This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
File: AI8syGQkHehjXpOldED5wusli7M.mft (raw, json)
Hash identifier: MZBdj8vdPjm43NlyKh/ySyLSO092+Owg+jBS5eVTy8U=
Subject key identifier: 88:E3:E2:1A:C4:3C:95:1B:A1:D3:1B:6A:CB:33:03:8D:ED:87:53:97
Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3
Certificate issuer: /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
Manifest number: 0167
Signing time: Sun 25 Jan 2026 03:13:10 +0000
Manifest this update: Sun 25 Jan 2026 03:13:10 +0000
Manifest next update: Sun 01 Feb 2026 03:13:10 +0000
Files and hashes: 1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: 3jw6uSmM1FYb0YYPvz11BUoDdEVx4gFu3jN07fvqxKI=)
2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: irE7drsVeTTk7a2RFFZcS/J6SNQBkLx5nAZFgDb1h5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl
rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC3B, serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
Validity
Not Before: Jan 25 03:13:10 2026 GMT
Not After : Feb 1 03:13:10 2026 GMT
Subject: CN=69758a46-6cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:3c:33:4d:0f:c3:ba:ca:40:3c:b7:2f:71:
6f:5e:1e:8c:2e:a6:58:a9:7c:54:ce:8d:28:26:9c:
c1:6b:50:82:cc:6c:de:c7:03:30:26:79:a8:87:1d:
0d:69:84:df:12:1f:c9:f0:56:09:17:87:40:ee:fc:
f1:3f:4d:5a:02:c2:fa:7b:26:10:58:07:4d:79:cf:
f7:d7:40:5a:c9:c1:0d:6f:25:a0:1c:6c:4d:1c:e8:
bc:0d:6c:99:ba:a0:e2:0b:28:c6:8b:74:02:18:57:
6b:e6:dc:fb:66:2c:68:8a:84:12:18:f3:c1:1b:e3:
23:de:c0:c0:cf:e8:44:20:d1:62:a2:85:12:96:44:
00:b5:0d:29:1c:c8:80:e1:7e:dc:e0:a8:d0:17:ca:
f3:76:fb:b6:89:ce:17:f3:e6:bf:dc:50:14:71:61:
7b:de:f5:3a:f9:ee:f6:c6:b9:b4:6d:93:1a:2e:4c:
8e:62:5f:7a:3f:f3:26:89:ee:2a:0c:25:b2:bf:cf:
15:1d:18:cb:2f:0e:1c:93:11:8d:9a:50:f1:a0:ec:
c8:73:c7:98:0d:a0:00:9e:e1:a7:2a:7a:4c:1e:a7:
30:af:ba:9b:a3:e0:db:2d:54:19:40:4f:ef:61:78:
e3:9c:ad:1d:db:0a:2f:5a:76:6e:d1:fc:ac:3a:ec:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E3:E2:1A:C4:3C:95:1B:A1:D3:1B:6A:CB:33:03:8D:ED:87:53:97
X509v3 Authority Key Identifier:
keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:6c:6a:f7:99:64:06:22:a7:df:a8:89:d9:a7:eb:05:57:f8:
f6:2b:1e:f8:97:e8:fb:e0:0c:3e:30:28:a1:01:5c:89:8a:9c:
13:90:dd:b1:96:24:a1:c6:b1:ed:3f:5e:0d:c1:e6:ac:72:81:
c9:86:ee:5b:43:c4:36:6e:49:e1:a4:a3:3a:46:6f:9c:bc:78:
5b:f7:57:05:3c:70:ca:7c:f7:18:12:1e:ad:81:4d:b1:0c:a2:
63:ab:e0:8a:97:4e:92:b6:36:33:2d:cd:34:5f:da:b1:0b:2a:
a8:80:ea:84:e4:98:1f:4a:cd:f8:2e:c5:64:c2:1e:98:03:49:
12:7d:13:5a:cc:43:db:7d:e6:57:c1:09:b8:91:72:5c:2b:91:
d1:4b:34:5b:f3:a2:eb:2d:ac:33:76:a1:19:7c:15:33:ab:e4:
65:bc:5f:fd:23:2b:55:2d:3a:c0:d9:3f:42:0f:79:39:fc:9d:
fb:23:db:a3:51:6a:2f:56:52:29:e3:ee:bb:ab:7a:c7:1b:ed:
11:57:46:ed:bf:41:93:ca:07:9d:7c:18:13:3c:f4:9c:a1:a7:
c1:5d:82:da:86:2a:ee:32:1f:c9:4c:2b:fb:cf:65:10:ed:0f:
a5:d1:90:32:c4:ee:81:41:8d:1c:e2:87:a2:1f:a7:82:30:e0:
f0:88:43:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:39 2026 by rpki-client