This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
File: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft (raw, json)
Hash identifier: KCSZ6SoBrCd7L4dtOtFIVJzyVBulgYo+7Wky5eZ4xW8=
Subject key identifier: 3F:41:0D:F2:93:C6:AE:4C:67:EC:78:3B:CF:89:6F:E5:E9:C0:E4:8D
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Certificate issuer: /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial: 03E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
Manifest number: 03D2
Signing time: Sat 24 Jan 2026 23:48:43 +0000
Manifest this update: Sat 24 Jan 2026 23:48:42 +0000
Manifest next update: Sat 31 Jan 2026 23:48:42 +0000
Files and hashes: 1: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl (hash: yDN9HXU1qTjR+d0+PDmZo8Oi3AfsKQGU5JZ8p2g2L8M=)
2: 1523921276EF11EDB8F27034C4F9AE02.roa (hash: EwarSE7FdSsWxJK/6fA7laQx/m5iykaPdE8HA2hirxU=)
3: 3C70D06076D011EDBAECD665C4F9AE02.roa (hash: Xtx2mhfHixey8LLZfgW1KcyW2Mk8jnrUzWyvxzziIro=)
4: 422287F0D30511EE8753D541C4F9AE02.roa (hash: bJTC0uNpCv3Td2qGJj2W7jYKPuVi7cZig3G6jfTfNJs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 997 (0x3e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Validity
Not Before: Jan 24 23:48:42 2026 GMT
Not After : Jan 31 23:48:42 2026 GMT
Subject: CN=69755a5a-bb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:2f:ed:6f:5a:03:81:5c:96:d0:80:4e:24:
83:79:8c:30:b5:f0:36:a2:45:41:33:3c:c5:3c:e4:
55:b5:39:30:aa:f2:4a:89:2d:d3:b7:ea:75:e8:d7:
04:41:93:d0:20:44:f0:1c:f6:28:a0:8f:e8:6e:ce:
a6:cd:77:ed:ff:7c:83:c7:f4:f2:58:3b:71:5b:be:
6c:44:3f:31:36:7e:c3:dd:f0:ea:71:ce:b8:14:e7:
f1:2c:5d:e9:22:89:61:c7:8f:e5:ce:50:10:00:d2:
82:e4:01:15:0e:91:93:14:98:91:21:79:02:f6:03:
67:e9:c1:13:59:df:51:a6:00:aa:33:bf:c7:5b:c2:
9e:d3:0e:58:76:ea:5d:30:93:43:a7:e4:be:0a:0e:
6f:52:ac:f8:76:40:e2:82:a9:f7:50:6e:86:cf:28:
cb:5f:b6:76:73:de:06:8a:e7:91:8e:bd:a7:c9:b7:
6d:a4:89:1f:ba:41:62:75:e0:8c:47:e4:c5:6c:7b:
4a:60:69:c6:ce:6e:d6:a2:c1:37:ff:81:23:64:ae:
42:7c:fe:6a:a6:dc:09:a4:e0:06:dc:d5:d9:ba:69:
bf:f8:92:c9:6b:24:aa:35:30:99:53:ae:be:84:30:
11:75:25:00:fc:5c:7c:58:0a:2b:e1:9b:b9:56:bb:
34:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:41:0D:F2:93:C6:AE:4C:67:EC:78:3B:CF:89:6F:E5:E9:C0:E4:8D
X509v3 Authority Key Identifier:
keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a7:b5:3d:a9:80:2b:72:3c:48:c5:25:0d:3d:be:bb:a9:51:
