This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json)
Hash identifier: Yx5G41k/eRjN7Mpj7YK6ncPy3t1rSgnvyPF8XUuR3ic=
Subject key identifier: 98:3D:3B:60:3B:D8:16:78:5A:EC:6F:36:7C:DC:48:F6:33:6F:E2:5F
Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E
Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E
Certificate serial: 09D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
Manifest number: 09B4
Signing time: Sat 24 Jan 2026 19:27:06 +0000
Manifest this update: Sat 24 Jan 2026 19:27:06 +0000
Manifest next update: Sat 31 Jan 2026 19:27:06 +0000
Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: K7SMjsxCj5bhXptKJxjRtkPtocJ5dHHMyKuiogr8fwQ=)
2: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: xcMGwOENkpgW2mMW9g8QUOtjynFGqmXhiODYH8mlbPs=)
3: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: qICrQwIHICjNb5ciKPL/CPmev59XQIMgZMKlYhMpE7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl
rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2512 (0x9d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E
Validity
Not Before: Jan 24 19:27:06 2026 GMT
Not After : Jan 31 19:27:06 2026 GMT
Subject: CN=69751d0a-cf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:af:64:02:8f:e4:78:fe:25:2c:e4:98:40:
90:ac:97:88:a2:d4:a5:96:21:6b:9b:6e:c4:42:4a:
08:5f:43:a1:d0:6b:a6:85:54:b8:ac:ce:81:b6:3b:
07:b7:0e:9e:43:1c:b4:1f:2f:47:62:3a:15:d7:13:
aa:6d:8a:2e:73:1f:20:7d:d3:57:93:67:0b:05:2b:
a2:22:48:ba:e2:ab:ec:0d:e6:ab:36:b5:85:20:40:
08:2a:67:cc:ad:f9:ea:4d:27:2d:8a:15:72:e8:c2:
b9:65:7f:15:72:24:12:f4:c1:db:70:99:48:b5:5e:
09:02:ba:b3:97:95:c2:8e:0f:c2:23:12:67:2d:c8:
e0:71:94:cb:65:ad:5c:33:9a:66:8c:8b:b9:e5:ce:
1d:48:52:bb:4c:1d:c0:00:d0:44:ef:af:01:1b:7e:
59:ae:3e:ed:08:d5:4a:8a:49:c7:64:1c:45:a1:c7:
84:78:0a:ca:f5:fc:6e:c3:2b:a8:6c:a9:37:b6:81:
57:be:a5:28:71:eb:11:17:01:24:a3:aa:07:31:3a:
99:d3:ab:14:82:cb:dd:25:1c:0d:b7:98:19:df:d7:
e9:fe:dd:9f:84:ba:67:2e:59:0f:da:ac:68:4d:03:
56:aa:78:ad:62:6c:d0:fd:96:9b:fd:b6:68:99:21:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3D:3B:60:3B:D8:16:78:5A:EC:6F:36:7C:DC:48:F6:33:6F:E2:5F
X509v3 Authority Key Identifier:
keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:70:67:dc:5f:27:ea:38:96:8f:3e:b2:54:0b:e6:18:4c:40:
5b:27:05:36:0d:26:8c:7d:7a:8e:54:97:3c:e1:82:35:9b:92:
b8:88:cd:9e:1f:30:9f:c6:73:79:8b:79:dc:45:eb:e3:94:5b:
b1:5c:9b:12:2d:39:0e:fb:09:a9:87:90:ed:54:80:14:21:ef:
a3:aa:d1:68:1e:45:48:90:cb:ff:9d:60:80:0e:3b:93:6e:73:
de:2a:33:83:70:24:9a:68:d5:4b:96:c2:b2:17:66:3e:76:59:
51:0f:e9:56:83:e9:78:94:6d:a2:b5:71:c1:a1:d6:f7:86:d2:
b4:0a:a6:6b:e3:96:15:b0:2c:5b:f1:b0:5b:61:99:00:dd:54:
24:3b:d7:e5:dc:f1:09:64:b3:b0:f6:ff:8a:b3:4b:b9:79:3c:
b2:bc:6d:a2:79:04:1a:c8:5a:15:0d:38:52:ab:5d:34:df:b1:
c0:71:69:e5:f2:a4:17:2c:b4:7a:7b:1e:2d:fe:8f:6d:a7:1a:
48:57:f8:00:bf:83:7c:a2:e0:46:c2:f4:ad:3c:d9:c7:57:6c:
ef:04:59:01:83:7e:15:3a:57:9c:e2:3e:7e:a7:74:49:12:da:
12:d7:69:da:80:9b:a7:42:91:fa:a6:d6:d9:a5:2a:59:64:5f:
1f:18:31:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:57:49 2026 by rpki-client