This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json)
Hash identifier: 1ZAE1lrOpWuvHGKJPeVDHwu0C8dsOnxrndCPm77Dhw4=
Subject key identifier: 18:47:9D:DC:EC:94:61:83:B4:21:EE:D6:D1:9E:17:0D:22:82:0A:DA
Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
Certificate serial: 169F
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
Manifest number: 1695
Signing time: Sat 10 Jan 2026 16:26:47 +0000
Manifest this update: Sat 10 Jan 2026 16:26:47 +0000
Manifest next update: Sat 17 Jan 2026 16:26:47 +0000
Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: IrgHY2EULTSJ5Qdt9Jj5OAMu3hv3vfcOvvof16C0OII=)
2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: LPGhf2+lZ/tfy7iMoJQ9mcHsSA792NuIJHPh9NLe0yI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl
rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 16:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5791 (0x169f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
Validity
Not Before: Jan 10 16:26:47 2026 GMT
Not After : Jan 17 16:26:47 2026 GMT
Subject: CN=69627dc7-8edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:b6:b4:68:b2:ff:3f:4e:d9:6c:68:f5:fc:
79:c9:ba:73:b7:a2:fc:d3:2b:16:8b:7e:4a:49:46:
86:c2:7c:0e:8e:3a:ef:68:bf:9e:69:30:73:73:b8:
33:06:a6:2a:ae:33:95:12:0a:e4:e7:73:9a:19:0a:
83:25:58:9f:f1:ee:fe:c4:11:86:04:c8:32:a9:dd:
56:27:60:16:87:48:7c:e4:33:bc:b1:27:85:ee:5b:
7f:0a:f9:f4:76:32:19:df:0b:d3:0c:16:4f:ea:61:
70:bf:35:82:ad:e4:29:d4:1f:f2:e0:51:2d:3d:51:
39:4a:55:8c:6a:aa:5f:5b:88:6a:21:fa:b9:59:d3:
ff:f7:73:47:89:72:23:02:df:06:cc:c4:86:93:83:
0b:36:5b:0f:da:2b:84:3a:50:1f:d7:72:56:47:a8:
61:ed:c9:c0:d5:da:aa:08:89:ed:b5:1a:da:e4:b5:
a3:7c:38:7e:c2:f8:2b:cc:07:50:68:ca:39:3e:7c:
ff:6b:3e:57:c1:86:2e:c0:ea:e6:48:3d:41:f3:56:
25:fb:9d:2c:37:0d:40:f3:6b:05:55:90:5c:ad:89:
ef:fd:2c:27:2f:65:b0:0e:bc:78:1c:6c:3c:ed:38:
10:88:2b:8b:e8:ac:ba:1f:29:48:a8:94:d6:13:93:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:47:9D:DC:EC:94:61:83:B4:21:EE:D6:D1:9E:17:0D:22:82:0A:DA
X509v3 Authority Key Identifier:
keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:e1:21:71:be:f4:81:9e:94:2a:b3:ef:fb:5c:74:fb:5e:1a:
49:72:2b:5a:94:ba:c0:c1:db:67:63:47:bd:73:23:96:b2:9c:
43:24:f4:98:99:1d:c4:03:15:f3:c9:f9:29:81:a2:dc:65:07:
04:d5:d4:f5:f3:bd:5d:7d:66:32:ad:ba:25:de:0b:7c:b9:05:
d7:a6:fc:83:b2:18:12:71:04:65:1b:e6:2d:04:26:40:b6:b8:
ec:77:f1:73:f3:03:7b:43:85:8e:01:bf:f8:3a:5b:d6:3b:14:
d4:bf:c3:b7:61:ce:81:af:fb:45:da:6d:47:88:dc:c9:7b:2d:
c7:b2:ad:b4:fc:33:ce:8f:c9:5b:09:ac:26:98:39:77:6e:1c:
61:11:8b:a1:c4:8e:bd:37:96:60:dc:ea:bc:fa:3d:e3:0b:b6:
43:5d:3a:b4:2a:45:9a:06:d4:2b:22:3a:f4:d5:60:ee:9c:5e:
22:03:6e:9e:14:c1:57:7b:c3:f2:04:fc:df:91:48:8b:1b:90:
d9:01:34:3e:7a:43:26:51:ba:19:4a:70:13:38:7d:cf:da:5d:
df:68:fd:dd:cb:ce:bb:95:05:21:77:b8:22:52:79:21:73:69:
e1:3a:fe:fd:36:2e:13:4f:bc:86:39:b6:c4:bf:f6:6e:c7:a3:
56:60:92:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:59:02 2026 by rpki-client