This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
File: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json)
Hash identifier: MOXmmpQNqcJEGwknnR0CJZhHzVNchb2Ny3PAjKSA8Ak=
Subject key identifier: 92:F9:34:82:55:C8:2F:D9:3A:15:FD:53:CA:D5:ED:00:58:E2:0A:0D
Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E
Certificate issuer: /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
Certificate serial: 06A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
Manifest number: 06A7
Signing time: Fri 16 Jan 2026 21:38:13 +0000
Manifest this update: Fri 16 Jan 2026 21:38:12 +0000
Manifest next update: Fri 23 Jan 2026 21:38:12 +0000
Files and hashes: 1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: zUo7eWjuVjnqx1wtgJ+OiJNIstWV5j/3IsLjlSGNY40=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl
rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1703 (0x6a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
Validity
Not Before: Jan 16 21:38:12 2026 GMT
Not After : Jan 23 21:38:12 2026 GMT
Subject: CN=696aafc5-cc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:76:7b:98:62:25:8d:09:96:b0:2a:c3:4a:
45:04:7a:20:a3:fa:54:d7:ff:80:48:55:49:21:cd:
1f:8b:84:fc:c1:f7:0e:e2:fb:b5:83:3f:fa:ba:99:
bc:7b:3f:36:0c:28:a9:c5:07:c0:8f:e8:24:d5:67:
f7:b9:d5:da:df:db:d4:81:2b:e1:86:d0:42:05:3a:
90:86:10:46:e9:9b:1c:79:99:bb:47:fa:c7:da:86:
b9:5d:f1:f3:86:5f:84:b1:33:fc:dc:a1:77:8c:4d:
d2:4e:a5:5a:29:f6:af:44:ae:f8:7a:3c:88:19:b1:
1a:b4:9d:da:d3:a1:17:e9:0b:17:1e:c7:5b:a4:7f:
22:fb:7b:c7:67:54:53:e5:b1:5a:ba:71:b2:56:0b:
52:18:3f:45:db:4a:f1:81:60:03:07:2a:88:6b:a1:
19:80:19:6a:42:74:7f:9e:1a:20:98:db:58:f4:c3:
36:c5:b6:29:75:87:8b:c5:5b:53:07:98:18:00:ac:
b2:47:17:fb:df:f2:84:d3:01:5b:97:8d:f8:c3:d9:
9a:be:f6:6d:b2:3e:98:3f:16:f8:3f:c6:56:20:bc:
bf:ef:2a:de:ee:06:5b:17:3e:a0:e5:46:f4:e8:0b:
03:64:3b:0f:cb:38:d0:8f:b6:46:dd:a3:3c:9d:ef:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F9:34:82:55:C8:2F:D9:3A:15:FD:53:CA:D5:ED:00:58:E2:0A:0D
X509v3 Authority Key Identifier:
keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:f5:ca:44:35:3b:6c:95:58:ae:fc:af:ba:6e:31:b3:3f:7e:
9f:93:ff:c1:0d:f6:84:f8:b6:93:b9:ca:9a:fa:52:56:7b:d2:
35:78:4b:61:84:0e:ae:e7:c4:9f:5b:c6:fa:5d:eb:15:ed:0c:
75:90:78:dc:ec:cf:6e:43:b2:bf:6e:a4:19:c4:56:37:03:34:
55:d0:bc:9b:30:9a:b9:95:ef:e0:d7:7a:ed:86:d6:04:b9:91:
59:1e:1e:ee:38:a9:e8:38:4e:03:4b:c1:6b:c2:de:fe:d9:e9:
71:83:c1:2f:68:ec:a1:ea:9d:ab:6c:a5:70:f6:ca:f7:13:de:
c5:e8:25:3b:36:95:a3:64:25:7c:c4:36:e4:fb:62:d2:a1:26:
5c:f1:ca:8f:b1:54:13:f1:ba:7d:29:bd:7a:e6:5a:4c:33:eb:
b2:04:6c:9b:62:41:88:38:e0:46:3f:e8:ed:09:1c:ed:6f:20:
0a:27:8b:3a:63:d3:9e:f8:7b:13:c0:8d:da:b8:fc:3e:ca:92:
9b:ed:07:47:f3:a4:81:78:6b:36:80:67:39:54:26:6d:9f:05:
9f:3c:88:a5:70:98:7e:2f:dd:79:77:91:52:4d:84:ed:35:ba:
f8:57:a9:10:ab:c7:19:ae:82:fa:cf:b1:ed:a4:78:2c:02:38:
4c:69:d2:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM4N0YxMTAvBgNVBAUTKDQ4MEJDRDlFRUE4OEYwQTZEQTE3REY5ODQzQjlCQTZG
NTlDMjdFOUUwHhcNMjYwMTE2MjEzODEyWhcNMjYwMTIzMjEzODEyWjAYMRYwFAYD
VQQDDA02OTZhYWZjNS1jYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqy52e5hiJY0JlrAqw0pFBHogo/pU1/+ASFVJIc0fi4T8wfcO4vu1gz/6upm8
ez82DCipxQfAj+gk1Wf3udXa39vUgSvhhtBCBTqQhhBG6ZsceZm7R/rH2oa5XfHz
hl+EsTP83KF3jE3STqVaKfavRK74ejyIGbEatJ3a06EX6QsXHsdbpH8i+3vHZ1RT
5bFaunGyVgtSGD9F20rxgWADByqIa6EZgBlqQnR/nhogmNtY9MM2xbYpdYeLxVtT
B5gYAKyyRxf73/KE0wFbl434w9mavvZtsj6YPxb4P8ZWILy/7yre7gZbFz6g5Ub0
6AsDZDsPyzjQj7ZG3aM8ne8PHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJL5NIJV
yC/ZOhX9U8rV7QBY4goNMB8GA1UdIwQYMBaAFEgLzZ7qiPCm2hffmEO5um9Zwn6e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9BQkEyMTk2Qzkz
NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThLYmFGOS1ZUTdtNmIxbkNm
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1NBdk5udXFJOEtiYUY5LVlRN202YjFuQ2ZwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mzg3Ri9BQkEyMTk2QzkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThL
YmFGOS1ZUTdtNmIxbkNmcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA49cpENTtslViu/K+6bjGzP36fk//BDfaE+LaTucqa+lJWe9I1eEth
hA6u58SfW8b6XesV7Qx1kHjc7M9uQ7K/bqQZxFY3AzRV0LybMJq5le/g13rthtYE
uZFZHh7uOKnoOE4DS8Frwt7+2elxg8EvaOyh6p2rbKVw9sr3E97F6CU7NpWjZCV8
xDbk+2LSoSZc8cqPsVQT8bp9Kb165lpMM+uyBGybYkGIOOBGP+jtCRztbyAKJ4s6
Y9Oe+HsTwI3auPw+ypKb7QdH86SBeGs2gGc5VCZtnwWfPIilcJh+L915d5FSTYTt
Nbr4V6kQq8cZroL6z7HtpHgsAjhMadJh
-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:55 2026 by rpki-client