This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
File: W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft (raw, json)
Hash identifier: tMrO2vP6OoZqlSJodz4SK7E5Jpr3nOPo435P2eWVkMw=
Subject key identifier: 52:73:B7:DF:FE:27:95:61:83:6C:85:40:1E:AF:B7:E3:41:78:93:C8
Authority key identifier: 5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F
Certificate issuer: /CN=A9171882/serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
Manifest number: 0152
Signing time: Sun 25 Jan 2026 03:26:31 +0000
Manifest this update: Sun 25 Jan 2026 03:26:30 +0000
Manifest next update: Sun 01 Feb 2026 03:26:30 +0000
Files and hashes: 1: W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl (hash: xJ66Xz/HOTjWSqOF3BmTvtuK6gy1LqS5DoCsDebOAtY=)
2: FD990E7AF0B311EE9923BC84C4F9AE02.roa (hash: XWibtqlVyPdPRt9izLBx3ZYroA9isT1xxkvokh85YPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl
rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:26:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171882, serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F
Validity
Not Before: Jan 25 03:26:30 2026 GMT
Not After : Feb 1 03:26:30 2026 GMT
Subject: CN=69758d66-b062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:51:ad:bc:ae:44:4f:e7:32:37:c4:a7:f5:
69:eb:c3:49:a5:0f:13:d9:85:c7:b3:03:ca:9e:b1:
ff:e3:9f:a2:47:6c:c2:6e:9e:cf:44:ea:b5:8f:23:
d4:76:84:5a:90:0c:b7:00:e4:d9:60:d5:94:69:e9:
2f:68:02:9b:cd:95:ac:a1:ad:30:64:2e:64:80:b2:
b3:70:c4:60:15:e3:db:84:aa:c7:02:a1:ad:31:b0:
3d:56:8d:7d:0b:02:d1:04:e6:7e:8a:94:33:10:f9:
e6:84:56:8f:59:cd:65:75:16:9d:06:10:ad:0d:d9:
58:31:8e:2d:e5:73:f8:cf:3c:e1:ff:e4:3b:94:93:
e5:9a:ac:b7:24:5a:19:c6:3b:d8:c6:a6:bf:53:99:
62:19:d4:ed:10:7e:59:26:6f:f2:b4:78:85:73:3f:
a3:10:cc:67:40:8e:5a:3a:81:e9:0a:3a:49:e9:7f:
6e:0b:be:0d:0a:6a:53:fd:8a:f3:14:c3:f0:1d:9e:
0b:5a:ce:63:b2:74:02:2e:2c:be:33:42:c9:7c:e9:
4f:b8:15:24:99:8c:8a:9d:f3:ad:11:b4:98:19:14:
06:f8:5c:53:ad:8c:0f:c6:a0:59:f1:aa:7e:13:9b:
90:7e:e6:39:3d:13:35:00:89:97:83:22:b6:75:4b:
68:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:73:B7:DF:FE:27:95:61:83:6C:85:40:1E:AF:B7:E3:41:78:93:C8
X509v3 Authority Key Identifier:
keyid:5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:ff:e0:d9:38:5c:08:a5:b4:32:56:7e:a6:be:7c:33:b4:ba:
ec:cb:4f:fd:c1:0c:3f:db:b3:cf:29:5d:da:23:2b:55:5a:88:
f0:f2:c2:d9:29:d1:5d:e2:59:85:2c:de:07:91:6e:4a:cb:84:
ef:79:c7:ab:f5:f0:ca:ca:f0:7e:90:38:0a:d8:60:40:2c:f3:
6f:65:93:a1:f4:24:83:f5:84:05:6d:ef:ed:2a:d1:d0:8d:8c:
0f:4a:7f:7c:b4:e7:fd:32:01:da:3c:62:8d:14:e4:80:75:d4:
1f:96:c5:05:1b:eb:3c:af:15:26:62:f1:bb:e3:26:1b:e7:b7:
90:4a:a5:a3:13:07:e4:2c:c5:72:22:88:e6:8b:9b:f2:c9:e8:
a4:b6:fd:ae:11:fd:58:5f:da:22:23:b1:f3:18:f1:cf:9b:eb:
a3:d3:c8:8f:15:88:9a:ce:e0:ec:18:d7:05:6e:97:c5:31:bc:
38:0f:71:89:24:f9:57:a2:45:d4:28:1a:af:f6:e3:ae:01:74:
89:fc:b6:fd:11:f8:fb:06:94:98:b3:13:09:ef:e1:8b:38:0a:
3f:52:a0:28:8f:8d:91:47:f5:34:d4:2d:cd:f8:dc:80:5f:43:
1a:a6:52:9f:a9:2d:68:cc:22:d4:d9:47:a2:ad:56:a8:28:26:
2a:a6:18:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:14:26 2026 by rpki-client