This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json)
Hash identifier: 5UXkbvxOPer/uy5GU8YrFmr8E2OMvZ5QM1G5SOEGF/M=
Subject key identifier: 4F:06:F6:90:14:B1:21:C1:98:92:70:E6:CC:3A:E4:FB:12:1E:32:85
Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
Manifest number: 016A
Signing time: Fri 23 Jan 2026 03:20:41 +0000
Manifest this update: Fri 23 Jan 2026 03:20:41 +0000
Manifest next update: Fri 30 Jan 2026 03:20:41 +0000
Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: jYfKgVNicqknmmdogigyGZJ/duD7E53STED+vY67tsQ=)
2: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Zgo+bSd3ddxUsWa4WgDo/fUl+UPnYadDGveXRl2dsm4=)
3: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 1JT4JL5zieWvYxgXcbCI6LK5Unc1DnkiTfLB/8ABEcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl
rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 03:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Validity
Not Before: Jan 23 03:20:41 2026 GMT
Not After : Jan 30 03:20:41 2026 GMT
Subject: CN=6972e909-9bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:84:8f:5a:a2:38:06:0f:eb:d2:26:ce:d6:
8b:7b:4c:16:3f:23:01:3f:55:46:b5:c0:4c:57:58:
30:c2:7e:79:7a:96:14:30:39:ac:39:92:1b:b5:3f:
93:8f:a2:35:76:f1:46:37:3a:26:9d:76:8c:40:bf:
d8:ea:64:d5:88:5d:4c:64:6a:36:04:82:a4:4a:55:
f6:9c:5f:50:34:7e:10:f5:2e:53:86:4e:9c:64:68:
f5:3e:e3:9c:9e:7e:ca:a8:36:42:eb:c0:62:c2:8d:
22:bd:d4:8a:65:07:3e:ee:3c:8a:da:31:8f:36:ec:
8e:b4:04:df:1e:9b:c1:25:88:4a:a4:cd:03:bd:5f:
c0:39:1a:2b:0c:b0:3b:c6:57:f5:9c:3b:c8:72:d1:
4a:66:8f:22:29:69:53:68:44:8c:90:55:2a:a3:8d:
9f:c3:79:14:88:c1:49:3c:e5:8f:be:1e:24:80:5c:
24:f5:2a:c8:01:38:d7:80:13:f8:15:5c:ea:56:11:
7d:fa:6d:e8:3c:d5:20:e3:e9:77:c0:fa:dc:1c:d6:
2f:dd:55:06:32:1a:44:89:16:0b:43:2b:02:a5:89:
3c:ec:30:e6:1f:18:8d:f7:a4:04:72:ce:c1:3f:30:
a9:96:07:5a:04:fb:85:95:66:2f:0e:c2:29:45:49:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:06:F6:90:14:B1:21:C1:98:92:70:E6:CC:3A:E4:FB:12:1E:32:85
X509v3 Authority Key Identifier:
keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:a8:33:8d:a9:78:71:9b:20:3f:fd:55:bc:67:48:5c:68:91:
ad:77:29:b5:a9:dd:71:b5:d1:30:99:9d:9a:22:e1:2d:40:27:
95:df:7d:71:e0:e6:ff:91:63:ee:09:69:e8:d8:03:93:22:c9:
d2:47:27:a6:dd:e1:51:63:bb:49:79:21:2d:a4:e8:5c:22:f6:
f7:68:a3:7d:05:ed:7c:90:34:fb:d8:8c:6c:fd:0d:75:ba:33:
fd:a2:dc:17:75:09:d6:5f:8b:45:8b:25:82:00:15:80:d1:16:
ab:12:c4:b6:15:82:70:19:e1:a4:26:a1:34:da:d6:42:43:3f:
a9:fc:c1:9c:0f:e4:34:cf:8b:d6:6c:8d:9e:39:84:a3:62:10:
49:aa:47:b8:82:b7:39:b4:86:51:65:31:24:b4:64:77:88:44:
22:78:d4:60:6b:8b:11:90:e7:46:4b:35:3b:1c:a1:a2:d2:86:
c7:0b:0d:bb:06:d2:e8:87:e1:2f:ec:07:3e:38:dd:85:65:e8:
cf:f3:52:2f:fe:4e:38:8e:64:86:6e:20:29:dc:93:c7:84:d1:
5d:90:41:74:02:ed:4f:34:b3:54:ff:35:a5:16:7a:0a:95:03:
69:8a:80:18:97:e1:f8:6a:b2:0b:ea:27:d0:a1:50:2f:4f:08:
1d:8e:cd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:39:28 2026 by rpki-client