This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier: BnbSbC8y1L2mSRAofn1f8MXYM/5DGQm24B5UW3I1UzM=
Subject key identifier: BC:28:B7:08:64:53:89:84:12:8B:77:1B:1A:7D:B3:7D:64:A6:D9:84
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial: 3FDF1A39C1F33E9149A02373573D5AC0DECD0047
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number: 0883
Signing time: Sat 24 Jan 2026 13:09:14 +0000
Manifest this update: Sat 24 Jan 2026 13:04:14 +0000
Manifest next update: Sun 25 Jan 2026 13:55:14 +0000
Files and hashes: 1: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=)
2: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: WgaDe/PC8yTVDXs3hxVqEk52WOxosSB14wILU9oqrx8=)
3: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=)
4: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=)
5: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=)
6: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=)
7: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=)
8: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=)
9: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=)
10: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=)
11: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 13:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:df:1a:39:c1:f3:3e:91:49:a0:23:73:57:3d:5a:c0:de:cd:00:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Validity
Not Before: Jan 24 13:04:14 2026 GMT
Not After : Jan 25 13:55:14 2026 GMT
Subject: CN=BC28B70864538984128B771B1A7DB37D64A6D984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:80:cb:a8:2f:e0:42:92:3a:fc:af:50:c4:
ba:b8:53:bf:b4:f9:ae:b6:3a:56:cf:52:cb:be:af:
73:3e:6c:29:3b:3e:98:05:1a:da:b6:5b:14:84:32:
20:91:e2:9a:cd:a3:79:85:b5:de:88:fb:41:3c:9b:
a2:3d:0a:ae:e9:0c:43:36:64:ad:3b:76:47:5d:d4:
c3:0e:69:0d:34:95:1e:be:12:5e:71:e3:3e:62:0d:
a9:da:3f:1c:98:68:8b:48:7b:3e:1a:3a:e2:e2:ae:
1c:74:93:ef:6f:22:4f:7d:2d:23:85:87:f1:21:04:
2c:d3:2d:b1:de:64:56:65:22:45:f9:70:78:67:d0:
06:88:46:f7:ca:aa:48:30:96:3f:cb:4e:2b:c1:78:
00:cb:65:c7:f4:d1:71:f2:97:0c:69:13:8e:51:f0:
22:12:61:17:8f:a0:03:22:21:38:30:9e:3c:47:84:
14:a7:60:0f:fe:6f:21:17:59:cf:9c:34:3c:05:6f:
90:5d:ed:f8:7e:ce:85:3b:08:ff:8f:f7:58:06:69:
1f:aa:75:97:10:01:05:83:48:41:74:65:b0:72:5f:
65:d4:0d:1b:c4:3c:61:d9:60:bd:59:c9:b5:28:c6:
6e:73:41:5c:4d:dc:dd:37:2c:1d:d7:fa:cf:20:df:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:28:B7:08:64:53:89:84:12:8B:77:1B:1A:7D:B3:7D:64:A6:D9:84
X509v3 Authority Key Identifier:
keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cf:1d:f6:47:d5:d2:f9:de:70:62:1d:33:bd:0d:72:c1:64:
8b:37:da:22:b8:40:87:af:1f:54:bd:0d:19:16:c6:c5:88:55:
ab:06:ba:7e:61:d7:03:e5:23:84:74:6a:97:4c:a2:cc:37:9f:
c0:76:de:55:61:76:c5:c5:d3:e4:a1:73:81:97:1e:81:bc:9d:
67:dd:07:fc:52:28:af:e7:eb:1f:a2:8d:65:14:64:1a:69:3d:
f6:55:0d:0a:98:a1:0a:6d:6f:8a:f6:1c:4f:a2:ec:da:8d:08:
2a:5a:06:a2:4b:a9:88:7d:7d:3d:e0:05:60:57:04:49:df:1a:
b0:23:74:0f:cf:3e:2e:b8:0d:5c:f9:43:00:9d:4c:eb:ae:bd:
29:f9:7b:da:9e:2d:b3:ab:8f:d6:c8:d8:58:92:2d:e3:28:3e:
35:c6:18:b7:e5:ac:10:4d:11:08:19:77:9f:6d:98:af:77:0b:
f4:9f:1f:54:13:be:43:43:5e:21:54:d0:da:76:42:0f:24:f4:
25:6e:95:2a:45:ae:10:e8:24:05:d2:9b:ab:34:b7:f2:3b:50:
c0:11:43:e0:a1:85:34:96:ee:ac:9f:d4:23:a0:09:67:65:3f:
d3:e7:04:a1:f4:da:39:52:2e:3f:03:12:92:cc:92:08:21:05:
9f:5b:0e:78
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUP98aOcHzPpFJoCNzVz1awN7NAEcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2
MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI2MDEyNDEzMDQxNFoX
DTI2MDEyNTEzNTUxNFowMzExMC8GA1UEAxMoQkMyOEI3MDg2NDUzODk4NDEyOEI3
NzFCMUE3REIzN0Q2NEE2RDk4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMF7gMuoL+BCkjr8r1DEurhTv7T5rrY6Vs9Sy76vcz5sKTs+mAUa2rZbFIQy
IJHims2jeYW13oj7QTyboj0KrukMQzZkrTt2R13Uww5pDTSVHr4SXnHjPmINqdo/
HJhoi0h7Pho64uKuHHST728iT30tI4WH8SEELNMtsd5kVmUiRflweGfQBohG98qq
SDCWP8tOK8F4AMtlx/TRcfKXDGkTjlHwIhJhF4+gAyIhODCePEeEFKdgD/5vIRdZ
z5w0PAVvkF3t+H7OhTsI/4/3WAZpH6p1lxABBYNIQXRlsHJfZdQNG8Q8YdlgvVnJ
tSjGbnNBXE3c3TcsHdf6zyDfcDsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBS8KLcI
ZFOJhBKLdxsafbN9ZKbZhDAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE
NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU
aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5
ODAwMDAvMC85ODlEMzJENUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEy
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAJM8d9kfV0vnecGIdM70NcsFkizfaIrhAh68fVL0NGRbGxYhV
qwa6fmHXA+UjhHRql0yizDefwHbeVWF2xcXT5KFzgZcegbydZ90H/FIor+frH6KN
ZRRkGmk99lUNCpihCm1vivYcT6Ls2o0IKloGokupiH19PeAFYFcESd8asCN0D88+
LrgNXPlDAJ1M6669Kfl72p4ts6uP1sjYWJIt4yg+NcYYt+WsEE0RCBl3n22Yr3cL
9J8fVBO+Q0NeIVTQ2nZCDyT0JW6VKkWuEOgkBdKbqzS38jtQwBFD4KGFNJburJ/U
I6AJZ2U/0+cEofTaOVIuPwMSksySCCEFn1sOeA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:53 2026 by rpki-client