This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
File: sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json)
Hash identifier: IBkNZ+rehwhh5Al3ylEY7LxAf1cFdijO+phUK72DGqg=
Subject key identifier: D3:FA:4A:61:30:85:0A:EE:59:B7:E4:6E:62:5F:6C:61:22:8A:1C:6D
Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Certificate serial: 030D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
Manifest number: 02FE
Signing time: Wed 07 Jan 2026 00:24:04 +0000
Manifest this update: Wed 07 Jan 2026 00:24:04 +0000
Manifest next update: Wed 14 Jan 2026 00:24:04 +0000
Files and hashes: 1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: ZFiKkayPX4HpD+k2b3DctamxOV9ofZZSMyj4S+QIXIY=)
2: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: O/GWNs45gL+188aJUtcbIy1ffH2qMFXWGJpc2ELIi9o=)
3: FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa (hash: J6hrcFh7WhWZaOUjv//ch7y6xSAesYjPuueLW+CqB+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Jan 2026 00:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 781 (0x30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Validity
Not Before: Jan 7 00:24:04 2026 GMT
Not After : Jan 14 00:24:04 2026 GMT
Subject: CN=695da7a4-58e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:0d:b5:0b:1c:72:5f:70:3b:78:4b:78:a7:
8d:ce:5c:90:47:a2:78:00:78:64:8b:9c:c8:f5:cf:
be:16:23:0c:14:5a:06:76:ca:70:68:4f:64:29:da:
c6:e8:e7:10:22:ba:ec:ea:d3:31:13:05:0d:a1:6f:
bf:89:9c:96:b1:7a:af:28:eb:2a:36:26:fd:0c:3a:
68:a3:59:24:c1:9a:0b:a5:c1:47:48:7c:71:d1:1d:
75:5f:5d:1f:bf:a3:1d:82:d4:1c:fb:62:87:98:e4:
57:f8:64:bf:8f:bc:84:5c:04:eb:3d:5c:c0:2f:51:
53:a8:bc:90:a8:e8:46:5e:cd:d0:93:ff:af:e2:49:
68:18:d9:2a:bb:c0:6e:fc:66:20:9b:de:58:ef:e6:
3e:f7:14:52:d4:46:48:55:04:d1:0f:19:79:0d:14:
f3:13:fe:61:a3:8b:86:af:01:55:af:8c:20:b2:4f:
3a:55:6a:75:55:87:b9:f5:f1:6e:fc:d6:24:1a:ff:
92:4e:b4:d1:96:93:ac:ee:c7:95:7f:8e:64:67:6a:
dd:7c:c1:10:3c:19:3a:4f:e6:86:3c:75:0a:73:65:
a0:1c:67:86:65:11:91:1b:8e:d4:39:33:b0:88:fe:
42:77:3c:3a:ec:99:ab:1c:30:95:31:4a:37:19:7f:
6a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FA:4A:61:30:85:0A:EE:59:B7:E4:6E:62:5F:6C:61:22:8A:1C:6D
X509v3 Authority Key Identifier:
keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:36:fc:be:a8:65:45:eb:4c:32:3d:2a:b6:33:0e:72:2d:f5:
c4:0f:40:10:d1:8b:d2:99:98:8c:42:67:61:99:ba:7f:96:17:
15:97:3f:06:d3:76:d9:3f:a2:66:b1:48:60:cb:7a:68:ac:f2:
6d:62:10:59:60:63:d2:43:42:bc:d2:c5:9d:50:68:b3:dc:94:
19:6d:06:db:a2:e6:8b:43:0e:3d:50:07:87:c2:e9:06:10:9b:
d7:25:b5:ce:f3:7e:75:b8:15:b4:c1:47:5f:51:a1:a7:3d:41:
a5:14:b0:77:d2:91:59:4c:69:21:80:ca:81:e5:e1:4a:a7:12:
89:78:93:78:34:cf:17:b4:35:dd:93:55:2a:73:e0:a7:77:0e:
36:24:fb:5b:12:bf:cf:19:90:19:fa:4e:60:20:35:62:b2:fd:
84:bd:f9:7b:25:0d:e3:c9:8b:3d:b7:2e:e6:b5:73:29:d1:22:
5c:82:5f:74:e9:6f:81:83:a3:17:fc:37:e0:f2:da:b8:2a:78:
51:ef:dc:9e:08:41:0b:77:71:38:ef:73:56:2e:60:de:0b:65:
ff:96:e9:77:83:99:08:0c:dd:50:02:62:64:a8:73:f2:fc:d6:
b4:9e:29:27:e7:7e:3d:b9:89:ae:c5:a1:49:e8:a2:cb:b6:fc:
87:bf:61:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 10:16:30 2026 by rpki-client