This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
File: aSE1YIaDdV6U2OylfYsLNY7OFxg.mft (raw, json)
Hash identifier: mWlIy8gH1pZ+o+aSBPt23AvNpjr/slAa18fIaUHw+WI=
Subject key identifier: F1:F0:6C:58:65:22:04:42:98:E0:41:E4:E3:A7:87:63:F5:9C:FA:53
Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
Certificate issuer: /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Certificate serial: 03D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
Manifest number: 03AF
Signing time: Sat 24 Jan 2026 23:59:08 +0000
Manifest this update: Sat 24 Jan 2026 23:59:07 +0000
Manifest next update: Sat 31 Jan 2026 23:59:07 +0000
Files and hashes: 1: aSE1YIaDdV6U2OylfYsLNY7OFxg.crl (hash: CYeVrlXD4Xce2LcrIzsMYU3SDAI288HvVB5tiaOvu80=)
2: EFEEF8165BB211EE88BB1945C4F9AE02.roa (hash: pBp+3YEZO1rLrx0bvICmu2Gq4WoxGLfmXIpKccpgGw8=)
3: 593105685BB711EE8E69584CC4F9AE02.roa (hash: 6K1WvAW+XHVvFl9NKw/47c7C8mqXiUtIq7r2hsM/JHg=)
4: D0D44F9A7A7311EF9B70B061C4F9AE02.roa (hash: rOMU6+JJyASa3UMEbMc1nVoiFLnAmgt++mEA6n5GZvo=)
5: 3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa (hash: U81ppJdJPa/NwEizA2XDkKKg4D0+UWmO8vP3Sd1xBj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979 (0x3d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Validity
Not Before: Jan 24 23:59:07 2026 GMT
Not After : Jan 31 23:59:07 2026 GMT
Subject: CN=69755ccc-d6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c2:32:0b:f7:14:81:cd:1b:42:73:d6:ce:ea:
9a:91:09:e2:57:c3:0d:81:d3:c9:d2:bd:78:ab:17:
82:b2:d0:6a:a5:14:2e:92:cd:37:84:19:19:84:1d:
37:3f:36:b5:87:5e:d1:d0:b7:0d:06:ca:89:ab:c9:
3e:52:e4:7a:70:d3:7a:0a:51:64:a3:19:4c:5c:9b:
24:f5:1f:ef:5d:c0:bd:a6:63:dd:2e:72:26:06:6c:
2b:d1:97:b7:c7:06:0d:5c:c2:e2:87:f2:0a:67:57:
9b:89:d1:97:5c:66:f1:9c:95:ef:8b:10:2b:f8:19:
ad:a4:23:cf:48:d4:91:18:45:a3:27:16:0b:b5:a4:
3d:10:0d:a9:84:02:a7:f3:40:ab:bc:b6:4c:6b:84:
31:3a:c4:72:41:d9:e7:8f:a3:53:07:1a:44:7b:62:
f6:1c:a9:dd:96:6c:87:ef:ed:5d:c5:94:1b:25:5e:
b5:a1:9b:40:4c:95:f7:9c:7d:d2:d1:2b:4b:65:96:
22:80:85:c8:ff:d5:8e:88:2d:61:46:b9:5b:33:0f:
09:f8:4e:50:c3:3b:97:ca:5b:d6:bc:92:02:e3:68:
b9:e9:c3:24:a8:bc:11:66:84:d1:d1:90:78:02:84:
bb:19:68:14:ed:f8:23:e7:9d:6d:98:03:c4:32:4c:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F0:6C:58:65:22:04:42:98:E0:41:E4:E3:A7:87:63:F5:9C:FA:53
X509v3 Authority Key Identifier:
keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:92:56:58:8a:92:89:ba:8c:ab:ed:fb:03:e5:fe:c3:2f:62:
62:dd:d1:1a:6a:be:d5:f2:fa:ae:8e:1b:36:1f:81:c3:2c:ee:
f7:0e:f1:c5:28:2e:b5:63:17:13:39:25:72:2e:66:09:fa:c2:
eb:e2:c0:5f:08:af:41:53:5e:f3:96:a1:bc:95:a4:4c:8e:0a:
22:b2:36:c2:07:85:51:cf:22:29:94:28:7a:7e:ac:b0:d7:ee:
73:e5:c8:c2:aa:9f:1b:c0:eb:59:dc:90:e9:c6:b3:8e:76:93:
df:a9:ac:8e:0a:e8:31:0f:29:94:c5:0e:e0:58:e5:a5:53:de:
20:dd:fb:cf:5a:9a:94:b2:c8:e5:df:c8:7a:96:57:dc:2c:0b:
69:19:da:1a:46:a7:76:bd:4a:b7:06:16:5e:c3:db:de:0c:1e:
c8:66:26:ab:ad:f7:03:89:27:0d:31:f4:15:cb:1d:45:5a:26:
c3:b1:48:78:84:bb:f0:03:64:ed:51:93:a2:2d:00:26:4e:56:
86:6e:1c:81:69:47:c1:c5:66:9a:da:8a:ef:5f:e0:29:1f:99:
0a:5b:d0:d9:f3:ca:a7:16:71:12:ac:f4:54:71:3b:bf:80:c1:
08:97:0e:30:dc:b6:ec:d6:06:ac:62:18:a9:63:32:a8:c9:ba:
b5:5e:15:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg5OTYxMTAvBgNVBAUTKDY5MjEzNTYwODY4Mzc1NUU5NEQ4RUNBNTdEOEIwQjM1
OEVDRTE3MTgwHhcNMjYwMTI0MjM1OTA3WhcNMjYwMTMxMjM1OTA3WjAYMRYwFAYD
VQQDDA02OTc1NWNjYy1kNmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9MIyC/cUgc0bQnPWzuqakQniV8MNgdPJ0r14qxeCstBqpRQuks03hBkZhB03
Pza1h17R0LcNBsqJq8k+UuR6cNN6ClFkoxlMXJsk9R/vXcC9pmPdLnImBmwr0Ze3
xwYNXMLih/IKZ1ebidGXXGbxnJXvixAr+BmtpCPPSNSRGEWjJxYLtaQ9EA2phAKn
80CrvLZMa4QxOsRyQdnnj6NTBxpEe2L2HKndlmyH7+1dxZQbJV61oZtATJX3nH3S
0StLZZYigIXI/9WOiC1hRrlbMw8J+E5QwzuXylvWvJIC42i56cMkqLwRZoTR0ZB4
AoS7GWgU7fgj551tmAPEMkwMOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHwbFhl
IgRCmOBB5OOnh2P1nPpTMB8GA1UdIwQYMBaAFGkhNWCGg3VelNjspX2LCzWOzhcY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODk5Ni82NjAzMEY1RUQw
NjAxMUVDQkE0MEZDODNDNEY5QUUwMi9hU0UxWUlhRGRWNlUyT3lsZllzTE5ZN09G
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FTRTFZSWFEZFY2VTJPeWxmWXNMTlk3T0Z4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODk5Ni82NjAzMEY1RUQwNjAxMUVDQkE0MEZDODNDNEY5QUUwMi9hU0UxWUlhRGRW
NlUyT3lsZllzTE5ZN09GeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPklZYipKJuoyr7fsD5f7DL2Ji3dEaar7V8vqujhs2H4HDLO73DvHF
KC61YxcTOSVyLmYJ+sLr4sBfCK9BU17zlqG8laRMjgoisjbCB4VRzyIplCh6fqyw
1+5z5cjCqp8bwOtZ3JDpxrOOdpPfqayOCugxDymUxQ7gWOWlU94g3fvPWpqUssjl
38h6llfcLAtpGdoaRqd2vUq3BhZew9veDB7IZiarrfcDiScNMfQVyx1FWibDsUh4
hLvwA2TtUZOiLQAmTlaGbhyBaUfBxWaa2orvX+ApH5kKW9DZ88qnFnESrPRUcTu/
gMEIlw4w3Lbs1gasYhipYzKoybq1XhX7
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:08 2026 by rpki-client