This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
File: SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json)
Hash identifier: bQnnsELyJ7yPrJ2NP2t/Lk7gMbigPpnYEt9HO+u24+M=
Subject key identifier: BE:DC:C6:23:E9:35:A6:3E:E8:83:0C:BC:37:9D:CB:35:C8:9F:1E:E4
Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Certificate serial: 020E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
Manifest number: 020A
Signing time: Thu 01 Jan 2026 01:57:20 +0000
Manifest this update: Thu 01 Jan 2026 01:57:20 +0000
Manifest next update: Thu 08 Jan 2026 01:57:20 +0000
Files and hashes: 1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: MHSwL7SPiDcMBuM4g4xWYOvD8BLcxP6awluRoksnysA=)
2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: gQgaVP6gsqEmtORlyD8C7NpCpWYfOsLgU2Aae4Tbg5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Jan 2026 01:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Validity
Not Before: Jan 1 01:57:20 2026 GMT
Not After : Jan 8 01:57:20 2026 GMT
Subject: CN=6955d480-583e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:51:77:8b:7c:56:f1:35:a3:6b:99:c3:5a:
a4:ca:de:d3:ec:59:4e:5b:8a:c3:00:33:08:02:37:
5a:b7:95:1d:10:93:2b:b7:5c:5e:29:23:d3:b1:e4:
2f:0a:69:4d:be:4e:96:2d:5f:29:7b:ab:fd:7a:a7:
68:54:51:f4:16:16:c8:5b:14:f6:00:6c:15:5b:60:
08:59:51:84:49:68:d5:48:f3:de:00:25:7a:49:5d:
b1:81:a7:f4:2b:c9:8a:86:50:2c:27:5a:15:e9:b0:
a3:22:53:90:a5:36:08:aa:63:e8:9e:c4:2c:53:28:
3b:19:e5:a5:86:99:d3:62:7a:33:63:73:8d:f0:b6:
ae:fc:8a:bf:04:0c:87:70:1b:e9:29:32:55:f0:6e:
3a:4c:ab:5e:da:cd:d1:f4:3f:64:1e:ea:08:54:f1:
0c:3f:fd:c6:30:80:41:1a:b0:62:ac:67:d4:d9:dc:
d0:83:44:8e:39:6f:e0:81:25:43:3c:78:1d:e9:73:
b6:70:f8:5a:44:4e:39:86:f7:6e:bc:31:4a:43:6b:
32:79:8b:c7:1e:b3:c2:73:65:36:3f:d2:3c:80:77:
b4:e1:ad:5a:a0:07:2a:d3:9f:4d:f1:f7:65:67:5f:
75:42:25:fe:05:61:e0:89:2a:73:2a:66:fc:61:48:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DC:C6:23:E9:35:A6:3E:E8:83:0C:BC:37:9D:CB:35:C8:9F:1E:E4
X509v3 Authority Key Identifier:
keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:3f:bf:cc:a7:c9:4a:80:c4:12:28:69:33:d8:e4:4f:b2:98:
61:17:b9:ee:ff:dc:92:75:aa:41:70:2e:9e:e8:03:fd:d1:ae:
fe:71:86:73:60:7d:51:0e:a5:d3:a4:ce:62:08:9a:66:28:a6:
1b:b5:14:5f:b9:07:b9:ca:13:e0:3a:70:1a:0d:c8:90:50:4b:
a8:40:b3:84:8a:3c:1a:85:8c:ab:ed:83:05:fa:65:9a:36:0d:
c8:a4:b4:81:54:71:46:4c:fe:25:65:75:c3:6c:99:cf:d1:a9:
16:a5:6e:17:64:73:af:a4:70:4d:44:7f:06:9c:07:f9:ef:c3:
e5:e4:a2:79:78:6a:ff:58:3d:48:a4:f2:e6:2b:c9:11:be:ef:
76:34:a5:6f:7f:c1:26:bd:1f:24:a8:d3:25:a7:9c:9c:78:3e:
b4:88:3f:bd:7c:80:e1:3f:c5:4c:b0:35:a9:54:c6:f3:e1:14:
11:86:a8:15:80:13:ca:b7:6d:16:3c:0d:12:2b:11:87:45:30:
b4:cd:fd:0f:f2:54:ef:6a:2d:8d:e7:f1:8e:02:cc:53:05:e4:
de:b9:2e:43:1a:4d:40:02:53:c0:87:5e:3d:74:1a:53:37:34:
0e:35:16:a9:5f:71:fa:c1:27:7e:bd:1f:d7:5a:2f:4b:4a:98:
96:ff:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 08:17:45 2026 by rpki-client