:24:30:65:5f:60:2c:
f1:a5:85:69:99:42:e7:7e:07:57:a0:24:38:f7:64:
5d:72:32:94:9d:be:32:fa:e4:ba:de:c5:7d:1b:3c:
4a:e6:80:62:20:34:dc:57:f2:21:29:55:b1:7d:32:
3d:14:67:44:dd:ce:bb:45:2c:50:9b:2e:c9:fd:5a:
f2:8c:ce:35:35:21:aa:d3:f5:87:0e:e0:34:e6:f1:
3e:08:4e:82:ec:c4:7c:71:52:8b:87:00:95:01:b3:
55:47:90:27:89:a5:55:22:2f:48:7b:32:64:b6:4e:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5B:FA:CF:57:FA:A2:69:45:9B:3F:6F:8D:59:8D:A8:4D:0D:CB:54
X509v3 Authority Key Identifier:
keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:89:9e:1c:ea:ca:6b:1f:f2:ea:e6:a6:a7:7b:89:a8:6d:03:
05:84:86:fe:1c:cb:f2:5f:13:57:67:81:75:b0:a0:5f:11:7b:
9e:f2:63:d3:90:8e:fa:d6:20:06:dc:f0:18:34:8e:cd:61:df:
72:3e:86:b9:a5:57:bc:a6:3c:29:2b:44:84:e0:b2:8a:f3:54:
11:41:4d:2c:44:76:35:a3:12:4c:c7:e2:e5:4e:c5:c7:fc:05:
15:8e:4e:36:5b:2e:53:25:71:62:76:02:86:07:4d:68:9a:2c:
9c:6a:e2:64:10:31:f6:60:a1:c7:53:bb:c6:bf:09:60:e5:37:
1e:d2:b4:ff:14:2b:5e:7e:c4:cc:55:cb:e3:d2:27:19:b2:da:
6a:a9:0c:df:30:c2:c1:99:53:d0:8a:2e:e4:d6:22:f8:3b:fe:
1e:bc:9b:ca:54:b8:c5:f0:10:6f:b5:c9:94:96:fe:e1:74:53:
41:78:c2:29:9b:9e:75:83:54:bf:fd:99:e1:c5:f3:bc:0c:56:
2e:22:8c:2d:de:33:ee:63:37:a1:14:22:21:f0:8d:f9:a7:89:
f1:ec:42:0f:3a:0d:cc:28:34:77:88:c3:fb:c7:b1:a2:26:5a:
8d:8b:27:de:f1:37:8a:73:b1:17:8f:df:b1:3f:6c:57:53:a3:
5f:cc:58:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVCNDkxMTAvBgNVBAUTKEY4MzZERDMwQjYwNDI2MzYyMEQwNjFEMTA1ODRDOEYz
MDExNjAwODcwHhcNMjYwMTI1MDAxNzE4WhcNMjYwMjAxMDAxNzE4WjAYMRYwFAYD
VQQDDA02OTc1NjEwZS04YTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuf1j8nIPCoDEV9Duy0s5qjUwlA55nAUhxtybjGq+XjWRTnycY5Bo5WoNHWTu
9S8V48gncZcnLaRtnH+J3XYu12RQ/uxIrLDHyWRfZ61lxOfN/pUeVQRT+FFeVPAk
HDxVK1G7Utd77HfDS5ZEhkONFyqiUSOpNPBrvmZs/Xdu6UwlO68pNWR6UY93QlgB
1JIkMGVfYCzxpYVpmULnfgdXoCQ492RdcjKUnb4y+uS63sV9GzxK5oBiIDTcV/Ih
KVWxfTI9FGdE3c67RSxQmy7J/VryjM41NSGq0/WHDuA05vE+CE6C7MR8cVKLhwCV
AbNVR5AniaVVIi9IezJktk4xFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNb+s9X
+qJpRZs/b41ZjahNDctUMB8GA1UdIwQYMBaAFPg23TC2BCY2INBh0QWEyPMBFgCH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUI0OS81NTMyQjk2MEZG
NUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpqWWcwR0hSQllUSTh3RVdB
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1EYmRNTFlFSmpZZzBHSFJCWVRJOHdFV0FJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RUI0OS81NTMyQjk2MEZGNUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpq
WWcwR0hSQllUSTh3RVdBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQiZ4c6sprH/Lq5qane4mobQMFhIb+HMvyXxNXZ4F1sKBfEXue8mPT
kI761iAG3PAYNI7NYd9yPoa5pVe8pjwpK0SE4LKK81QRQU0sRHY1oxJMx+LlTsXH
/AUVjk42Wy5TJXFidgKGB01omiycauJkEDH2YKHHU7vGvwlg5Tce0rT/FCtefsTM
Vcvj0icZstpqqQzfMMLBmVPQii7k1iL4O/4evJvKVLjF8BBvtcmUlv7hdFNBeMIp
m551g1S//ZnhxfO8DFYuIowt3jPuYzehFCIh8I35p4nx7EIPOg3MKDR3iMP7x7Gi
JlqNiyfe8TeKc7EXj9+xP2xXU6NfzFhW
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:21:05 2026 by rpki-client