This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json)
Hash identifier: XuAbVAY/KJnIv0VMQysi3/N5ARJ+D4/ObKVERUCpxNk=
Subject key identifier: BF:3D:1E:20:83:C3:8D:CE:14:78:D0:AA:11:B7:08:51:4D:61:A5:22
Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
Manifest number: 0105
Signing time: Sat 24 Jan 2026 14:22:44 +0000
Manifest this update: Sat 24 Jan 2026 14:22:43 +0000
Manifest next update: Sat 31 Jan 2026 14:22:43 +0000
Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: HW7kkA/gf0V0WombDtMTHWKaZ7baLNf8Ce6lTlFSwVw=)
2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: J/A0Tcht/6BAxrksZsepsZObquBupiicduR/i0K3+O4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl
rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
Validity
Not Before: Jan 24 14:22:43 2026 GMT
Not After : Jan 31 14:22:43 2026 GMT
Subject: CN=6974d5b3-c881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6e:fc:63:ed:6d:2a:bb:72:cb:40:82:9a:61:
44:02:13:f2:94:72:aa:a5:cf:45:f8:fc:ac:63:40:
96:fb:29:83:d7:7f:cb:d9:4c:d4:f1:80:54:7e:53:
e5:24:f5:ad:19:dc:88:34:67:01:41:91:d3:a0:9d:
f9:54:85:2c:75:ac:90:b3:29:ae:82:09:a6:04:f1:
dd:fd:1f:21:ba:0d:3a:c2:09:c4:1f:be:33:aa:c6:
e9:37:cb:64:8b:00:c1:85:6b:f0:c3:b1:fe:f9:ba:
aa:44:51:f6:46:63:34:5b:bf:ec:1b:e9:f8:91:d0:
93:0c:4b:c1:6f:1b:3b:10:71:61:52:99:cb:87:3d:
62:ab:07:a0:b7:af:22:a8:16:eb:51:ea:71:19:36:
7c:01:92:40:11:c2:94:fa:89:65:a3:fc:0f:ac:76:
37:8e:b0:88:e8:7f:6f:bd:6a:53:bd:fc:46:98:89:
e4:df:0c:f7:71:bd:5a:ea:30:d7:81:a8:13:c2:94:
eb:66:9c:54:0c:13:25:49:22:f3:21:5e:95:41:97:
da:6a:dc:41:06:2d:99:14:bd:e6:82:08:2f:7e:22:
9f:d5:c1:bb:9b:70:87:20:0c:55:f6:fe:6a:06:da:
0e:1f:10:98:6f:b9:b2:10:c6:d1:83:1d:8f:d1:b2:
7e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3D:1E:20:83:C3:8D:CE:14:78:D0:AA:11:B7:08:51:4D:61:A5:22
X509v3 Authority Key Identifier:
keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:d0:56:2c:6b:d9:4a:5c:79:85:3f:ae:c0:85:77:24:70:b6:
64:f5:33:eb:09:1d:a3:37:79:dd:29:c5:af:eb:98:29:b6:c3:
55:7b:d4:17:89:50:ad:03:04:b8:62:43:01:83:b3:8e:91:4f:
04:37:d5:06:f2:8e:59:7f:b9:47:04:23:16:10:a0:94:05:c8:
35:e5:c4:ac:98:d1:46:0a:9b:da:42:32:a1:fe:33:79:eb:8b:
00:7a:20:89:62:1f:cf:27:ad:97:74:9e:1d:27:45:e1:35:36:
a7:2d:bd:66:f5:af:d5:b8:df:bf:06:05:25:c8:9b:fc:4b:3d:
85:1f:63:c8:ef:25:74:f9:a8:1f:aa:93:88:9f:e2:41:3f:e1:
97:9e:cc:c4:32:58:9b:22:53:0c:a3:48:00:17:1c:72:81:a6:
e0:57:cb:cb:3d:6f:65:e2:ac:13:5c:39:ec:d9:50:1c:22:53:
97:42:49:a8:8d:91:7a:3b:05:67:2f:17:fb:bc:27:d4:d8:3a:
33:71:75:ab:1e:e3:62:33:61:30:90:3c:0f:64:1f:a4:db:9f:
b2:52:1c:a4:da:df:ba:a3:50:4c:31:71:11:6e:00:47:ed:99:
43:a9:72:8d:b1:93:6c:78:b3:0e:9b:96:87:98:37:46:c5:c4:
bf:d6:d6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:01:47 2026 by rpki-client