This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
File: 99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json)
Hash identifier: e61xxo4ovJzCAu/qvBJ2FglfBFI4Hc9eb9BG91VfZEw=
Subject key identifier: 25:69:3B:30:D1:EA:A2:03:D1:11:51:DE:04:81:07:B4:B3:3B:BD:9E
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial: 1B1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
Manifest number: 1AD1
Signing time: Sat 24 Jan 2026 16:06:20 +0000
Manifest this update: Sat 24 Jan 2026 16:06:19 +0000
Manifest next update: Sat 31 Jan 2026 16:06:19 +0000
Files and hashes: 1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: UnE6oaiO/lvrQI8rklLA9jnZCSP7+pTeyhG0fclndRg=)
2: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: p7tQRESvOucR4loUarfHpuL5VMHiMFu4353xIOkSzpw=)
3: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: janciRMHjU97zB3lXitJwIl9Ika5JfzU+v8Mkow8p3Q=)
4: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: ZY9UVEPOCB1tx7LWMX0JPtFEK9gl6SqjcejUUwF9APo=)
5: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: H1ZnHxZixXVbHo7aB0OBCDDL/HvZe6bvZhxCcCw4jYQ=)
6: F5257E60FD4111ED947CD631C4F9AE02.roa (hash: e4tQVidUhYeVOQueW5SrNgjm3m0qmH9C2+LHfapMlI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6940 (0x1b1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Validity
Not Before: Jan 24 16:06:19 2026 GMT
Not After : Jan 31 16:06:19 2026 GMT
Subject: CN=6974edfc-71fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:1e:d5:7f:b7:4f:89:91:ab:07:39:62:05:
7a:de:7f:35:3a:d3:f3:82:b2:98:18:b7:c1:26:7d:
8c:4e:44:c8:84:77:59:29:c4:af:6a:ee:28:71:3f:
92:ee:5b:05:82:ef:77:b6:83:ac:9b:4a:5b:76:db:
07:e1:1f:1a:5e:2b:63:1c:ee:cf:01:7a:1d:8d:bc:
f6:97:c3:d2:90:47:68:80:04:54:d6:26:52:81:1c:
56:50:f5:79:92:8d:34:90:c6:5b:bf:67:fc:be:40:
d0:f4:94:eb:64:35:1f:f6:fb:22:6f:4d:31:cf:cd:
6e:4b:3a:38:b6:72:90:78:3c:d3:74:6c:e5:4b:ec:
dd:dd:f4:7d:ad:a8:bb:b7:6d:71:68:cf:bc:aa:07:
d6:94:f2:36:48:a2:d4:69:88:8f:7b:64:62:12:8d:
17:b5:61:09:51:e4:30:f4:cd:e9:73:8c:e4:12:ec:
56:8f:b6:91:cf:1c:a9:84:a8:3d:0a:ee:96:da:b3:
ab:c4:ec:ab:17:5c:27:29:52:33:92:ea:59:7d:e8:
dd:5d:a2:9f:de:57:75:2c:b6:f1:b1:f0:06:49:db:
00:02:1c:7f:3d:38:e0:bc:db:6a:ed:fb:49:05:53:
91:09:2b:d0:c3:51:78:1c:62:22:fc:3b:56:b8:da:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:69:3B:30:D1:EA:A2:03:D1:11:51:DE:04:81:07:B4:B3:3B:BD:9E
X509v3 Authority Key Identifier:
keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:44:5d:8e:64:4c:3e:7a:e7:67:5a:9e:fc:04:eb:c6:cd:95:
cc:a2:41:22:6b:f2:ef:cd:d7:6e:20:d5:64:f3:4f:5a:bb:ed:
90:7c:e4:8f:45:8d:17:cb:ee:fa:89:86:4c:bc:10:53:8c:c6:
17:73:ee:73:4c:0b:9f:9c:12:d4:98:bf:7e:5f:9b:5c:32:db:
27:f9:e8:bb:bf:74:b5:5f:19:f7:19:15:ea:a9:97:09:2f:50:
2f:80:c0:67:b8:fc:2e:95:16:91:0e:e7:8c:f5:7c:7d:9c:81:
46:95:16:84:5d:24:7b:88:dc:23:90:d2:f7:1f:e4:63:06:9f:
ba:5e:50:63:93:4f:3c:10:1f:8f:a6:d9:5c:86:15:82:c2:e6:
94:60:86:dd:85:c2:4b:59:bd:ab:b3:7b:c2:44:66:97:bb:08:
bf:76:bc:10:83:f8:fa:15:e5:46:8c:e8:2c:8b:02:c7:30:c8:
94:3f:f6:b4:5a:d7:bc:4c:3e:8b:78:7a:5c:e1:dd:a0:30:98:
90:67:a7:d3:46:eb:8a:c8:b9:29:fd:c6:15:03:c3:37:af:a1:
27:3a:c2:f5:b3:f4:80:54:23:86:e7:71:91:0e:8b:fa:d2:63:
c6:9e:c6:6a:5d:4e:3f:a9:5b:f4:0c:90:d2:84:2b:ce:33:7b:
ff:c6:f2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:31 2026 by rpki-client