This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
File: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json)
Hash identifier: k9REH388IBMneNPk9qYcSE8Gv/rej/EIE1S8y/0tD/k=
Subject key identifier: 93:ED:E3:14:7E:70:65:B7:91:16:98:44:5E:22:E2:63:13:81:7E:51
Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
Certificate issuer: /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Certificate serial: 0A39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
Manifest number: 0A33
Signing time: Sat 24 Jan 2026 19:10:53 +0000
Manifest this update: Sat 24 Jan 2026 19:10:53 +0000
Manifest next update: Sat 31 Jan 2026 19:10:53 +0000
Files and hashes: 1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: hYxHxQQTAg5pjkz7C4yYK9E7hgp9MfLxgtjPCr7KSFs=)
2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: IErhN2Rb0g9VI5rW4Q/U0ihFngJbQko3OlSb8ST5oQ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl
rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2617 (0xa39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Validity
Not Before: Jan 24 19:10:53 2026 GMT
Not After : Jan 31 19:10:53 2026 GMT
Subject: CN=6975193d-ef3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:1b:94:4b:ce:8a:8b:a7:bf:3a:65:9f:b6:
fe:88:a2:f6:d9:f0:2d:9a:19:3c:9f:75:65:53:4b:
0d:4c:b7:b2:1d:e0:8b:8d:23:55:2b:25:9e:75:08:
07:ef:af:59:87:fd:fb:16:9a:07:71:97:e3:c7:60:
54:71:05:66:eb:2e:97:5c:c8:7b:cb:15:38:43:0c:
fd:53:40:c8:71:83:40:49:d0:72:00:f0:54:a5:07:
76:e6:d5:37:9c:dc:1d:dd:de:25:b6:34:10:24:74:
14:c1:3e:61:5c:73:bc:b2:2f:a3:f4:b7:e2:b6:0c:
de:3a:7b:71:33:c6:89:ba:33:f4:b6:49:a7:81:46:
95:90:55:a1:3e:16:82:83:64:fe:ea:4f:13:49:af:
f0:d0:84:1a:7c:5c:99:08:79:31:ac:87:38:5c:8a:
db:ae:63:2b:f7:f6:c3:7a:f0:01:57:f4:d3:f9:a3:
3b:01:d4:ab:67:05:8e:b2:8b:c8:ac:ce:0e:60:3a:
f1:aa:a9:4e:fd:6f:84:23:8f:f3:36:7f:0b:81:8c:
50:76:ca:28:ef:95:c5:7a:a8:b7:7e:fb:bc:00:f6:
e6:51:1b:d7:3c:c8:68:16:91:3a:2a:a6:aa:bd:d4:
87:2d:dd:48:1d:5b:44:07:2d:81:7f:c8:30:9c:c7:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:ED:E3:14:7E:70:65:B7:91:16:98:44:5E:22:E2:63:13:81:7E:51
X509v3 Authority Key Identifier:
keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:ea:2a:1e:02:ae:e9:b1:52:35:3a:27:f2:51:a4:f9:d8:3e:
fd:c0:4d:78:fb:98:cd:f9:49:31:25:47:0d:56:a0:cf:d6:b4:
6a:25:f6:5e:c7:98:f6:ab:b7:80:5e:8e:ad:20:ee:9a:3b:d5:
5e:9d:7b:70:7f:01:5d:67:c0:ef:86:e5:fe:c1:41:30:aa:7c:
1e:c3:1b:bf:5c:cf:1b:93:43:01:43:26:e3:72:f8:a1:f3:21:
e8:1d:9c:de:d7:d7:c0:78:ef:a8:56:0d:e0:99:ae:8b:a4:f5:
a9:9a:d0:fc:a0:ac:c2:b6:5b:02:c7:02:1b:e2:d5:c2:08:57:
07:d9:df:27:40:36:9d:32:ee:34:34:14:bf:7a:f9:4c:f7:aa:
40:8f:ca:46:51:4a:66:0a:37:9e:07:ea:5c:24:70:10:50:eb:
53:af:e9:8f:e6:ee:cc:1e:64:d2:49:5f:95:85:74:a6:d8:5c:
37:28:39:23:4a:34:38:20:65:7f:14:3c:02:9f:b8:6f:f0:33:
91:b0:9b:48:88:f3:d7:37:73:50:60:01:52:1e:2b:aa:2b:b9:
d4:af:43:94:53:a2:5a:f7:28:20:40:17:71:32:bb:c9:9d:08:
97:8a:63:01:70:7a:16:f4:8a:46:5c:33:41:88:d7:77:d7:67:
d2:c7:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:48 2026 by rpki-client