This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json)
Hash identifier: S8D9qL7iiyn4Gn92F5K/TWwd25aR2R8ff8vSZ2m3qXE=
Subject key identifier: 1D:C7:56:98:8A:BB:9A:52:8C:71:CA:3F:C2:43:F8:EE:DC:DA:34:CC
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
Manifest number: 01FC
Signing time: Sun 25 Jan 2026 01:45:23 +0000
Manifest this update: Sun 25 Jan 2026 01:45:23 +0000
Manifest next update: Sun 01 Feb 2026 01:45:23 +0000
Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: 6ht9Xq0A/bH7uG6RXSANAydVwoqgJagVfF/Sl5FkAvo=)
2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: f37dHVQCBKGAv6cZ++QH+hDhUU+kBGU4CSkotJ/zJb4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Validity
Not Before: Jan 25 01:45:23 2026 GMT
Not After : Feb 1 01:45:23 2026 GMT
Subject: CN=697575b3-7700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:ac:0e:f5:3f:d3:1a:d1:dc:39:9a:ce:32:
14:c2:37:3f:07:ee:bf:a5:12:6d:87:fc:70:f7:3d:
eb:d1:3a:46:9d:53:55:fe:9d:ce:29:79:83:0f:d3:
85:c1:21:b8:60:2b:71:2e:72:1e:da:b5:cb:fe:d5:
a0:27:93:bb:35:bd:37:26:35:b9:38:5b:fa:ea:a1:
c2:5e:e8:3f:f5:0d:58:aa:b2:41:5e:74:a4:c4:fc:
ac:3f:0f:27:4c:43:81:46:6c:19:26:b9:8b:60:64:
1e:99:74:bd:10:1d:d3:79:fa:aa:45:5c:54:aa:e6:
16:2e:72:22:fa:f9:31:e6:82:a3:88:2b:40:56:4b:
6b:64:f0:7e:76:ed:c0:37:a2:4d:0d:b6:5b:2a:7f:
0d:97:fc:0a:70:c0:1e:f6:50:62:d1:86:14:78:27:
eb:08:d2:7c:1a:d0:3c:f5:ed:4d:af:ea:27:20:cc:
bb:96:30:26:2f:43:ed:00:80:e3:31:8e:4e:24:a1:
b9:c2:fa:41:75:a0:e7:1d:e6:27:ca:1f:2c:72:e8:
3b:5a:bd:99:59:a8:c4:dd:61:09:be:c6:fa:3b:20:
f2:6b:ef:25:d9:a5:4c:60:00:33:83:0f:f4:a3:2f:
8d:7c:6d:f2:29:70:a5:fa:38:6e:e8:29:7b:c1:36:
06:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C7:56:98:8A:BB:9A:52:8C:71:CA:3F:C2:43:F8:EE:DC:DA:34:CC
X509v3 Authority Key Identifier:
keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:33:58:d2:d8:9b:b2:60:d6:84:ff:6d:39:2c:05:5a:84:3c:
e5:b3:c1:22:26:15:86:3a:3e:00:3b:e7:48:dd:b5:0d:e2:8c:
e3:71:43:00:a0:46:df:52:a5:a2:dd:27:4c:3f:bf:a8:cc:c5:
dc:41:97:92:22:31:2a:18:68:f0:23:aa:d3:07:61:48:ab:0e:
4a:e4:60:0b:a4:29:ed:04:44:ac:32:b6:4f:56:26:17:a6:c4:
bb:f8:5e:e4:3a:38:8e:26:8b:31:fe:a9:3e:80:9d:9d:76:85:
ff:b0:10:3d:38:41:fd:21:af:5f:ed:14:fb:54:d8:a9:bb:d0:
ab:09:0d:60:9e:ab:11:fd:39:aa:6e:da:3e:89:27:de:a0:3d:
e1:66:51:bf:ce:fa:e0:61:09:16:b1:0a:59:8e:80:e0:70:62:
20:1c:17:c8:f2:80:c2:dc:5b:a8:b2:03:0b:3a:b7:1f:58:1f:
8c:8e:e8:53:4a:17:6d:0e:52:d8:e8:67:a7:ad:60:dd:0a:d2:
9d:32:ff:21:66:01:74:fa:93:6c:7c:15:7e:cb:10:eb:05:14:
98:7a:f5:1e:b4:11:58:96:57:4c:0f:91:75:6f:67:f6:20:8e:
d3:51:8a:09:c9:57:36:a6:18:02:91:6e:3c:5f:e6:ce:86:6a:
ff:2a:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:32 2026 by rpki-client