This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft
File: 8CJFNT_B8ZSpAipKwBl33l_eNvk.mft (raw, json)
Hash identifier: 40ec6UAzWk6rqK/D+xICqNKGaxEAzmuMHmYNQPmisx8=
Subject key identifier: 60:06:CB:22:AD:CA:40:45:AF:05:83:A8:B5:58:57:A2:FB:14:3A:D2
Authority key identifier: F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9
Certificate issuer: /CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9
Certificate serial: 03EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft
Manifest number: 03D9
Signing time: Sat 24 Jan 2026 23:50:29 +0000
Manifest this update: Sat 24 Jan 2026 23:50:29 +0000
Manifest next update: Sat 31 Jan 2026 23:50:29 +0000
Files and hashes: 1: 8CJFNT_B8ZSpAipKwBl33l_eNvk.crl (hash: ZfBN/9BJUAVPlFALpVwYg1aakAuBZP58gRhv//hzX5A=)
2: 2DE4C8AA9B6111EF99A97B52C4F9AE02.roa (hash: JEuUinXV9XhYYDb4cnU6uEq9yVuCYIhVEynkbtZEe1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl
rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1006 (0x3ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A96A, serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9
Validity
Not Before: Jan 24 23:50:29 2026 GMT
Not After : Jan 31 23:50:29 2026 GMT
Subject: CN=69755ac5-bc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:bc:6a:d0:d8:5a:84:59:09:59:ce:bd:c7:
ba:50:42:ef:a7:b9:96:14:dc:75:b3:4d:bd:3b:5a:
9f:51:55:dd:ad:8b:43:08:09:81:84:23:a1:52:ed:
8e:ae:ad:da:0f:46:81:1b:a8:5c:4a:7b:33:63:83:
dd:0a:91:f7:f9:7d:5e:ae:fe:b9:a3:92:e6:d2:50:
7a:92:19:27:0b:a0:20:29:dc:cf:0d:53:62:1f:bc:
88:1b:60:00:c5:79:9b:7e:09:2d:13:2a:73:f8:09:
7f:f1:ba:b1:59:d9:56:91:54:e2:36:15:a8:e6:72:
72:45:ad:a4:38:8d:23:25:19:2b:c3:c6:dc:55:4f:
78:ca:4d:1e:5a:66:7a:22:20:8a:12:09:e3:64:5b:
21:be:91:ef:d1:bd:ce:d6:ee:48:dd:bd:40:87:59:
0a:ee:de:5c:30:6d:92:2f:e5:93:23:a0:5b:45:00:
3e:57:79:a0:63:7b:2b:d6:59:ee:c2:01:39:18:a3:
b6:e3:d4:83:84:45:23:19:b9:0d:3b:06:4b:af:6b:
78:3c:71:b5:2b:e0:c1:ce:62:04:a6:4b:71:5e:4c:
ae:e9:fd:09:68:03:ec:06:ff:16:c8:86:0c:1d:9c:
c8:8e:26:71:97:8a:a0:57:ef:7b:6d:18:10:34:b9:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:06:CB:22:AD:CA:40:45:AF:05:83:A8:B5:58:57:A2:FB:14:3A:D2
X509v3 Authority Key Identifier:
keyid:F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:0d:3f:98:c5:75:1b:82:7b:3e:bc:c8:40:44:e8:68:35:8f:
7c:0b:0a:01:22:25:da:1c:99:77:dc:62:56:98:0a:21:32:51:
51:12:93:95:93:3f:bf:e7:24:63:f0:b2:de:25:32:74:96:d6:
a0:af:6d:d6:b1:36:7d:2f:8b:e1:45:65:59:d4:63:5d:81:ac:
25:72:2d:f6:1e:8f:43:f2:e4:40:5a:27:ad:98:3d:30:89:1a:
73:80:9d:e0:6f:55:75:81:18:62:c3:30:73:83:0b:49:51:c9:
1a:c2:45:6f:c5:ed:d3:37:bc:97:f6:98:54:c7:bd:0d:e8:03:
43:e9:84:32:52:89:06:7d:1b:ce:3e:3b:63:ac:9f:10:ba:2c:
c2:22:7e:bc:4a:ee:21:1f:25:5b:12:fc:22:19:83:21:ec:4a:
50:3e:bc:fb:7f:df:14:12:6c:02:59:8e:b1:35:8b:20:c2:0b:
42:d4:85:76:59:05:a8:dc:bd:a3:2d:29:0f:f1:d6:9e:da:8e:
27:88:49:97:2d:2c:d6:59:96:e3:ef:c8:dd:ad:8a:91:63:f3:
dc:a8:60:4d:bb:2e:b7:85:dc:0a:3b:72:78:d9:21:2d:0f:88:
de:aa:f4:e9:68:57:b4:a4:ca:82:4a:83:35:33:74:c1:78:f7:
61:a0:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:35 2026 by rpki-client