This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
File: 8znaYdk6SUE-kH_FvRavlo3-mtA.mft (raw, json)
Hash identifier: 0we+ZJd4iP17xj5QJx0NI5sUcL399xof7S3f50eKQ7c=
Subject key identifier: B1:56:07:CF:25:34:EA:26:44:A4:65:5B:09:1E:02:6E:8C:DC:A8:73
Authority key identifier: F3:39:DA:61:D9:3A:49:41:3E:90:7F:C5:BD:16:AF:96:8D:FE:9A:D0
Certificate issuer: /CN=A913277C/serialNumber=F339DA61D93A49413E907FC5BD16AF968DFE9AD0
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
Manifest number: 0244
Signing time: Sun 25 Jan 2026 01:33:13 +0000
Manifest this update: Sun 25 Jan 2026 01:33:13 +0000
Manifest next update: Sun 01 Feb 2026 01:33:13 +0000
Files and hashes: 1: 8znaYdk6SUE-kH_FvRavlo3-mtA.crl (hash: 0onEjzHYVVerkZAAVobxV4lkZ/h4vwO4z1Bu/nzTj8w=)
2: 2737D20ED68411F0863107146AD3641D.roa (hash: W0ftfyUpGNJPK7aKdKdH7F5x28CQmHb8ftVhpHYN7OU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.crl
rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913277C, serialNumber=F339DA61D93A49413E907FC5BD16AF968DFE9AD0
Validity
Not Before: Jan 25 01:33:13 2026 GMT
Not After : Feb 1 01:33:13 2026 GMT
Subject: CN=697572d9-cdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:13:59:d4:69:39:68:34:5c:fd:05:c9:7c:72:
a3:c8:a1:bd:55:8b:78:71:67:9a:79:0d:da:a0:3f:
e0:f0:88:e1:4c:06:d8:cd:8d:d6:5f:0b:02:d6:9e:
a0:ad:38:5f:9f:03:30:57:09:8f:f1:a0:9a:bf:6b:
82:c7:88:e1:cc:5d:1f:2e:d9:76:78:f3:38:74:3b:
79:e7:f7:b8:a0:44:b0:d8:1d:23:14:ce:38:f1:18:
c8:c5:c7:77:08:2c:b8:36:7f:1d:fb:6f:64:c3:6b:
da:c9:3a:01:38:6b:b7:2d:ae:a1:05:b2:c3:79:ca:
c1:bd:1c:a4:ce:8b:7e:4f:22:06:9e:39:d6:16:d0:
d8:9c:29:f8:d6:2d:77:c2:fb:2f:69:5d:49:de:cd:
94:8c:f5:46:6f:d4:6d:dc:6c:da:ca:a1:35:bd:fa:
0d:51:25:6a:88:7a:5a:43:7f:9b:ad:65:84:48:d9:
e2:50:7e:44:3b:16:c7:6b:48:10:c6:c5:a9:83:de:
50:75:d0:4b:18:8a:b0:fb:51:26:65:be:05:32:c2:
72:de:af:11:e7:74:71:71:eb:af:4c:84:af:1b:8c:
b2:e6:b8:20:6b:ec:8d:3b:31:b2:81:e5:ef:09:6c:
95:24:cf:a8:bd:6c:9d:4a:34:b3:f6:88:a0:0a:e9:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:56:07:CF:25:34:EA:26:44:A4:65:5B:09:1E:02:6E:8C:DC:A8:73
X509v3 Authority Key Identifier:
keyid:F3:39:DA:61:D9:3A:49:41:3E:90:7F:C5:BD:16:AF:96:8D:FE:9A:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:80:d4:fc:94:f8:ef:a3:e6:7e:c8:d6:5c:fe:8d:9d:2e:52:
78:22:1b:30:a1:71:34:65:51:61:59:47:c7:ad:39:7b:2a:cf:
c4:d2:28:1c:7f:ab:3d:ef:f2:e6:99:7b:07:3f:e4:9c:01:87:
ac:bf:b4:9a:f2:a8:c1:86:a4:60:05:f7:73:54:14:d2:b5:53:
3f:55:56:ae:60:a0:b1:d5:f4:b9:7c:05:e1:87:80:57:6c:ac:
46:53:cd:15:28:d6:54:f9:77:7d:90:90:92:f4:fe:d4:17:2b:
93:46:22:8b:48:d5:df:f9:1a:9d:f9:90:d9:30:bb:db:75:82:
74:45:be:27:43:a8:de:ee:5f:7f:b3:43:db:3f:a5:bf:93:f0:
6e:66:fe:8c:ec:b6:48:39:54:5a:28:8e:67:8f:34:d8:ee:43:
86:1f:e7:39:08:47:08:a0:7e:c1:4e:d5:21:80:e2:5f:15:8d:
83:cf:67:07:28:c2:a8:37:5d:5a:ba:63:59:6d:42:4e:a1:cf:
5b:e6:ad:16:ab:b3:cb:30:eb:f7:4c:ba:93:9b:e7:95:17:1f:
0c:cf:3e:02:04:4e:af:72:73:64:ef:1c:e7:33:1c:c3:0d:aa:
e7:6f:64:ef:fd:e8:d5:eb:5e:01:a6:4f:14:f5:0a:67:ff:ef:
0f:89:83:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:34 2026 by rpki-client