This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
File: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft (raw, json)
Hash identifier: Qcwgu4jhCMxPELZAwni1PwAo12xfKjyR6ealm6j2ePQ=
Subject key identifier: C4:4B:2F:CF:9E:61:D4:70:85:00:36:64:07:10:7D:F5:33:7A:B5:CF
Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A
Certificate issuer: /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
Manifest number: B7
Signing time: Sun 25 Jan 2026 05:12:36 +0000
Manifest this update: Sun 25 Jan 2026 05:12:35 +0000
Manifest next update: Sun 01 Feb 2026 05:12:35 +0000
Files and hashes: 1: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl (hash: Eqil8eiN2I0UPch4BBCaxfjE0fYm73Y490c4cyhxtDM=)
2: A42925E8DFDA11EFB5E94125C4F9AE02.roa (hash: mx4Ct5Tnd5YkFq5qkT60Yq1dgh6KZfYC5nrKRxnyy28=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl
rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A
Validity
Not Before: Jan 25 05:12:35 2026 GMT
Not After : Feb 1 05:12:35 2026 GMT
Subject: CN=6975a644-59e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:03:77:8f:6a:61:d7:19:a0:45:3b:bf:8b:
a3:e5:4d:1f:72:ec:cb:0f:25:3c:53:94:d0:11:d3:
e9:8a:0c:f9:21:33:a9:d8:f8:5c:73:50:c9:08:49:
44:0c:e8:51:cf:04:5f:70:c7:43:47:14:13:f4:a0:
15:24:2f:2b:a8:af:ee:21:e6:cc:88:04:06:ca:eb:
c9:e7:73:13:29:fa:f4:6b:5e:2e:f0:89:c5:c0:85:
9e:e9:07:89:c4:a4:33:ae:3f:66:73:19:5c:1a:ed:
5b:41:e0:fd:81:f7:23:f1:9f:41:3b:92:3d:70:7e:
14:58:0d:8c:aa:ca:94:00:fc:02:f5:44:10:28:4f:
a8:ae:b0:38:e4:2e:6a:1c:c6:34:ec:84:16:8f:28:
36:02:5b:af:7a:e7:31:7f:b4:25:41:78:5c:1a:bb:
de:81:41:14:8a:9c:4a:73:be:b4:ce:57:e8:71:fe:
f4:fe:65:f4:0b:75:c5:98:90:7f:7f:59:ae:0a:34:
e6:29:ff:92:e2:92:85:ec:77:10:06:5b:9b:58:11:
97:99:52:e5:a1:7c:87:44:d5:c5:4c:52:fe:bc:5a:
51:48:84:2d:71:79:f0:0e:64:a7:f1:ef:6b:63:67:
4a:83:bc:59:99:10:7e:e4:65:fd:7e:e9:4f:a2:2f:
c8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4B:2F:CF:9E:61:D4:70:85:00:36:64:07:10:7D:F5:33:7A:B5:CF
X509v3 Authority Key Identifier:
keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:15:11:dd:0e:4a:0e:82:1a:e5:5e:1b:57:5f:3a:4e:59:13:
a9:b8:89:32:a3:95:00:1c:cb:d1:2d:d8:2a:c1:e7:67:d6:15:
a7:be:42:bc:d3:40:33:b6:4e:80:cb:64:ab:4a:d9:7d:f4:18:
d2:66:37:5b:c9:e0:c2:8f:08:8f:f7:93:4b:43:64:dc:26:b6:
13:86:ba:51:46:70:51:10:32:8d:85:30:07:d5:22:8e:0c:00:
10:e3:29:9b:42:86:a9:79:7f:ea:98:83:4c:ce:b2:33:db:97:
3c:e8:c0:60:e5:32:bd:75:22:23:1b:4a:b2:7f:b3:38:a8:8a:
88:0d:a0:96:ca:53:eb:2c:97:ca:fb:da:90:41:cc:48:fb:49:
ee:10:3b:75:94:b4:c1:41:61:30:9c:82:ac:ec:cc:d9:93:96:
7e:00:bf:ee:53:2f:f8:b3:58:23:6f:9d:6d:7d:68:2e:78:ac:
bf:86:54:1a:67:c6:92:58:d2:a3:a1:f4:97:81:42:6e:04:51:
08:41:b6:5e:98:c2:63:8f:92:3b:6b:02:f8:b4:fe:0b:f9:fe:
20:52:15:a6:5a:84:60:9d:b6:21:0f:0a:34:c4:4a:dd:37:c3:
06:b4:9a:ce:b3:4f:1b:3d:dd:53:b2:06:17:8d:e4:2e:0c:6a:
37:59:9f:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5RjUxMTAvBgNVBAUTKEYxMjg5NTc5MjExN0U5MDcwM0EwMDIwRjRGMzU5ODMx
REIyRjkzN0EwHhcNMjYwMTI1MDUxMjM1WhcNMjYwMjAxMDUxMjM1WjAYMRYwFAYD
VQQDDA02OTc1YTY0NC01OWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyDkDd49qYdcZoEU7v4uj5U0fcuzLDyU8U5TQEdPpigz5ITOp2Phcc1DJCElE
DOhRzwRfcMdDRxQT9KAVJC8rqK/uIebMiAQGyuvJ53MTKfr0a14u8InFwIWe6QeJ
xKQzrj9mcxlcGu1bQeD9gfcj8Z9BO5I9cH4UWA2MqsqUAPwC9UQQKE+orrA45C5q
HMY07IQWjyg2Aluveucxf7QlQXhcGrvegUEUipxKc760zlfocf70/mX0C3XFmJB/
f1muCjTmKf+S4pKF7HcQBlubWBGXmVLloXyHRNXFTFL+vFpRSIQtcXnwDmSn8e9r
Y2dKg7xZmRB+5GX9fulPoi/IMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRLL8+e
YdRwhQA2ZAcQffUzerXPMB8GA1UdIwQYMBaAFPEolXkhF+kHA6ACD081mDHbL5N6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zMjgzRTdENERG
REExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZRY0RvQUlQVHpXWU1kc3Zr
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhTaVZlU0VYNlFjRG9BSVBUeldZTWRzdmszby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDlGNS8zMjgzRTdENERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZR
Y0RvQUlQVHpXWU1kc3ZrM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+FRHdDkoOghrlXhtXXzpOWROpuIkyo5UAHMvRLdgqwedn1hWnvkK8
00Aztk6Ay2SrStl99BjSZjdbyeDCjwiP95NLQ2TcJrYThrpRRnBREDKNhTAH1SKO
DAAQ4ymbQoapeX/qmINMzrIz25c86MBg5TK9dSIjG0qyf7M4qIqIDaCWylPrLJfK
+9qQQcxI+0nuEDt1lLTBQWEwnIKs7MzZk5Z+AL/uUy/4s1gjb51tfWgueKy/hlQa
Z8aSWNKjofSXgUJuBFEIQbZemMJjj5I7awL4tP4L+f4gUhWmWoRgnbYhDwo0xErd
N8MGtJrOs08bPd1TsgYXjeQuDGo3WZ+C
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:11:37 2026 by rpki-client