This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
File: a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft (raw, json)
Hash identifier: 1f6IhzSXsfNsFiQoQn/gcCO9I5wMtbTaialNnrFV8Qo=
Subject key identifier: 39:E8:64:FD:E5:69:5E:1C:DC:6F:88:E2:F1:AD:FF:CC:AE:5E:24:EE
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial: 0D5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
Manifest number: 0D26
Signing time: Sat 24 Jan 2026 17:44:22 +0000
Manifest this update: Sat 24 Jan 2026 17:44:21 +0000
Manifest next update: Sat 31 Jan 2026 17:44:21 +0000
Files and hashes: 1: a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl (hash: KHcYTIkTsJOLM8vfXELcnGjJRSdTgISloihBgPP0Ysk=)
2: 7617F5408D6C11F0AB7BFE70C4F9AE02.roa (hash: c7Vsr0eRAEmxWhobNGyEno1B5Pvs5ja8tO1BeT/ckVk=)
3: 7545D7688D6C11F0AB7BFE70C4F9AE02.roa (hash: Gso7riR6mhTBetdxhvBcEVx4lP0fazKGiY4D6n5IxPQ=)
4: F8C3F402870A11F0A015612EC4F9AE02.roa (hash: XvrYP38xvdCgdawfCh7HadAKH1aRcApDaLO6IdzBa/w=)
5: 0D036EB680BC11EBAF2A1C0EC4F9AE02.roa (hash: 1TLr5oM7v/qdbXCuWglO9MT2WfClZILhcDQljm7O2lk=)
6: 584733B48D6C11F09980DA5EC4F9AE02.roa (hash: h29koSbtR2J5ejxH0g/g8JKXTU/n2VhgMI8p7KUTTRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3420 (0xd5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Validity
Not Before: Jan 24 17:44:21 2026 GMT
Not After : Jan 31 17:44:21 2026 GMT
Subject: CN=697504f6-88a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:38:c0:2a:ab:ef:e3:98:60:9f:59:3b:58:4b:
90:9a:13:87:07:12:03:2e:d9:c3:9b:f0:90:93:ab:
ba:77:71:89:5e:e9:22:89:31:40:75:bb:69:a8:a4:
05:fb:05:a3:93:6d:ab:15:2b:9e:a8:36:0f:83:37:
4b:eb:b9:ec:2e:bf:aa:cc:42:85:dd:44:b0:e2:72:
77:d2:e2:78:ba:f0:fa:ac:5c:5b:34:e6:c5:63:db:
15:3e:a9:5e:4e:43:38:4d:5f:c7:fe:3e:91:c9:97:
f4:da:fa:dd:27:1a:0a:5e:11:9b:53:36:7c:bf:a2:
2f:c2:f7:64:c6:6b:76:ce:fc:5d:c7:2e:61:c0:93:
e9:71:76:87:ee:09:37:e7:85:d2:ca:27:2b:f2:e1:
d9:7f:9e:19:fb:28:9c:69:ea:ce:53:40:77:9c:d2:
6c:87:ba:2a:10:6c:cd:2a:02:ea:88:b1:53:df:06:
ae:15:4e:f7:d4:51:50:12:b2:62:be:85:d1:df:19:
dc:09:fb:1a:9a:88:d8:35:ff:06:da:0d:36:20:80:
68:d9:fa:9f:d0:89:3b:36:2a:ee:cf:7f:98:b5:26:
cd:c0:41:ab:70:9c:10:42:0e:89:f4:7e:55:76:20:
fe:63:58:a1:76:7d:a8:15:db:59:e3:06:17:51:26:
8c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E8:64:FD:E5:69:5E:1C:DC:6F:88:E2:F1:AD:FF:CC:AE:5E:24:EE
X509v3 Authority Key Identifier:
keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:31:88:1b:fc:1a:be:62:af:4f:18:f0:ae:9d:7c:8f:1d:61:
ac:0e:5e:6a:35:dc:ae:ab:09:2a:30:0e:da:84:22:c6:e7:89:
88:5f:f1:96:37:9c:f7:d7:a9:e5:00:19:3a:e4:9e:7e:c0:85:
f7:61:ba:6e:5a:5f:d1:f9:d6:d5:f1:c2:14:32:f8:41:53:e2:
ef:c2:e4:3a:bd:8e:3a:75:f0:8d:35:7b:7e:5a:1d:29:b7:bb:
e7:9d:86:e8:06:25:76:e2:39:e6:4e:a9:77:73:dd:42:48:92:
b7:cd:99:d9:88:fd:62:1c:82:49:19:4a:0d:80:a6:e7:7f:bd:
4a:43:75:e4:68:55:f6:d7:e3:e3:af:82:0b:84:72:15:e4:b1:
3a:1d:b1:62:18:de:df:e3:15:22:bf:4c:1e:d9:dc:a1:f4:56:
16:ee:e1:7f:39:b9:00:25:7d:8d:c5:ff:1f:c4:29:df:8d:6d:
19:5c:a6:b6:71:ba:da:9a:ee:0e:5c:8c:50:28:c3:a5:93:8b:
4c:63:73:53:0a:af:db:af:8a:7b:fc:ae:2f:9c:1c:67:9a:d5:
a2:28:ba:52:92:a5:78:b3:14:60:63:f7:77:74:f7:f1:80:d4:
33:fc:09:1a:eb:3c:da:77:06:60:86:91:f6:85:61:f5:88:1d:
fb:a3:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:38:16 2026 by rpki-client