be:9d:39:1a:0f:cb:ba:77:3f:87:58:64:9b:84:86:09:b0:77:
77:92:a1:2e:09:85:97:b5:df:6a:87:db:d6:c8:19:29:89:05:
81:15:c3:2b:ef:32:83:e2:a3:dd:ed:43:df:f4:2b:5b:f4:94:
80:f4:0e:7b:b1:51:f1:09:e1:08:0c:6c:6f:18:63:2a:e2:45:
2e:8b:78:1f:e5:55:f2:3c:00:1d:27:66:32:d6:f9:44:99:39:
4d:f1:36:47:c9:c7:12:e2:fd:6f:79:d8:1f:69:10:05:f6:32:
74:2d:39:b5:f3:6f:7c:19:66:a4:45:43:f7:81:e7:ba:0a:0a:
04:f7:df:08:bc:d1:d2:fb:f8:eb:3a:77:fa:41:73:e8:1e:41:
93:fa:1f:e6:c9:ef:86:2c:d8:70:94:7f:b0:df:a4:e5:58:f1:
79:4b:0b:4c:e3:92:1d:b9:11:41:f1:e5:ed:1f:3c:f0:6d:57:
95:6d:0d:e8:c2:59:31:85:b3:c7:18:45:fe:33:4a:7c:b0:d9:
c9:86:c0:09:65:ae:07:d8:4d:e5:ed:d9:18:19:9d:9a:10:f0:
68:a6:d3:f3:1e:81:4a:fe:6a:65:17:45:78:df:b9:32:1a:15:
a1:bd:81:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjlGNDIxMTAvBgNVBAUTKERCQUZGQzBDMDAyRDQzREM0NzM0NkJDNEUxOUZFQjNF
QkYzQkI0RDUwHhcNMjYwMTI0MjM0ODQyWhcNMjYwMTMxMjM0ODQyWjAYMRYwFAYD
VQQDDA02OTc1NWE1YS1iYjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxL0v7W9aA4FcltCATiSDeYwwtfA2okVBMzzFPORVtTkwqvJKiS3Tt+p16NcE
QZPQIETwHPYooI/obs6mzXft/3yDx/TyWDtxW75sRD8xNn7D3fDqcc64FOfxLF3p
Iolhx4/lzlAQANKC5AEVDpGTFJiRIXkC9gNn6cETWd9RpgCqM7/HW8Ke0w5Ydupd
MJNDp+S+Cg5vUqz4dkDigqn3UG6GzyjLX7Z2c94GiueRjr2nybdtpIkfukFideCM
R+TFbHtKYGnGzm7WosE3/4EjZK5CfP5qptwJpOAG3NXZumm/+JLJaySqNTCZU66+
hDARdSUA/Fx8WAor4Zu5Vrs0bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9BDfKT
xq5MZ+x4O8+Jb+XpwOSNMB8GA1UdIwQYMBaAFNuv/AwALUPcRzRrxOGf6z6/O7TV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUY0Mi82MUY2MDFGQ0JB
MjQxMUVDOTc1MEI5NEFDNEY5QUUwMi8yNl84REFBdFE5eEhOR3ZFNFpfclByODd0
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI2XzhEQUF0UTl4SE5HdkU0Wl9yUHI4N3ROVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OUY0Mi82MUY2MDFGQ0JBMjQxMUVDOTc1MEI5NEFDNEY5QUUwMi8yNl84REFBdFE5
eEhOR3ZFNFpfclByODd0TlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNp7U9qYArcjxIxSUNPb67qVG+nTkaD8u6dz+HWGSbhIYJsHd3kqEu
CYWXtd9qh9vWyBkpiQWBFcMr7zKD4qPd7UPf9Ctb9JSA9A57sVHxCeEIDGxvGGMq
4kUui3gf5VXyPAAdJ2Yy1vlEmTlN8TZHyccS4v1vedgfaRAF9jJ0LTm18298GWak
RUP3gee6CgoE998IvNHS+/jrOnf6QXPoHkGT+h/mye+GLNhwlH+w36TlWPF5SwtM
45IduRFB8eXtHzzwbVeVbQ3owlkxhbPHGEX+M0p8sNnJhsAJZa4H2E3l7dkYGZ2a
EPBoptPzHoFK/mplF0V437kyGhWhvYEn
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:42 2026 by rpki-client