This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json)
Hash identifier: LbOPsC7eXN/fXGfNnFFDAg5B0xX/+WtOTv6sGP6OPFA=
Subject key identifier: BC:19:CB:68:A2:33:F8:B5:FF:96:38:F2:EA:D8:87:01:5D:26:F2:9D
Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
Manifest number: 0199
Signing time: Thu 01 Jan 2026 03:04:32 +0000
Manifest this update: Thu 01 Jan 2026 03:04:32 +0000
Manifest next update: Thu 08 Jan 2026 03:04:32 +0000
Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: Cif3tgY/j+jPsQa9xyGXi5mPb+0mvS7pMvujHzbIdks=)
2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: pB1reIfyHdxeUfXs+919CuRxWhrieVaoumr+2A452aM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl
rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Jan 2026 03:04:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
Validity
Not Before: Jan 1 03:04:32 2026 GMT
Not After : Jan 8 03:04:32 2026 GMT
Subject: CN=6955e440-84ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:2f:a0:7e:d0:0a:25:d3:49:c5:b7:63:6f:
45:62:e1:73:1b:1b:89:af:8e:af:5b:2d:96:19:01:
80:f8:ea:4d:77:ca:3b:38:0e:cb:16:cf:8f:ce:3c:
d6:11:29:95:67:16:4e:7f:07:ff:d8:c9:93:3d:de:
5c:44:c8:59:a5:f5:ad:1a:18:b3:27:d5:06:bb:35:
c6:25:16:31:62:99:2b:d5:bc:33:aa:80:61:23:58:
00:6b:dc:1f:f9:51:da:6a:55:0a:dd:29:9d:6f:cc:
1c:d1:58:fb:94:c3:84:c3:22:c0:77:d2:04:c1:b2:
b1:5e:11:18:2d:e5:9e:67:1d:95:22:82:68:ce:88:
ff:62:bd:93:ec:05:26:99:f1:12:5e:07:dd:f3:4c:
d6:23:bb:48:f7:12:49:21:48:03:0d:56:00:18:76:
a0:af:da:6d:84:24:3b:9c:5f:66:4c:0a:4d:97:55:
7d:6d:3b:41:3f:63:66:3b:20:36:cc:81:0b:5b:85:
55:f3:39:28:5d:29:9c:ee:73:94:7b:61:28:8b:3d:
cd:25:f2:60:70:1a:44:dd:b8:86:a4:06:17:cb:95:
c0:a2:ed:fa:f2:ba:ae:11:c7:13:54:5d:a0:77:60:
46:27:af:64:89:83:42:7e:d2:e4:29:b2:ea:92:60:
ad:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:19:CB:68:A2:33:F8:B5:FF:96:38:F2:EA:D8:87:01:5D:26:F2:9D
X509v3 Authority Key Identifier:
keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:52:4f:a2:0d:5b:56:49:fa:8c:cb:80:91:79:71:d8:6a:6d:
72:b9:47:5b:04:be:21:03:c9:2c:e9:d7:09:bc:4e:e3:87:ab:
6c:1e:a5:0b:00:8f:4c:ea:a5:51:29:ec:df:23:4a:cd:b5:4a:
5a:a3:eb:7d:b5:de:42:a8:eb:05:67:32:d1:73:19:af:eb:18:
f5:a1:b5:f8:c8:0e:69:ec:b9:36:60:73:2e:dc:4b:89:02:c8:
2f:0b:2b:36:22:05:93:14:95:c9:bf:d4:fc:e7:f5:1a:ef:0f:
0a:a7:32:28:3c:84:4e:2a:68:58:8d:ed:7e:d5:e5:65:b8:63:
ae:60:4b:7a:5e:4e:c7:17:71:b9:d5:2e:b4:81:a4:1b:b7:90:
3f:85:81:33:57:e8:83:70:9a:bf:b9:25:e5:b4:b1:9c:6d:46:
d7:6d:9d:4c:87:2d:0b:57:a2:69:2c:1f:8e:a6:44:42:78:b8:
cf:21:3a:f8:39:d1:7d:7f:fb:19:47:1a:98:5d:b5:69:87:47:
73:31:f0:e9:d5:19:1b:03:2e:99:bc:a7:10:dd:a3:d6:88:d8:
5f:f4:6c:f1:34:7a:25:7c:9d:04:ce:3e:58:69:a9:3a:1b:38:
1e:a0:fd:9f:da:4b:1d:0d:e7:f0:ea:4a:f2:02:77:24:e3:88:
ea:cb:0a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 15:57:01 2026 by rpki-client