This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
File: 8gl4uKIsE6CwK586X8LUiKuovtU.mft (raw, json)
Hash identifier: ptATkfUchZwz5Di8Dbj2XKiK1chC9ffDKvQKKGEnZQE=
Subject key identifier: FD:A5:AD:3C:5F:35:94:6B:96:0E:E2:B7:73:4B:3B:DB:BB:05:B7:FE
Authority key identifier: F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5
Certificate issuer: /CN=A914653C/serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5
Certificate serial: 0A6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
Manifest number: 0A64
Signing time: Sat 24 Jan 2026 19:06:12 +0000
Manifest this update: Sat 24 Jan 2026 19:06:12 +0000
Manifest next update: Sat 31 Jan 2026 19:06:12 +0000
Files and hashes: 1: 8gl4uKIsE6CwK586X8LUiKuovtU.crl (hash: dNQdak3QFQ8WDPO/CnPukOF/cI/FYMmr0QhJWGTRYkg=)
2: BD7E578079E011EA8DD5907FC4F9AE02.roa (hash: iYxIY6VXdTf7gHnwepU+/VGZkh/V1c1cIjc+gsTh8TE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl
rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914653C, serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5
Validity
Not Before: Jan 24 19:06:12 2026 GMT
Not After : Jan 31 19:06:12 2026 GMT
Subject: CN=69751824-b37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:d4:76:a3:9b:d1:a9:94:0c:6d:4b:9c:d8:
34:f6:bb:20:4f:86:65:62:6e:43:a4:8e:cf:37:61:
80:5b:a6:f5:8b:fb:9c:10:c0:e8:38:32:61:43:d1:
29:ed:77:0f:5f:ff:df:42:d4:2a:16:13:e7:e9:f5:
72:78:dc:0c:1a:4a:eb:29:fb:9a:a9:7e:5d:5c:14:
bb:a8:1a:fc:04:29:81:36:3b:fc:c6:b7:b3:87:7f:
62:3f:7a:24:69:2a:c2:db:2c:8b:9b:e4:24:8d:83:
69:38:e3:9f:96:78:b2:b2:be:00:99:30:31:b2:f4:
5f:ec:0d:f8:35:40:d5:a3:bf:6d:0b:c0:c6:b4:38:
39:22:32:0b:c8:a4:4c:01:37:7c:8c:35:e0:b4:99:
35:99:19:51:f3:11:f6:2a:5e:df:d0:3b:25:92:8b:
0e:67:1e:3a:1a:3e:4c:ae:47:09:29:b3:28:f5:7d:
9d:d3:fc:29:a1:c2:0c:2c:f1:81:fe:ff:53:80:54:
27:85:8b:65:8f:39:f8:40:5b:ed:41:cd:99:67:fc:
d6:8c:a3:f1:3c:29:d4:a3:a3:92:50:49:ce:ea:72:
cc:d0:01:06:f8:eb:9b:3c:ce:0f:ce:5d:85:08:cf:
2e:60:84:4c:e4:66:e7:f2:eb:d1:09:22:9f:42:36:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A5:AD:3C:5F:35:94:6B:96:0E:E2:B7:73:4B:3B:DB:BB:05:B7:FE
X509v3 Authority Key Identifier:
keyid:F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:7b:16:e1:62:d1:de:bb:23:65:09:eb:0a:b2:09:cf:7f:0a:
b1:dc:81:8f:75:85:49:46:50:b9:22:61:5f:80:7f:51:bb:bf:
9c:f1:c8:a5:61:b1:55:63:7d:ef:d3:d0:7e:e7:3a:50:ec:91:
76:4d:cf:04:a5:8a:bf:70:2d:8d:1a:90:6f:27:46:df:ea:43:
4a:2b:9f:cb:1f:63:81:f3:50:fd:12:5a:77:63:b5:d6:df:09:
6a:20:e9:f5:81:f7:bd:90:4c:b2:49:3d:4d:a9:b6:57:a6:6b:
c7:63:3d:58:73:d1:64:b5:71:e3:c1:44:73:19:ef:1d:51:be:
b8:77:e6:87:6d:d4:b6:b3:33:16:08:b8:a1:e6:1b:62:e3:47:
d4:5d:72:7d:67:34:1d:8f:c3:b5:ea:52:ba:c3:f7:0c:06:33:
5b:28:e4:e1:22:1a:6c:71:a7:f7:87:ad:39:14:19:ef:ee:a7:
aa:98:20:27:2d:16:08:27:32:aa:36:71:4b:af:1b:01:f3:9d:
c7:cd:cf:ca:0e:7c:d1:d4:50:dc:a5:f0:2b:e2:c5:c2:86:93:
9d:f5:50:94:a5:3b:13:82:80:7b:cc:9a:67:fa:85:de:f9:4b:
ec:35:be:b7:ac:b7:26:7b:a3:c8:7f:54:42:7e:cd:d1:84:a7:
3d:ae:06:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:54 2026 by rpki-client