This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
File: 6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft (raw, json)
Hash identifier: 9xjl0H+P5LsPJlUalYsxqbWWPd+dE5huPgUP5VUitIs=
Subject key identifier: 92:AE:9A:65:C1:E6:0A:11:40:94:B7:76:C9:23:35:10:A8:21:A1:BB
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Certificate issuer: /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial: 08E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
Manifest number: 08AC
Signing time: Sat 24 Jan 2026 20:03:49 +0000
Manifest this update: Sat 24 Jan 2026 20:03:48 +0000
Manifest next update: Sat 31 Jan 2026 20:03:48 +0000
Files and hashes: 1: 6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl (hash: J0cC6JnmEMAZ432Pfx1sF/e8cpeW5ai3WePiVCP3pNI=)
2: 04F97454F8EE11F0967655F96A6F56BC.roa (hash: OwlU8C8SG1NDanAv5sQxA+qc7yjspfS/vylGd6aqK9Q=)
3: 87448EFE3D1D11F0A469B051C4F9AE02.roa (hash: HgipkMBuwoWvuAFvEe44spWPZ3CIisx74k8F29IRrNc=)
4: DC814158DA8111F0A4C15A685FD3641D.roa (hash: SQ28bOxGGdf/j6MrxDSZ/ALEItfgjaMB/JQh9NmidPs=)
5: 03476D523FB011F097B5F864C4F9AE02.roa (hash: nR7G1WKVHgoejOczmztbNWOPg/UYf5k0nHYsKAHUYQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Validity
Not Before: Jan 24 20:03:48 2026 GMT
Not After : Jan 31 20:03:48 2026 GMT
Subject: CN=697525a4-1c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:f2:a7:a2:ab:48:f3:11:bc:d6:fe:08:c1:
35:d1:3d:65:e9:5d:39:e8:b5:f3:1e:26:67:f7:40:
d7:70:bb:d4:68:6f:3d:c0:7a:e3:0c:93:d0:6e:20:
96:0e:7c:79:b4:ff:35:e2:4f:f0:62:09:5c:bf:dc:
15:22:17:ef:b1:00:e2:a1:6d:d5:3c:c1:9b:a0:8c:
43:32:91:4a:62:c0:a6:c2:21:1e:26:05:6a:a7:5c:
54:4c:ce:2d:85:29:f7:00:2a:de:d9:58:93:ec:e8:
a4:ff:e7:25:f7:11:7a:29:ad:b4:b5:ac:f1:2c:28:
a5:52:d6:04:c4:fe:80:da:3c:9e:ec:be:23:26:b4:
9a:f4:c6:18:4d:a6:a4:bc:7e:8c:f4:50:08:0a:66:
fb:39:01:c8:03:ea:86:7e:dc:82:25:9c:dc:11:c2:
50:7a:b5:cb:9c:c8:eb:c2:a6:6c:11:cb:41:24:f9:
99:4a:2a:a4:9f:e5:dc:f0:fb:54:f4:ab:db:21:22:
09:cf:1a:e0:16:39:2e:eb:cf:9a:61:3a:12:3c:69:
72:5c:ff:92:10:ae:08:50:76:22:be:b2:0c:e7:41:
92:f5:f2:d5:97:61:1b:50:ea:b7:03:5d:17:c9:cc:
ad:48:b6:2f:41:18:62:0d:43:2b:ea:69:df:b7:22:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AE:9A:65:C1:E6:0A:11:40:94:B7:76:C9:23:35:10:A8:21:A1:BB
X509v3 Authority Key Identifier:
keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:be:6e:ae:7e:fc:c4:2b:17:dc:fc:d9:b7:1d:b8:d0:8f:93:
c8:77:da:f0:4d:76:60:68:dd:a5:be:34:69:cc:ac:78:e3:e9:
37:00:69:6c:2e:a9:79:49:be:c3:d8:8b:21:b7:04:da:cd:ef:
53:5b:af:5d:58:8a:0a:2d:2e:4f:fb:a0:31:4a:7b:f4:92:61:
22:19:92:2c:be:47:e7:7d:d7:ce:79:a1:8f:8d:1c:50:64:ec:
f0:3f:50:92:d4:ec:6e:6a:ff:18:6f:50:1b:4e:91:56:b0:95:
d3:81:25:c3:ab:a7:68:1b:c0:6a:c3:bd:1d:74:9f:15:de:b1:
b2:4e:7c:74:1e:41:ef:ab:b1:4a:a9:c4:a8:57:d9:d2:00:a5:
78:32:a9:eb:ed:2c:cf:70:78:4b:90:20:89:b6:1e:05:dc:56:
05:3c:c6:08:13:e5:60:54:49:1f:52:d2:a3:8f:a7:7f:4a:3c:
d2:3c:dc:23:f6:00:63:d4:62:03:7b:7b:c5:77:d7:2d:7e:b0:
1f:e7:8b:34:94:17:c6:71:ed:2d:92:47:e6:fe:f4:b0:97:89:
3e:90:1a:ef:d4:9d:20:a0:45:1a:d5:f8:aa:10:35:ea:f0:78:
c7:d1:ca:a9:cd:d9:ac:61:59:25:66:fb:26:d1:dc:b1:1d:ef:
c1:44:8b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:24:24 2026 by rpki-client