This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
File: wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json)
Hash identifier: ZEclO/dZq/cKoYlOzxamT01QdDw2C9y2d3IzW/QDsPU=
Subject key identifier: DA:70:06:C7:A8:12:75:C1:BB:17:DD:38:B6:E3:76:1B:71:8B:99:05
Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD
Certificate issuer: /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
Manifest number: 0136
Signing time: Sun 25 Jan 2026 03:42:35 +0000
Manifest this update: Sun 25 Jan 2026 03:42:35 +0000
Manifest next update: Sun 01 Feb 2026 03:42:35 +0000
Files and hashes: 1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: f8I1HEhgMx9nvOlVpqCt5iA1hWwFrrGIu2HX9krC3ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl
rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91653D3, serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
Validity
Not Before: Jan 25 03:42:35 2026 GMT
Not After : Feb 1 03:42:35 2026 GMT
Subject: CN=6975912b-21d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:55:ee:ee:3b:f5:75:b1:68:b1:10:eb:1b:
77:25:66:8b:8c:73:e6:a4:89:9b:b3:52:7b:67:69:
3f:d8:01:69:5e:6a:b0:4c:77:b1:13:18:a5:d3:22:
c7:c1:27:4f:7e:84:88:6c:f5:6f:0f:79:76:cc:a8:
99:84:88:c0:dc:f7:a8:a5:83:68:20:5c:24:39:00:
ed:ad:a3:a0:db:d6:35:09:da:31:f7:c6:4a:3f:4e:
c7:04:fc:03:79:ae:28:3f:6f:43:80:5b:6c:f0:55:
4f:28:39:3e:58:a2:aa:a6:52:39:43:c1:47:97:25:
0e:32:08:fb:d1:d0:c7:4a:04:ec:76:7a:43:c2:65:
d8:3b:4d:86:27:79:44:66:89:c4:fd:4f:0d:90:3c:
4f:3e:a8:08:b5:6c:b8:2c:73:26:6d:cf:b8:23:00:
1b:6f:d2:c2:2e:ef:ee:b3:de:57:53:62:7b:8f:4a:
35:4d:26:5f:9a:bf:83:3f:df:d0:3a:82:77:f5:33:
56:7f:26:2d:1f:9f:ae:39:04:8f:91:c9:37:ec:52:
26:ff:1f:cf:c2:da:f7:e9:de:46:c3:fe:96:bd:f1:
d8:e6:f9:26:2d:2a:20:2a:fc:81:97:b0:8d:9b:2f:
7b:21:06:3a:55:1d:c2:1b:e7:29:2c:05:4a:9b:5c:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:70:06:C7:A8:12:75:C1:BB:17:DD:38:B6:E3:76:1B:71:8B:99:05
X509v3 Authority Key Identifier:
keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:75:eb:9e:9d:1f:71:6a:30:cb:d6:94:05:d6:38:b5:f2:e9:
1c:8d:cf:9a:4c:da:8b:7c:7d:d3:83:bf:25:4f:39:05:18:9c:
2b:58:9e:45:f6:7d:61:bb:f9:08:e7:85:3a:8a:ff:36:d5:d8:
6a:98:fc:16:81:97:82:47:11:21:7e:6a:e2:07:2e:b3:05:88:
d0:07:49:24:38:c1:f3:f3:5a:8b:c2:11:1f:96:d6:b2:18:1f:
bb:ce:10:0d:a7:eb:42:17:ae:6a:b1:4a:af:59:e6:0a:63:a5:
a3:65:a0:2e:d1:bf:d8:c6:ee:3b:16:11:90:e3:3d:77:ea:35:
f9:3a:cb:5b:11:74:98:ea:c8:8b:01:32:80:8b:dd:22:d1:04:
b5:3b:e7:90:30:e8:42:c6:57:5e:09:0c:d7:f1:2e:70:07:c8:
a2:f2:92:1c:3f:25:ba:a6:28:fa:af:25:49:c4:e0:4a:bf:1b:
76:af:2f:f6:ec:70:8a:16:e6:35:1c:ec:26:17:48:9e:f4:75:
a8:bd:0e:17:01:f1:14:33:4e:5e:7d:e2:18:b5:a7:06:12:a6:
89:34:c4:0b:9e:93:15:e2:fa:91:8e:8f:f2:11:3a:33:7d:7a:
de:50:03:72:f7:26:f7:39:32:7b:f5:b9:45:ed:61:57:bb:51:
97:69:80:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:57:08 2026 by rpki-client