This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
File: 8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json)
Hash identifier: lz6r0cqlFmsOh/R6XbxaN44GJvJOPUGHZMT+rNOeKIc=
Subject key identifier: 00:7E:82:2A:2A:CC:2C:9F:A3:73:6E:4A:08:0F:78:0C:95:52:13:E5
Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
Manifest number: 0126
Signing time: Sun 25 Jan 2026 03:53:44 +0000
Manifest this update: Sun 25 Jan 2026 03:53:44 +0000
Manifest next update: Sun 01 Feb 2026 03:53:44 +0000
Files and hashes: 1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: Xsf3sakgMoXhXuf8nTXL8jydmQyCNIrdyKAqtt3AZ7w=)
2: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: vmrZgLw19B5ritq7z4vG50pAGmXRwXJvrAIY9L3sz/4=)
3: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: P4Mm2VNQngkGMc8lCO6eHVGOp7Fy5SVP9GQX/B339mE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Validity
Not Before: Jan 25 03:53:44 2026 GMT
Not After : Feb 1 03:53:44 2026 GMT
Subject: CN=697593c8-94a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:45:cf:df:4e:b7:48:75:5e:91:2f:21:66:
e5:77:b8:94:32:a3:fe:cf:00:88:dd:cd:8a:56:6f:
26:5d:e9:f1:16:a0:da:f0:54:d6:26:7b:17:e8:f4:
1d:4c:f4:c8:06:65:77:4e:55:fa:2a:98:5d:94:5f:
b2:69:b6:a4:93:9d:b4:80:76:ce:be:be:3f:43:80:
aa:0f:e8:b6:7e:d6:43:ba:0a:56:ba:17:1b:88:4e:
16:b3:9f:bb:1b:2a:2b:12:a0:ce:49:43:9f:17:38:
8e:b7:4e:03:3b:b0:df:29:1e:45:29:6c:45:2d:e2:
0a:a4:5d:d1:62:07:50:4a:f0:ee:bf:6d:80:3b:3b:
11:45:a9:62:ec:d0:5e:11:be:29:46:bc:b7:da:a0:
1c:76:18:ac:80:48:a7:f5:ac:11:10:63:8a:c4:8b:
56:9e:93:bf:0c:fe:59:0f:cf:2f:67:cd:e9:8b:eb:
58:a7:18:7c:78:ee:3e:b5:82:21:85:73:2e:30:9c:
6e:6d:6a:95:8c:06:cc:fa:82:10:af:03:ff:7d:93:
80:5f:83:b7:ee:10:a3:a7:65:06:b3:43:97:76:7a:
30:b2:02:c2:c2:85:9a:49:21:23:f2:ca:54:3b:0f:
28:f0:0a:26:96:67:d4:4c:eb:37:db:bd:2b:76:f5:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7E:82:2A:2A:CC:2C:9F:A3:73:6E:4A:08:0F:78:0C:95:52:13:E5
X509v3 Authority Key Identifier:
keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:f5:d2:a9:96:2d:3e:d7:69:8d:3b:f3:02:61:24:58:54:c8:
0e:c1:1f:b0:4e:10:f5:ef:bd:db:c8:4d:4e:0c:76:6d:b8:d5:
fa:20:55:b3:d3:21:bf:b4:08:ba:d1:fa:35:25:f4:73:b4:47:
81:be:7d:08:f0:00:bd:9c:3c:51:7b:5f:79:30:41:fb:8c:92:
16:ec:05:6c:37:87:9b:7b:34:d2:09:72:3f:7e:bc:d7:dc:cc:
06:76:7a:91:84:de:35:a4:5f:3f:f7:6a:62:ca:83:0f:d7:a1:
da:2c:8e:2c:d7:c4:b0:db:3e:ba:e1:d6:da:02:1b:68:c0:6c:
f4:59:a4:90:44:ee:18:0f:92:94:b7:90:fc:33:7a:30:af:87:
02:16:50:ed:a7:2b:ac:91:14:7c:c0:10:27:c8:35:0e:a6:d7:
99:0c:71:4d:b1:cb:2f:85:c0:34:d3:94:8c:35:99:29:b8:62:
95:c7:28:79:d2:c1:68:0f:69:7d:38:24:7c:f3:18:f7:f5:f0:
c1:34:b2:f9:7a:98:13:50:6e:57:bb:be:f2:fd:5b:35:16:01:
e2:7e:fc:4e:5e:de:8c:e8:45:9d:fe:0e:0a:b5:b5:72:9a:76:
6d:23:a6:a8:64:d1:c3:3e:b4:7b:ec:d3:c2:21:a6:81:44:74:
f5:f5:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:42:34 2026 by rpki-client