This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json)
Hash identifier: k5b4abZsQKNTwelZc7oAGHki4u4y7M5u+vB678hKI7o=
Subject key identifier: 96:A3:D6:EE:B0:A7:E3:04:2F:DB:9D:11:A0:EE:2A:FA:36:3B:93:C3
Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
Manifest number: A4
Signing time: Fri 23 Jan 2026 05:21:44 +0000
Manifest this update: Fri 23 Jan 2026 05:21:44 +0000
Manifest next update: Fri 30 Jan 2026 05:21:44 +0000
Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: SP/D7B1NjGtiYZdPR+8o7uLv/UxVZO5T+6d/IQXKWwo=)
2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: FptmFY6XaETE0B5U8dohhb5+IR8DEmGWZVTlRovACOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 05:21:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Validity
Not Before: Jan 23 05:21:44 2026 GMT
Not After : Jan 30 05:21:44 2026 GMT
Subject: CN=69730568-7f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:45:63:70:f0:a6:be:b4:4b:cb:57:f5:25:
e0:e2:a8:36:a3:2b:95:90:4e:6e:3c:b2:2e:f2:00:
5d:17:a9:ac:20:60:df:63:73:92:d5:74:8c:44:0f:
50:f5:c1:80:db:d4:61:d7:32:69:32:5b:29:fd:bf:
26:09:b4:8e:a4:11:e7:ab:9c:e8:f7:6e:cd:8f:0e:
1d:6e:41:9a:8d:9d:27:b1:56:bb:5f:3f:7b:47:81:
95:86:90:1b:05:b6:ba:e6:42:69:0d:ce:fc:37:a4:
67:2e:1a:7b:1f:04:0b:6c:d1:c5:07:92:f8:a8:f9:
3c:43:a9:f3:37:43:6b:7d:2c:9b:d8:bc:f0:de:8b:
d5:80:89:1b:4d:ff:a4:16:e8:09:67:1f:d3:eb:c3:
0d:18:2d:9b:c4:5c:08:1a:cc:85:bc:a7:62:f4:3c:
39:87:e3:74:51:92:f1:29:be:6f:05:1c:f5:b9:f5:
a2:2c:4e:6c:e8:88:f9:95:54:64:61:ca:40:ba:57:
a2:e0:07:a9:23:ed:a1:09:8d:fe:d0:8e:71:cf:af:
15:9c:a0:d9:8b:3e:90:a6:db:1a:6c:fa:fe:e8:c7:
c8:3d:48:fc:9c:5e:99:9d:a0:da:4c:12:b0:e8:95:
e8:57:08:4b:1f:f6:49:b2:80:d5:6d:6b:5f:88:83:
48:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A3:D6:EE:B0:A7:E3:04:2F:DB:9D:11:A0:EE:2A:FA:36:3B:93:C3
X509v3 Authority Key Identifier:
keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:19:49:b2:d6:01:0f:93:32:ef:f0:d0:51:b7:d6:f2:0c:c3:
fe:36:e5:1c:61:fa:c1:02:3f:37:af:d1:e1:83:35:d9:00:aa:
40:fa:ba:6d:c3:1a:31:f4:c1:10:0f:06:e5:6e:00:fd:bb:d3:
cc:ab:5e:5c:d8:ca:82:de:ac:ec:73:4b:d9:0f:67:99:56:9f:
e0:e2:bf:92:60:9f:60:b1:8f:f2:9e:e8:51:13:bc:3c:2c:75:
cb:fa:b5:f4:0f:b3:a4:b3:e9:7e:b4:4d:61:f1:7c:69:a0:fb:
01:2f:38:0c:8c:ec:ac:17:3d:8e:7d:15:22:33:bb:5d:c6:9e:
2b:a4:b2:5b:7b:21:1f:7d:5a:34:70:b6:f1:8c:81:1e:79:f8:
8c:aa:41:1f:73:82:3e:c2:6f:7f:55:b3:7b:05:ad:83:ee:cf:
da:61:dc:8f:a1:e4:d2:3a:cd:73:3b:6e:83:a6:32:48:41:09:
d4:7e:0c:b8:3d:ee:9b:b8:41:3c:f3:52:f1:44:34:ea:56:a9:
5f:7e:2e:11:e0:60:83:e6:43:0c:f0:86:20:d4:2b:2a:9a:2c:
49:4c:68:c8:4e:8a:cd:5e:25:8e:80:3f:d1:00:dc:ba:b4:39:
9a:f6:c5:d2:64:76:ef:dd:ac:a1:bc:03:8f:c0:27:5f:00:0d:
49:26:c0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:16:48 2026 by rpki-client