This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier: u9PksQsSapSCOiMek2o1YrYiqU0tZEgRY2pm05zaeLA=
Subject key identifier: 37:5F:A0:CB:85:D5:BC:D7:8F:E8:C4:A3:9F:E7:CF:22:3A:56:7F:FD
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 02E94DFEE89E8414652505E819AA2DC0442043FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number: 06E4
Signing time: Sat 24 Jan 2026 19:43:56 +0000
Manifest this update: Sat 24 Jan 2026 19:38:56 +0000
Manifest next update: Sun 25 Jan 2026 23:02:56 +0000
Files and hashes: 1: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=)
2: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=)
3: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: Y8US0Ocdq6iuACcuu6blfuO/mWF61f4U7kbk1PWrIBw=)
4: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=)
5: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: poH1yA8b7Egfp78w+sbhVvq54qo33QPTPY9z6336YRM=)
6: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=)
7: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: aiTwY7exOIWYXIKbSyXz+xb7jVL186qs815q9Rt7CIg=)
8: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 23:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e9:4d:fe:e8:9e:84:14:65:25:05:e8:19:aa:2d:c0:44:20:43:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: Jan 24 19:38:56 2026 GMT
Not After : Jan 25 23:02:56 2026 GMT
Subject: CN=375FA0CB85D5BCD78FE8C4A39FE7CF223A567FFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:d0:5c:1c:a9:60:e8:17:28:af:e6:1a:99:
f4:2a:cd:7c:05:65:28:6c:36:43:cf:dc:f7:08:e0:
15:fd:20:01:6b:ea:b9:60:69:55:4d:41:e5:83:0c:
40:b9:3f:1d:4c:c9:8d:db:c7:31:d7:94:30:2d:cc:
3c:e4:8b:49:f0:a7:e0:c2:e6:47:e3:68:cf:56:21:
38:0d:b1:a2:6a:dd:30:98:62:26:9b:d9:85:38:f6:
22:0b:72:75:a5:7c:7f:cd:c1:a3:3a:30:10:13:57:
6e:e9:a0:2c:d4:36:bd:70:c4:1f:4a:07:f1:a9:1a:
f7:71:a5:3c:b9:a6:ac:1c:a6:c6:97:91:4b:5e:4f:
9b:da:36:10:c3:d0:c0:66:00:55:c8:96:22:ef:84:
83:2a:5f:53:04:3d:1a:68:b3:67:48:87:f4:58:42:
0a:53:bf:9b:2e:39:26:cd:68:ac:24:1b:fa:54:8b:
24:9f:3a:10:24:f9:d1:8a:4f:74:a0:45:2b:20:01:
8b:44:d8:37:c1:38:75:50:7b:37:23:65:95:9f:c3:
ac:c9:1e:15:81:ab:00:38:53:a4:d1:5c:08:03:ce:
7c:f4:c0:5c:98:84:ac:03:ec:bb:75:8f:07:6b:1a:
1e:ff:68:34:9d:a5:37:0d:2c:34:69:af:0c:68:9a:
c5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5F:A0:CB:85:D5:BC:D7:8F:E8:C4:A3:9F:E7:CF:22:3A:56:7F:FD
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:67:54:19:87:95:62:10:36:dd:13:7e:44:7a:73:8e:c2:ee:
64:23:df:81:48:8b:31:53:08:8d:87:fb:fc:c6:ff:33:08:4a:
13:62:8d:b4:f8:66:c8:d7:e7:6b:a3:bb:e7:1f:74:ae:ef:3f:
8c:1b:3c:0b:c3:b2:c6:37:f6:88:e9:7a:65:ee:b0:fa:93:fb:
2e:c3:69:50:a0:10:86:85:43:18:67:13:96:af:83:7f:a7:3f:
ef:ee:4e:b2:45:a0:92:e0:0e:e7:f7:90:47:65:d9:c8:4c:a7:
e1:b2:a6:b5:ce:28:98:03:06:df:df:e4:3e:5b:0b:91:db:1e:
f3:71:50:37:06:d2:95:69:22:04:93:8f:0d:11:2c:6c:90:e2:
98:22:e6:68:e7:24:7e:21:5c:dc:8b:5c:50:ea:de:aa:d2:f3:
ae:23:95:79:fd:61:3f:40:0f:a4:bf:9e:e6:19:2d:00:d7:7d:
11:b7:90:2a:9d:31:d7:d4:e6:26:22:46:28:38:89:7c:24:1a:
f1:60:1f:e0:50:5d:29:c8:5a:c9:22:27:67:2b:bd:ad:4b:44:
4a:c3:da:34:06:2a:c8:55:38:fa:56:2e:08:ee:c9:29:53:4c:
e9:29:f2:11:52:16:7d:e0:b1:c0:22:30:9d:a8:d5:07:0e:ee:
09:22:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:06:37 2026 by rpki-client