This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
File: 8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft (raw, json)
Hash identifier: Z2dPgzBfoc5TTJ8vsFLwSJyYVkyl0R+XHU9Wi0+kB5w=
Subject key identifier: 95:F6:CD:2E:03:FB:F5:DD:0A:A2:A9:C0:E1:23:5D:8C:61:EF:58:32
Authority key identifier: F2:92:8A:4B:10:DD:84:74:A6:DD:0A:C6:5C:D1:39:4F:02:15:5C:DE
Certificate issuer: /CN=A91243F8/serialNumber=F2928A4B10DD8474A6DD0AC65CD1394F02155CDE
Certificate serial: 02D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
Manifest number: 02D3
Signing time: Sun 25 Jan 2026 00:31:59 +0000
Manifest this update: Sun 25 Jan 2026 00:31:59 +0000
Manifest next update: Sun 01 Feb 2026 00:31:59 +0000
Files and hashes: 1: 8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl (hash: w0gWp9oY9LI30qYVCeazqQhf1Fz1Iol1NYsZZQYnYR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl
rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91243F8, serialNumber=F2928A4B10DD8474A6DD0AC65CD1394F02155CDE
Validity
Not Before: Jan 25 00:31:59 2026 GMT
Not After : Feb 1 00:31:59 2026 GMT
Subject: CN=6975647f-2309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:3a:77:e9:4d:34:a1:e3:96:90:5c:92:80:
e0:2d:f8:a3:b9:a8:49:2d:cb:6b:c8:15:2a:ab:ab:
68:ce:01:2e:4a:ba:25:2a:0d:3a:14:61:79:55:28:
90:8b:4f:17:fc:80:5c:ba:dd:97:d1:c3:17:91:cc:
46:1b:ca:35:a8:76:d1:44:63:a3:d0:c8:76:16:a6:
53:25:76:c6:cd:46:e1:39:17:b5:17:de:e1:30:b1:
57:f9:13:ec:be:de:67:14:97:b2:06:91:08:c7:37:
83:ae:cb:81:1d:dc:c2:7c:2e:88:a9:ea:86:f2:2b:
d5:d8:2b:9d:36:69:53:1b:ed:00:27:16:bf:c5:d4:
db:73:35:5d:da:e2:ca:39:ab:3e:2b:da:7a:3b:ad:
80:01:b9:c7:54:6e:11:34:95:b7:73:dc:48:bd:27:
ea:53:48:44:b1:6b:db:0f:b0:68:4c:f3:43:81:a3:
b5:de:bc:3a:e5:d9:53:1e:0c:c3:89:2a:91:3f:b3:
c8:5d:79:19:3f:1d:e0:e1:c5:df:5b:59:47:d7:94:
7d:99:b1:11:df:3d:e7:fe:03:3c:53:a9:70:67:e1:
1b:35:d8:88:64:08:29:0b:92:05:f7:6d:df:54:dd:
b6:ea:0b:69:61:ca:bc:a1:b6:e4:e3:90:37:4a:a7:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F6:CD:2E:03:FB:F5:DD:0A:A2:A9:C0:E1:23:5D:8C:61:EF:58:32
X509v3 Authority Key Identifier:
keyid:F2:92:8A:4B:10:DD:84:74:A6:DD:0A:C6:5C:D1:39:4F:02:15:5C:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:69:99:1f:85:2e:ac:cd:95:cf:11:3b:75:02:0c:a2:ab:43:
64:43:4d:bf:78:25:aa:31:62:41:1c:29:12:25:f1:6e:d8:7b:
77:62:7f:6b:2f:b8:31:b5:99:a7:6d:88:4c:e5:ca:06:67:f0:
c8:ed:dc:4b:18:6d:b4:ce:7e:53:c7:c4:e7:cd:11:07:8b:dd:
00:7d:91:60:ad:65:3c:b1:0d:35:3e:24:ca:81:3f:8b:f1:61:
2f:58:1b:ef:d8:bd:b1:a9:a0:7f:2e:9b:70:b0:05:df:17:02:
e2:a5:47:a7:69:95:21:b5:94:69:4a:79:0a:0e:6d:85:ef:10:
67:03:5d:8c:13:90:24:76:b4:72:c3:4e:bc:8f:c2:d0:95:54:
b9:c6:57:8c:69:72:38:04:0a:a4:3f:13:5c:c3:5c:34:c8:e7:
10:b6:1d:48:5c:bf:9c:d5:55:c3:2e:0a:bb:3e:2d:eb:e8:31:
d0:08:33:89:17:45:85:61:2b:89:32:63:6d:aa:fa:f9:be:46:
27:c7:7d:fd:21:fe:ed:1b:4a:30:f0:28:a0:b1:91:92:9e:8a:
9f:2c:11:b6:0c:58:3e:15:de:5c:12:93:3a:b7:ac:2b:21:76:
db:dd:f0:b0:89:18:1b:a4:5d:05:f0:09:07:da:04:1f:9a:80:
2f:85:ae:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:42 2026 by rpki-client