This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft
File: 6N3s7Bb-NIXVthplph7s11qYG0M.mft (raw, json)
Hash identifier: JRvhqTp6ZfNna/VMCFwud1tfCo/i09V6BOf6vPRxay4=
Subject key identifier: 12:3A:6D:88:80:0A:BB:66:FF:13:01:A9:43:0E:F7:AE:71:BA:53:A9
Authority key identifier: E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43
Certificate issuer: /CN=A9172EF8/serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43
Certificate serial: 088B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft
Manifest number: 0881
Signing time: Sat 24 Jan 2026 19:59:10 +0000
Manifest this update: Sat 24 Jan 2026 19:59:10 +0000
Manifest next update: Sat 31 Jan 2026 19:59:10 +0000
Files and hashes: 1: 6N3s7Bb-NIXVthplph7s11qYG0M.crl (hash: n1cxIXTD1EbTmquuarxbp889qaSJC8CtJmWs7+fwHz8=)
2: 82001182986511EFBFE02134C4F9AE02.roa (hash: TLQPV8U5lGZB70Fi67w4+2isfFUOL9hf77z3nqbL1o8=)
3: 879AF91C9A8C11EF98A18D7FC4F9AE02.roa (hash: 6OWIgJkNxstxhvie89g5RYpzHfbz0XePQatIfAXwpWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl
rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2187 (0x88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172EF8, serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43
Validity
Not Before: Jan 24 19:59:10 2026 GMT
Not After : Jan 31 19:59:10 2026 GMT
Subject: CN=6975248e-4a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:6b:ae:ac:5d:7a:86:20:5b:3d:18:7e:c3:
8a:9f:48:be:d5:35:50:bd:8f:62:03:97:08:8b:d2:
59:7d:d5:04:97:e5:5f:8d:5f:49:23:f5:b3:e4:c1:
60:33:4a:40:07:a7:9c:96:31:f4:31:db:de:da:2a:
00:5b:39:a9:45:2b:52:7b:b9:5a:5d:31:cc:64:dd:
f8:ce:33:fd:39:43:fe:9c:80:8d:09:84:b7:77:a2:
18:ca:35:83:82:92:62:e5:6d:d5:1f:b5:15:d2:cf:
4e:de:d6:16:ec:eb:58:28:8c:b0:8b:e1:79:ff:1c:
58:06:3f:f5:5f:bd:ae:f4:59:b3:3a:ec:72:c4:50:
cf:e3:58:8a:59:e6:fb:3b:5a:a2:73:2a:db:15:86:
38:12:3b:b5:82:fe:a6:d7:7a:da:01:16:cf:a3:62:
dd:de:e4:2f:ae:4e:f8:62:73:06:ad:98:a4:35:c1:
39:de:63:57:46:ac:4a:ca:ff:42:a5:88:dd:61:aa:
7b:42:5d:e0:b3:5d:0e:4b:d8:af:81:87:7b:25:00:
a9:63:08:aa:57:42:80:86:c7:e9:92:af:52:54:85:
40:76:3c:a2:cb:97:9c:4c:e2:30:81:89:8d:0b:a0:
ce:17:80:80:e4:11:b3:70:ce:c2:24:b4:fc:ca:b3:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3A:6D:88:80:0A:BB:66:FF:13:01:A9:43:0E:F7:AE:71:BA:53:A9
X509v3 Authority Key Identifier:
keyid:E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:bf:70:e5:d1:9b:42:70:b4:20:f5:99:2b:aa:5e:02:52:8e:
20:03:60:48:f5:1e:c4:d4:9e:77:f8:37:5d:69:c7:c1:96:31:
c6:2e:d9:02:77:37:05:25:79:99:ed:c4:74:ac:4b:a1:5f:6c:
56:7a:3d:fb:15:90:df:93:f7:8b:79:59:af:53:6f:bb:ff:40:
5b:71:69:dd:38:1d:9f:bc:59:bc:05:c0:e5:74:88:59:5d:98:
be:78:cf:32:6b:45:d6:5e:e3:ae:11:c4:e6:1e:88:7d:7a:74:
4f:77:a7:b6:cc:9a:bc:9f:f0:88:ee:6f:6c:84:d8:cb:07:3a:
cc:a8:75:a8:ec:19:56:95:a4:fa:d8:31:ab:25:7c:46:34:aa:
0c:d2:f5:f6:fe:f0:d7:bb:a9:24:b1:20:90:31:65:54:71:e6:
ba:b4:7f:da:62:ee:d4:bc:a4:88:7c:a4:4a:ba:c9:e9:e9:f0:
e8:0f:f4:26:1b:79:37:ab:38:b6:b4:b3:1d:04:25:8a:dc:d9:
58:fb:0d:be:c7:8f:77:dd:c4:cf:d8:fd:af:72:49:4e:55:10:
15:8a:30:b6:aa:ba:57:f9:53:01:78:cc:a7:dd:31:08:47:5e:
85:62:11:e5:85:b2:65:2c:aa:fa:5f:6f:e7:3f:0d:59:c7:a0:
df:29:15:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:28 2026 by rpki-client