This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft
File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json)
Hash identifier: 1JaV/ZoTU4cP27q3oMAwW6PDeLu36OiFiCv3qcsxAhM=
Subject key identifier: E0:45:40:2D:C7:85:20:00:BA:F8:EF:D4:89:AA:5E:C7:E3:3E:5F:71
Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44
Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444
Certificate serial: 194D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft
Manifest number: 16C1
Signing time: Sat 31 Jan 2026 16:51:23 +0000
Manifest this update: Sat 31 Jan 2026 16:51:23 +0000
Manifest next update: Sat 07 Feb 2026 16:51:23 +0000
Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: 2WJpQw1cWZ2FmNlHn/XHsjGwLhoMyPnKiAJabiNM9eU=)
2: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: XdNJgDmkOAWh0JRm8SzUVD6J0pIjuQDztKGWx3vGffA=)
3: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: bq63Try38UXC21Usp/rVYde1flr8BNvOLjxKx/YSfJk=)
4: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: Pc10a6GPcU3p3R3kb/3/eOvdX0ZEnj42VYzm9PFnls8=)
5: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: dKYtICER5+Vrv6r3o9V0PfpxWh5ROGS5ONF+u9Xmzy4=)
6: 8580D066931A11F0BE28F434C4F9AE02.roa (hash: OT4uRvGgtPPXNmBIz8+dDVmHS3D6YzsVUMEYzaMCqAo=)
7: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: PpfeoNLGQRLdh5JBWtYvIsWk1BQGQBviJdo1MDzsyAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl
rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Feb 2026 16:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6477 (0x194d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444
Validity
Not Before: Jan 31 16:51:23 2026 GMT
Not After : Feb 7 16:51:23 2026 GMT
Subject: CN=697e330b-e6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:36:2d:9e:ca:e9:1f:5b:69:4a:fa:f8:83:
b2:0c:d1:2e:23:88:a3:e1:a4:9e:ad:50:56:eb:6a:
2d:99:ca:45:82:68:b7:0d:50:69:1c:f8:53:69:44:
a1:b2:87:d9:36:a5:30:2e:fc:b5:59:7a:11:92:8b:
41:f4:57:2a:26:73:b9:87:af:b5:2f:cf:fd:87:32:
37:40:81:ba:87:28:26:63:98:f6:2a:1b:67:4f:d6:
84:41:96:61:b1:d2:df:bd:b9:6b:2c:24:f2:01:52:
54:fa:95:b1:d7:99:d8:69:c5:f0:e0:0b:00:e6:6f:
b0:24:28:cc:55:a8:a4:32:88:f7:37:60:92:8f:3e:
ef:79:74:55:2c:8c:75:81:9f:82:ec:a7:04:53:33:
30:a0:06:2b:c7:7b:71:80:14:fe:d7:7b:ed:78:c8:
63:60:81:b1:17:3a:9e:24:f3:18:17:67:e3:2c:00:
4e:b3:18:f3:02:b9:bc:2e:10:a8:b9:bb:16:a6:62:
9c:48:c1:ee:b2:44:ea:a6:f4:83:c0:a5:2b:fa:11:
07:10:6e:1e:81:b1:e3:9f:f3:cb:d5:99:2d:a6:37:
39:f9:57:e6:8a:5f:54:c6:16:15:94:19:30:da:5e:
13:d8:f6:30:8c:9f:03:04:db:c1:82:1c:c8:77:51:
47:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:45:40:2D:C7:85:20:00:BA:F8:EF:D4:89:AA:5E:C7:E3:3E:5F:71
X509v3 Authority Key Identifier:
keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4e:63:4a:71:bc:6b:3b:38:86:8d:e7:2e:11:9a:58:05:f4:
1a:bd:ef:48:e6:e3:83:b6:24:5c:29:a5:d3:1c:38:b7:42:c5:
63:3b:cc:2a:bf:3f:6d:aa:86:55:3e:44:68:4f:77:e7:1d:e8:
56:db:c6:8c:af:32:85:c0:db:21:29:2e:d1:ca:62:52:db:b6:
df:8d:99:c9:03:37:97:4e:a4:4d:74:6d:d0:a2:91:8f:0a:2d:
2a:2e:08:5b:1b:91:ca:b0:d3:63:26:08:47:8a:25:2c:ff:cd:
61:a2:64:1c:c4:f0:bb:fd:7f:cb:45:9b:64:ed:e7:03:6c:d1:
4f:5b:9c:4a:d1:50:39:d3:81:6b:fe:2f:bb:ac:4b:ee:8b:96:
79:8f:65:4a:9f:46:a8:42:93:69:e2:80:0d:5b:d6:5f:c2:a6:
58:63:b1:49:3d:3e:d9:2c:8c:3e:df:9b:6f:57:da:bc:cc:ad:
e8:f4:d8:63:a5:db:d8:dc:ee:a7:a4:38:03:72:50:8a:5d:77:
9a:60:d8:51:aa:64:6b:45:5e:cd:5c:b8:24:e3:bf:8b:89:85:
3e:22:74:b3:e5:a8:7f:5a:e7:ca:13:7b:76:20:d8:3e:e3:6b:
b0:f1:34:79:44:9d:06:6d:af:1b:e2:84:66:18:47:24:67:79:
f1:af:f5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:48:33 2026 by rpki-client