This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json)
Hash identifier: 5THaRrgogC5kkLyPRHPrBi9KhlEigNqgmKEr5oq7ODE=
Subject key identifier: 23:4E:C4:B3:11:BE:A3:C5:E6:99:62:2B:24:1F:A1:E4:E3:2B:6A:58
Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8
Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8
Certificate serial: 0658
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
Manifest number: 0653
Signing time: Sat 24 Jan 2026 21:53:37 +0000
Manifest this update: Sat 24 Jan 2026 21:53:37 +0000
Manifest next update: Sat 31 Jan 2026 21:53:37 +0000
Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: T+ANtDf4M1kbhdrsdlw43ovHGKF/efQRiNSQvapNxN0=)
2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: l216klg+EdFhZXizpzBgdSx3W8LT8OTJYqEFSmlWpW0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl
rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1624 (0x658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8
Validity
Not Before: Jan 24 21:53:37 2026 GMT
Not After : Jan 31 21:53:37 2026 GMT
Subject: CN=69753f61-f7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:c9:4f:e6:de:b7:2e:76:15:bb:06:6b:0d:
ba:c4:db:5b:ba:46:13:59:a2:87:16:c7:48:94:de:
48:bd:b7:81:7c:1c:1b:db:52:a9:dc:6e:61:3c:73:
b5:65:81:60:c5:b0:06:60:42:0f:b3:ff:95:f9:20:
93:57:d4:a3:f2:a2:f4:a9:be:47:52:5f:17:72:1f:
f8:6e:b8:ef:48:44:12:8e:14:9b:2c:ad:8f:83:fa:
ed:28:50:c4:0d:1a:ad:f3:1a:7d:e6:ce:8e:6a:cb:
3b:18:75:26:23:d7:44:c2:24:8a:ca:2f:fa:6f:f5:
e5:51:20:96:1d:4d:93:19:b1:20:58:05:0d:32:cb:
78:4a:20:e3:ce:03:c6:7d:ec:be:64:3f:ed:ef:85:
f2:f0:59:4f:07:dd:8f:bb:2b:d8:ca:52:b6:80:92:
2b:08:5e:ed:9a:36:e0:d7:47:ca:06:a5:a4:b7:09:
81:34:04:1f:dc:55:c2:d5:4c:ce:e9:6b:1f:31:56:
b5:76:ba:85:20:3d:26:c9:c4:78:c0:67:02:2c:df:
e8:20:a7:54:64:bd:36:95:44:97:e3:ef:b5:13:58:
6a:27:bc:b6:73:fa:d7:6d:93:40:4e:03:34:f2:09:
16:af:db:2a:22:b9:20:0d:19:3f:d2:ea:21:44:81:
90:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4E:C4:B3:11:BE:A3:C5:E6:99:62:2B:24:1F:A1:E4:E3:2B:6A:58
X509v3 Authority Key Identifier:
keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:0b:23:f5:e4:f3:55:14:4d:62:ad:40:5f:ed:13:51:c9:e9:
1a:ff:65:0e:e0:65:76:11:2a:2a:93:c9:32:ae:6d:49:07:d4:
5c:d4:6f:fe:ea:36:93:cc:d5:ff:ab:b5:2c:71:9c:5f:f2:e7:
a1:ec:ad:9c:18:48:41:43:18:9a:4e:40:d0:31:31:d0:4c:b9:
20:d3:ef:17:e2:03:26:82:25:b6:44:a2:c3:9f:b0:c1:d0:4d:
6d:f4:a8:12:96:44:19:fe:0a:3a:81:51:5f:69:4e:e5:84:d3:
35:25:22:66:f0:7d:8b:38:f5:50:72:db:4d:55:67:6d:9c:9b:
2c:ea:32:98:1c:f5:13:b7:fc:f8:ef:4e:98:98:ed:93:94:b4:
56:06:3d:71:ee:30:b6:ba:38:60:6d:86:9a:72:b1:a3:4e:a6:
ba:21:a7:0c:89:08:25:da:4e:fd:de:e6:da:04:65:bc:40:af:
bf:76:6c:6d:d8:99:b4:22:24:31:93:16:28:f5:6f:bf:d7:77:
25:97:1a:49:16:88:94:5c:fc:ba:92:cd:e5:aa:66:37:2c:e2:
ff:cc:10:23:ba:e5:cb:bc:cf:38:58:bc:fc:38:06:5c:d2:6c:
44:a6:a2:e6:27:f5:ef:e6:79:f2:f5:67:a7:a4:79:f5:2c:d8:
c8:b5:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:21:57 2026 by rpki-client