This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
File: v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json)
Hash identifier: huXao6JYILsyFsqV/BTcPj1qajgtEDs/+qFmRKQ5PFo=
Subject key identifier: 72:EC:CE:35:C1:49:AA:04:02:B2:92:A3:A3:7F:8A:E0:09:15:77:8F
Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
Certificate issuer: /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Certificate serial: 3534
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
Manifest number: 351B
Signing time: Sat 24 Jan 2026 14:26:54 +0000
Manifest this update: Sat 24 Jan 2026 14:26:54 +0000
Manifest next update: Sat 31 Jan 2026 14:26:54 +0000
Files and hashes: 1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: xD4POikptgy/KsSZIqlPPsxU29WMZg7EH2RUAoeTDt4=)
2: F73D1642F30B11EFA86D9348C4F9AE02.roa (hash: NAzmMf7NVE534MnJBMzFOT2rLSzUZpBo5WpxUwTckK0=)
3: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (hash: 8VK+APK/5itIVHmFKGjT+lEuTWBUnDuSseayGMqo1ag=)
4: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: st0pVxpUqrAEUwj53Z+GQXs6wx4AnLeV6lm/Wqla7jI=)
5: 60629332FE4611EFB15A9D48C4F9AE02.roa (hash: /zfwzDG7n6E2JjaivpDdu+dOVBIaawCIeVKdcfBcPXY=)
6: B3C4F6FCC8E811EFA15E172AC4F9AE02.roa (hash: 7X3op8FxLKCInR/9TSODy+LRMH6+i0DMcG4PbSJZGR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13620 (0x3534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Validity
Not Before: Jan 24 14:26:54 2026 GMT
Not After : Jan 31 14:26:54 2026 GMT
Subject: CN=6974d6ae-8b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:61:c1:56:4b:a3:7f:af:b7:19:d5:cb:f6:
ba:de:da:7f:39:be:75:28:8c:96:51:d2:98:11:db:
8c:15:45:0f:c3:69:11:23:67:1b:e4:51:70:8b:aa:
08:ec:e9:10:6e:11:99:89:80:e0:30:da:20:f2:76:
bd:c5:fb:7c:1d:1d:25:e8:c0:f5:3d:36:e0:f7:c7:
a5:b7:a1:22:af:fb:4f:17:50:ff:86:91:ac:1e:a2:
52:d8:a3:f8:69:17:0c:3d:21:82:47:50:18:8e:24:
6b:de:d3:3b:40:bf:08:e7:ec:f5:df:89:96:e7:de:
b3:6d:e3:10:44:9a:d9:7c:fd:76:ea:45:29:c7:97:
15:a2:f2:f2:63:83:d5:c9:e9:44:16:30:b1:c9:40:
b6:60:f3:35:ff:3c:5a:0a:bb:14:31:25:9d:5a:96:
bb:cd:67:ac:c2:88:e4:4a:3f:01:ee:97:2c:fe:e0:
2e:bb:85:7d:ce:6a:2f:65:71:c6:80:20:d8:e2:ef:
aa:d0:61:3e:c9:54:30:2d:be:d4:4e:8e:69:21:ea:
47:ae:8b:bc:4d:a0:fe:2d:31:5a:0a:b0:0b:b1:0d:
95:3b:34:57:c2:6a:7f:8c:5d:94:92:ae:eb:77:f5:
c3:95:d4:c7:88:60:e9:64:b2:34:a1:16:25:38:6f:
9e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EC:CE:35:C1:49:AA:04:02:B2:92:A3:A3:7F:8A:E0:09:15:77:8F
X509v3 Authority Key Identifier:
keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:99:84:33:b2:29:07:6f:d7:7c:46:a3:58:cb:d6:65:15:78:
2c:4a:0e:6e:50:97:54:8f:b9:62:68:b7:d2:a9:8f:2d:6b:f7:
a0:c3:b7:75:15:37:a4:1c:3a:af:03:e5:84:3d:5c:3b:35:60:
14:3e:67:41:6f:05:4c:c1:94:32:85:08:a4:7e:c6:0c:c0:3c:
77:90:ce:68:60:b5:4b:d0:77:f4:49:d9:fa:68:0d:34:cd:17:
bc:3e:46:4b:27:78:40:1c:a8:88:1e:5c:f2:f6:06:d0:b1:9b:
52:4e:92:92:99:31:74:ac:e5:8e:9a:0e:a2:06:72:5b:74:ac:
ad:c6:be:4c:75:11:b7:13:77:c4:95:ba:8d:71:2c:d6:0f:10:
cb:a8:23:88:62:6b:41:d3:b6:59:96:01:af:a3:fd:31:1f:ed:
80:11:89:26:c3:4e:ac:56:83:77:fd:9f:7f:61:f4:60:20:ca:
31:49:ff:0e:c8:48:67:19:a2:ad:63:a4:99:a7:ef:b6:11:7a:
57:1e:cd:54:6a:e2:7c:cd:f4:59:31:1e:fd:a2:e4:dd:8c:08:
19:0a:6f:13:28:94:80:20:9a:42:71:ae:56:c0:bc:86:04:c0:
5c:c0:13:b4:c1:a7:88:6d:da:37:70:fd:b7:fa:ad:fa:66:6f:
ed:d8:b8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:06 2026 by rpki-client