This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
File: i16Our4JofST0QJTwaO5OTm_yoo.mft (raw, json)
Hash identifier: K2C4YBTDNLkFkl//OY82JGsyWtv8EBJEmGMe+48wu2M=
Subject key identifier: 45:53:08:85:C6:FF:F0:54:58:B3:52:9C:54:F7:B8:01:6A:88:52:39
Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
Certificate issuer: /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
Manifest number: F8
Signing time: Sun 25 Jan 2026 04:27:38 +0000
Manifest this update: Sun 25 Jan 2026 04:27:38 +0000
Manifest next update: Sun 01 Feb 2026 04:27:38 +0000
Files and hashes: 1: i16Our4JofST0QJTwaO5OTm_yoo.crl (hash: Gm+ThfJBWU2+lzeiDhCGqHQThmaGqtUhXHfwVr2V70g=)
2: D5A3117E85DF11EFA2C33754C4F9AE02.roa (hash: sJiJ1naY/4cR2Pgo/DEru8iJf9KG6T1eb6PbQmIPhNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91336DF, serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Validity
Not Before: Jan 25 04:27:38 2026 GMT
Not After : Feb 1 04:27:38 2026 GMT
Subject: CN=69759bba-2961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:51:a0:c5:b6:de:55:7e:ff:0a:28:f2:4f:
fd:ad:b7:36:4e:03:11:bc:dc:a4:7c:c4:27:76:bd:
85:d2:73:bd:b8:77:8c:73:c9:9d:14:8c:6b:8c:c8:
83:c3:73:2d:f5:13:b8:16:5e:bd:38:ed:03:57:61:
40:83:57:b0:a2:36:fb:53:d1:12:ae:60:c9:ea:6e:
f7:ad:eb:23:69:f4:80:40:14:72:bb:8a:17:f5:40:
fc:1b:0f:a9:cc:10:22:70:05:04:49:ad:30:9c:96:
85:4f:dc:43:54:ac:7c:c3:35:26:4b:04:a5:12:5e:
ca:d6:12:02:fd:c1:fd:6c:d2:87:55:cf:e2:5d:16:
e4:b5:5e:13:e4:85:f6:35:d7:1a:99:ab:94:d6:7c:
19:dd:d5:7f:a1:2c:49:02:a3:13:e1:75:98:fe:fa:
0b:9a:d2:81:fd:39:91:da:0e:60:90:5d:2e:d2:f8:
08:9d:ed:64:8e:5d:52:1f:e0:91:82:25:07:fa:ba:
cd:df:d6:6b:6d:b2:c5:2e:03:a3:7a:8a:9d:b4:38:
e3:ff:c7:d7:5c:84:50:62:e4:e9:c4:ae:c8:83:5d:
33:21:e9:fa:ef:dc:89:40:6b:e3:06:6a:05:3b:be:
e8:16:ec:93:90:66:22:29:ea:13:32:b3:da:82:11:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:53:08:85:C6:FF:F0:54:58:B3:52:9C:54:F7:B8:01:6A:88:52:39
X509v3 Authority Key Identifier:
keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e5:db:e9:2b:e5:7e:fa:52:02:05:78:ee:82:91:56:d5:51:
4c:ae:c3:e1:6a:28:e5:fd:60:8b:79:a4:16:95:44:e0:bc:65:
97:9b:3f:99:40:82:2e:06:fc:56:b4:51:02:8e:ff:cc:8e:35:
ec:dc:a2:52:38:ab:6b:c4:ed:0e:19:52:10:a2:85:c4:df:86:
0d:95:75:be:b7:07:b1:62:2e:0c:ab:5c:97:35:c9:8a:ea:19:
2a:44:47:ca:22:7f:f0:80:47:ac:35:9f:20:73:57:92:ed:9d:
54:ac:bc:77:7b:0e:94:28:73:3e:07:ef:b7:cd:8c:c8:5e:5b:
ff:ee:3e:70:ee:d3:31:cb:30:bd:5a:5a:6e:a2:7a:be:5d:b1:
90:70:81:d8:96:07:97:32:d7:3c:b3:34:4b:70:8e:68:50:9b:
3a:24:dd:94:5a:42:38:3e:e4:8f:65:72:24:25:8f:d9:17:d2:
d4:61:de:17:5e:80:32:e2:ff:11:95:f8:6b:ca:94:2f:94:23:
ab:d7:f5:36:43:36:61:dd:8e:29:66:f7:39:65:2d:49:15:2d:
92:2d:ea:c6:39:ca:ba:81:da:8f:93:42:36:5b:09:1d:c7:4a:
d1:f0:68:8a:54:e0:92:57:08:e8:18:65:62:86:90:9f:af:3e:
3c:70:f4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:59:20 2026 by rpki-client