This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
File: pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json)
Hash identifier: 7XT7iHqnkZVorWFaIgW4XpIi/kfhNFbV+WW+1nnCOGA=
Subject key identifier: 5B:DB:E7:BB:2B:23:71:7B:41:5C:89:CC:0E:FF:D0:A8:19:7A:18:DA
Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF
Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF
Certificate serial: 0998
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
Manifest number: 0982
Signing time: Sat 24 Jan 2026 19:30:04 +0000
Manifest this update: Sat 24 Jan 2026 19:30:03 +0000
Manifest next update: Sat 31 Jan 2026 19:30:03 +0000
Files and hashes: 1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: h4JWJ5RMUnwyN2oX6VVeRBzhnVsN7rGsgzAY7T7Jt84=)
2: 31B2B528217811EEBACF3324C4F9AE02.roa (hash: qYcH8o+mgIEkOx3pGeKtDuFDXODm4W8utEiDwxXgwKU=)
3: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: JxYPfmW8Tav5SjQHIMJfNEwgSNWW1t6Utgf2ZPhePRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl
rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2456 (0x998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF
Validity
Not Before: Jan 24 19:30:03 2026 GMT
Not After : Jan 31 19:30:03 2026 GMT
Subject: CN=69751dbc-6150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0e:63:d1:51:fc:0d:7d:2d:8d:1e:2d:a1:a7:
e8:75:e3:fb:88:eb:1e:2c:06:bd:54:22:b3:29:06:
84:36:75:f7:6c:9e:0b:f9:ed:af:2d:4c:86:0c:d3:
23:cf:d6:7c:d3:3d:d3:74:73:59:76:f5:1f:33:3b:
ff:00:cb:81:1f:d6:36:09:09:02:09:d7:9f:3e:80:
11:63:14:a7:f2:91:c8:18:ab:53:f6:9a:a7:49:18:
14:a9:da:ae:1f:c3:c9:da:85:b8:72:5b:0c:4a:a8:
92:8d:58:a0:4a:f3:46:d4:26:50:f2:1d:4f:c9:1c:
1b:0a:72:8a:ff:39:91:66:a3:a2:9a:75:55:69:70:
58:d1:6e:01:9d:08:13:9a:79:0c:76:67:d0:7a:95:
c9:a0:72:9d:12:ab:06:20:9f:45:4b:4a:05:da:4b:
2c:87:74:96:83:8b:23:52:a9:63:db:e6:44:c2:bd:
e2:59:57:bd:db:17:38:bc:27:4a:e5:a0:24:de:94:
ae:35:61:f8:1a:b0:60:49:7a:6f:fc:06:da:98:22:
b2:14:8c:77:63:b9:01:95:b6:0d:e2:b6:bb:8f:4f:
94:5a:56:4a:de:57:b9:de:cc:d0:56:d0:60:c6:bf:
ac:07:5a:a0:88:c9:66:f5:6a:1f:c3:ff:df:06:00:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DB:E7:BB:2B:23:71:7B:41:5C:89:CC:0E:FF:D0:A8:19:7A:18:DA
X509v3 Authority Key Identifier:
keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7a:6e:60:7d:1d:02:ad:e8:18:c5:d8:30:bb:28:52:a7:6c:
95:f0:fe:a8:20:fd:41:17:e0:17:44:ce:23:4f:0b:30:1b:69:
54:b1:da:8b:26:38:49:e7:fd:3f:39:ea:15:bf:59:f9:46:20:
0a:b8:9f:1d:1f:d6:61:b3:bd:fd:26:ed:84:76:f1:f5:fc:f8:
27:31:66:e6:71:69:dd:2f:c9:bf:f4:fe:23:6e:1d:5b:60:68:
7a:98:30:7b:52:dc:05:2a:c5:59:b4:a0:6e:89:b3:87:3d:6e:
b1:ea:a3:03:68:62:e8:f5:50:79:da:e0:59:9a:2c:3c:21:f7:
5d:de:02:82:b9:20:91:4c:9e:5c:cc:22:56:30:2d:e7:c9:50:
e3:19:3d:ef:d1:ca:0d:37:ee:52:bd:83:fe:4c:46:73:1d:69:
07:36:63:67:4b:1e:47:25:6f:0d:65:39:1b:99:7b:e1:53:de:
39:df:eb:d9:ce:a7:3f:89:dc:af:22:8c:5e:85:23:8b:a2:f9:
bf:7b:56:96:83:9f:5e:3f:a6:5c:0f:b8:35:b4:fb:b0:f5:3e:
4c:3a:0a:69:15:2f:76:f9:74:fd:85:ef:8b:89:c4:d5:e9:62:
f3:ee:eb:3b:df:c0:b2:32:c3:d4:3c:56:de:dd:0f:9f:75:85:
2b:6d:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:48:05 2026 by rpki-client