This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json)
Hash identifier: iK0YceN8VgV14pL/KXllTdJm8Vrl0Ww7a8MXMz+zoXY=
Subject key identifier: 09:5F:A7:DF:25:E5:AF:47:8C:BB:C7:48:4F:25:6D:94:96:CD:B4:60
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial: 13A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
Manifest number: 1344
Signing time: Fri 16 Jan 2026 16:46:37 +0000
Manifest this update: Fri 16 Jan 2026 16:46:37 +0000
Manifest next update: Fri 23 Jan 2026 16:46:37 +0000
Files and hashes: 1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: /Hnzj91nwicG+TSWYcFht9pQwtNDBateqt9QOToZMqo=)
2: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: 5H1pM+kreN4Oi8C8HZm8e4S8ShHr8LgmiJJ+cKgYRHo=)
3: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: Yr7221/AjrFVZuk28SsMWsCKf7jgwJUz8UL6k6tO024=)
4: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: Wnr6Nu+wn4KpT3jxG77VWtuMf2NiqHg0vBMGp2AER8s=)
5: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: nCv8KSq1x9Ijvp8OSX/9bUAYQko+S3mPDE0oXqFbbRA=)
6: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: 7cgMEZO8tN+1Cmn/CZonBr3at8tPmq+bBhIi3Hlmo8w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 16:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5026 (0x13a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Validity
Not Before: Jan 16 16:46:37 2026 GMT
Not After : Jan 23 16:46:37 2026 GMT
Subject: CN=696a6b6d-76c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:5d:bc:e9:ab:c3:29:61:26:12:83:8e:57:
1e:52:8a:55:e9:46:e6:b3:81:81:79:f7:11:28:10:
97:3c:7c:c9:63:47:f1:5a:6d:11:90:fc:d2:f4:fb:
fc:32:0d:5b:8e:7f:27:3a:14:f6:80:e4:cf:f6:0e:
03:34:1d:da:55:14:c3:ed:9b:b8:cc:a6:18:7c:b2:
d1:b2:d2:69:06:08:c1:78:a0:32:ab:df:4e:8b:fe:
51:40:6d:e9:c7:9e:77:e5:5d:63:69:fb:d3:4b:02:
94:c0:8b:d9:45:0e:d6:94:96:f4:16:7a:60:a1:5a:
79:4e:36:83:9e:f8:22:2b:50:ac:b7:f9:28:be:52:
ba:71:a1:cb:73:5a:d6:b0:d0:d1:07:f2:48:89:87:
33:24:8b:6e:7e:f9:7c:c1:ce:36:30:0f:8d:5b:0a:
ad:d9:80:2b:9a:93:08:6b:10:1c:c1:20:d3:38:01:
98:2c:a8:c3:fd:7e:e0:7b:3a:02:86:aa:43:67:1e:
e8:20:36:1c:c5:b2:e4:8f:47:48:ff:6a:7c:35:a6:
7b:11:48:ba:86:7f:3e:ac:ff:5b:fe:50:89:35:16:
8d:28:4d:17:68:c4:4f:a1:2e:7b:4e:07:12:aa:10:
85:86:6b:db:83:0b:6f:5d:9c:ea:3b:5a:75:8c:9c:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5F:A7:DF:25:E5:AF:47:8C:BB:C7:48:4F:25:6D:94:96:CD:B4:60
X509v3 Authority Key Identifier:
keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:24:ac:53:88:19:a7:af:b2:40:fb:97:00:5c:5a:76:fc:49:
db:21:62:a3:a1:94:59:af:d2:06:15:30:bb:61:bc:4b:da:85:
b4:2b:d7:c5:0b:e5:f1:fa:f2:6b:b9:e4:63:a8:b1:06:ac:56:
08:7a:a3:c5:21:0b:64:13:fe:42:00:c3:a8:4b:46:9d:5f:b2:
16:fd:32:4d:64:bf:d1:da:17:75:9d:07:cf:81:82:bc:55:3d:
3c:e7:21:bf:40:a7:e1:fb:5e:4d:cc:c1:c2:4c:00:ff:78:db:
61:64:fd:48:96:24:45:b5:f9:2d:b0:87:6d:93:79:fd:52:ec:
a6:f5:1c:85:b4:b7:8d:44:e4:33:ac:86:ca:40:cf:40:16:4d:
a1:20:0d:73:1f:3c:dc:91:5b:f5:29:b5:01:49:ff:f2:b0:e8:
34:a4:d4:c4:e4:50:71:15:e5:17:03:9d:b6:0e:ff:0a:44:53:
a7:6d:15:1a:18:07:c9:43:5b:1d:35:2c:0c:6d:4f:2a:e5:16:
a1:6b:c2:53:4f:8c:9b:80:06:6a:a9:9e:3d:ac:ab:ab:06:d9:
94:12:7d:6d:dd:cf:49:f8:08:af:9f:89:a3:a6:d9:8b:c5:49:
5b:fe:a5:95:9a:00:45:4e:10:9c:27:c7:de:ed:09:03:64:46:
85:c6:7b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:11:10 2026 by rpki-client