This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json)
Hash identifier: McQecAnU0kvQdhye90xEh96PDmyislGhsT2umI0ghps=
Subject key identifier: 5F:B3:98:58:6E:A6:35:04:2D:0D:C5:9D:11:D3:9C:D3:A7:51:ED:64
Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F
Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
Manifest number: 01C7
Signing time: Sat 17 Jan 2026 02:12:21 +0000
Manifest this update: Sat 17 Jan 2026 02:12:21 +0000
Manifest next update: Sat 24 Jan 2026 02:12:21 +0000
Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: o9pzO8OfPKubkmCh3t6n4Ihg/bkBveAcWZ2tdo0CuWY=)
2: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: v3dChgnA84SfDYgqRC2E+QVbu8keAWHj6W+tTQnPlbw=)
3: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: 8qXcxCRSjyOP/oKs9vNyiIBs05KSJRouDgmhdgT6x8M=)
4: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: HG1f/f+5SFm8izuIB1/hs3U0LoMscjbV7+BezDm08/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl
rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 02:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F
Validity
Not Before: Jan 17 02:12:21 2026 GMT
Not After : Jan 24 02:12:21 2026 GMT
Subject: CN=696af005-4845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:81:02:90:23:f8:d6:0e:eb:a0:5e:d9:6c:e0:
9f:99:1f:97:ec:16:2b:6f:f2:6a:1f:f6:c7:41:f5:
c8:c4:62:e1:e5:27:88:e4:4e:4c:84:ab:0c:2e:9a:
7c:77:59:7e:68:53:48:55:e8:13:00:64:ce:6b:ad:
8a:ca:27:50:af:6c:e1:d0:a1:06:ad:f1:b9:eb:f4:
f6:69:a2:4a:00:74:d4:95:81:b3:ed:eb:e7:a0:17:
e9:30:39:a5:6b:3e:e1:97:b8:d2:55:6f:de:a0:3c:
67:0e:37:79:6c:b8:72:bb:86:33:c1:f7:d9:87:a9:
3e:9c:8d:1b:ba:c7:5d:60:8f:1b:29:78:17:a9:c7:
73:7b:c1:ca:4c:ce:1f:13:ac:c3:89:ba:a9:ea:ab:
d4:9e:6d:54:43:b2:46:33:83:46:dc:ee:c0:25:1a:
92:47:7a:4e:7d:2d:f3:b2:84:d5:0f:8e:4e:2e:8b:
42:64:34:75:c8:43:61:c4:0c:00:7b:c3:05:bf:9f:
a7:a0:25:d8:e3:ff:17:14:de:7e:0c:82:83:61:96:
85:04:18:be:c7:58:1f:0f:71:87:2b:3c:fa:3a:29:
51:1d:45:80:7b:52:bc:74:68:24:98:b4:dd:c9:1f:
e8:a2:8f:dd:9b:c9:2b:7a:cb:ea:f2:21:6f:a3:84:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B3:98:58:6E:A6:35:04:2D:0D:C5:9D:11:D3:9C:D3:A7:51:ED:64
X509v3 Authority Key Identifier:
keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b1:76:d7:ae:4e:8a:d7:db:43:82:dc:90:0a:f7:d5:2a:c8:
d8:0f:bc:6e:87:7e:f5:33:7b:ad:7d:11:5f:9e:22:bc:31:8d:
2e:ad:1d:e4:a2:fb:14:cc:8f:92:73:ce:bd:e6:dc:2e:59:f8:
ec:66:6d:94:8e:06:74:e9:41:89:de:d0:68:44:d0:dd:7f:9d:
ff:76:40:55:02:82:f4:15:1d:b3:ee:fa:cc:c5:89:49:a5:5b:
ea:b7:f9:e5:42:a0:05:58:52:cb:14:1d:cc:8b:76:98:4c:10:
6f:dd:0d:14:9e:11:9d:7f:24:46:8b:ab:a4:35:a6:06:a1:95:
50:92:b8:ac:b2:ec:42:a3:a3:ce:b4:fc:7a:99:fa:d8:2f:f3:
c3:4e:cf:77:81:73:52:93:76:03:68:14:a0:49:b9:ea:7b:ba:
bc:ad:ca:7a:3e:f5:75:86:af:05:c5:f9:ea:03:da:b5:39:eb:
db:82:16:58:88:92:80:49:c3:e9:f5:47:c8:81:84:82:9e:6a:
92:a2:85:87:b3:8f:b0:96:37:c6:b8:d1:90:b7:a3:73:6c:d3:
4f:b7:60:fa:e0:88:c5:a8:96:b7:7e:c7:c0:c9:4d:5d:69:1e:
99:d5:88:80:d1:3a:92:9d:d3:7b:58:d8:d5:e3:49:70:5b:8c:
c2:7e:32:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1
NzdCRUUzM0YwHhcNMjYwMTE3MDIxMjIxWhcNMjYwMTI0MDIxMjIxWjAYMRYwFAYD
VQQDDA02OTZhZjAwNS00ODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5IECkCP41g7roF7ZbOCfmR+X7BYrb/JqH/bHQfXIxGLh5SeI5E5MhKsMLpp8
d1l+aFNIVegTAGTOa62KyidQr2zh0KEGrfG56/T2aaJKAHTUlYGz7evnoBfpMDml
az7hl7jSVW/eoDxnDjd5bLhyu4YzwffZh6k+nI0busddYI8bKXgXqcdze8HKTM4f
E6zDibqp6qvUnm1UQ7JGM4NG3O7AJRqSR3pOfS3zsoTVD45OLotCZDR1yENhxAwA
e8MFv5+noCXY4/8XFN5+DIKDYZaFBBi+x1gfD3GHKzz6OilRHUWAe1K8dGgkmLTd
yR/ooo/dm8kresvq8iFvo4TM+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+zmFhu
pjUELQ3FnRHTnNOnUe1kMB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3
NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU
ZGY4c3hZUzZYNzVYZS00ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwsXbXrk6K19tDgtyQCvfVKsjYD7xuh371M3utfRFfniK8MY0urR3k
ovsUzI+Sc8695twuWfjsZm2UjgZ06UGJ3tBoRNDdf53/dkBVAoL0FR2z7vrMxYlJ
pVvqt/nlQqAFWFLLFB3Mi3aYTBBv3Q0UnhGdfyRGi6ukNaYGoZVQkrissuxCo6PO
tPx6mfrYL/PDTs93gXNSk3YDaBSgSbnqe7q8rcp6PvV1hq8FxfnqA9q1OevbghZY
iJKAScPp9UfIgYSCnmqSooWHs4+wljfGuNGQt6NzbNNPt2D64IjFqJa3fsfAyU1d
aR6Z1YiA0TqSndN7WNjV40lwW4zCfjLK
-----END CERTIFICATE-----
Generated at Sun Jan 18 15:34:02 2026 by rpki-client