This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json)
Hash identifier: EmuR8ssfJgzURL8RHUqopxWoTPeLImM7p8kEj1huTyI=
Subject key identifier: B3:C9:BF:3A:DC:8D:ED:CF:31:41:42:F4:E2:7B:10:97:EF:64:3A:96
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial: 0EFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
Manifest number: 0EDF
Signing time: Sat 10 Jan 2026 17:19:33 +0000
Manifest this update: Sat 10 Jan 2026 17:19:32 +0000
Manifest next update: Sat 17 Jan 2026 17:19:32 +0000
Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: hX6U0czu3F/oihI+hpFADt5vENZvaSYPShYcKshlCio=)
2: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: SEuSI2XPVxN+1pVxedn+P+yPZW6RvN2NRh14bu8L37Y=)
3: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: m0l23vJryclykCD48Z3CE8U9M7wFbCoJly5IlJCZMlg=)
4: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: 1zS8XWzZTz7+tGBFQYN1Yj55+aHf93rbvK5YUu69PHI=)
5: 2569C82ADC2311F08AE4CDD5626F56BC.roa (hash: cFmpqvcpbDQj9zHBaykzPYMMRfhObvnJUo0Dw8veR50=)
6: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: rsXfvz54a2T+jOGss3629AVS3vLaxkP1937oobR11UI=)
7: 247099D084C611F09EBC052BC4F9AE02.roa (hash: LjL6siy8mS8KnL6NQqX66YEFFKmRPoJ1dR18D6pEQ04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 17:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3839 (0xeff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Validity
Not Before: Jan 10 17:19:32 2026 GMT
Not After : Jan 17 17:19:32 2026 GMT
Subject: CN=69628a24-69b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:e8:d7:9d:db:41:ef:93:8a:64:49:4e:5c:
d8:49:7a:f6:5d:39:aa:42:60:01:ca:c1:9a:e6:4d:
22:42:b6:b6:34:56:6c:34:89:ad:f3:f0:29:27:1a:
f3:97:d6:9b:7d:a7:3a:09:d1:c9:22:de:17:9c:0c:
30:13:37:29:5b:ed:44:01:dd:a9:54:15:79:05:ef:
36:38:ca:0e:f5:96:69:99:0b:23:6f:40:85:f5:bc:
18:b6:d2:d2:8f:45:cb:c1:97:57:41:b2:2f:3e:e7:
c1:bf:97:11:a2:b7:47:e1:11:a3:9c:4a:eb:13:4a:
81:16:9b:83:ab:a5:12:7d:05:13:23:66:17:92:11:
0c:69:ed:e1:46:ab:f9:f6:00:0a:b7:d9:85:35:88:
33:fc:45:aa:fb:d1:07:be:0d:bd:41:fa:d4:86:bd:
86:ba:8e:62:53:6e:9a:c5:a4:33:ef:64:1a:d8:2e:
92:d4:c1:60:89:42:a2:a6:ed:89:f8:ae:6d:b5:bc:
b0:95:6b:7a:90:3f:8f:0f:48:fc:88:72:92:8a:12:
d5:55:37:99:7e:2b:ac:64:cf:04:96:e8:5a:b3:b9:
37:c1:f4:05:14:c5:e3:2e:b2:3e:dc:ed:45:ad:86:
20:e0:82:00:2a:81:6e:e8:e9:fb:f2:55:ec:64:d3:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:BF:3A:DC:8D:ED:CF:31:41:42:F4:E2:7B:10:97:EF:64:3A:96
X509v3 Authority Key Identifier:
keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8a:92:7e:5b:0d:35:f2:3f:bb:be:75:1d:eb:ad:85:d5:20:
a9:35:f7:6b:96:41:fb:9c:ba:05:87:92:44:94:ad:66:63:4e:
47:d9:76:35:1a:1e:2c:84:e8:6f:e2:a7:87:b0:79:37:b7:f2:
29:a8:56:af:9e:9c:a5:91:b2:05:2d:e3:6f:cc:17:c9:3e:44:
33:7a:06:10:5c:e0:59:fb:14:3c:8e:97:31:32:f9:8c:b8:85:
98:ce:22:5d:49:21:e2:a3:72:43:64:5c:eb:fd:af:6c:8d:59:
9d:bd:27:98:a3:9a:3a:5e:a4:dd:9b:61:f5:d2:29:9c:33:4a:
59:3e:f2:a1:a4:89:d4:08:80:0e:96:df:df:79:de:69:03:dc:
a7:cc:4d:a4:d2:fb:04:98:83:d9:49:91:18:97:83:cb:65:c9:
e9:fe:76:9f:71:21:d1:b5:15:9f:96:54:6f:cf:27:08:97:5c:
ac:0a:b8:92:cc:a6:d5:de:50:23:65:f9:1d:4b:17:64:b4:8b:
90:75:86:f4:19:15:ad:86:3c:d5:5d:85:58:aa:c6:f6:9f:87:
41:80:91:a8:f5:53:23:bd:dc:44:43:a0:93:1d:7b:7f:47:80:
0e:5d:ae:39:30:82:2a:28:5c:9b:52:20:af:b8:ce:7a:46:96:
de:ea:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:11:58 2026 by rpki-client