This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json)
Hash identifier: iKmhPGc+ChQI7itIj5SOuE0SOCXZ/rOZsmYc+xdJjLk=
Subject key identifier: 0F:5C:7F:8F:72:47:9F:80:AF:24:C7:A5:25:C6:60:37:A7:59:95:D7
Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Certificate serial: 0E89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
Manifest number: 0E6F
Signing time: Sat 24 Jan 2026 17:27:26 +0000
Manifest this update: Sat 24 Jan 2026 17:27:26 +0000
Manifest next update: Sat 31 Jan 2026 17:27:26 +0000
Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: CBlc8ycJaxSICGQ01vnXTquNUAxurJ1w79lKkw9Q+ik=)
2: AC549BBCD64C11F086D19BCFA9248E41.roa (hash: VBr+pukLq0d7d7l0WansKQoitqcdk+EQkYoI9tvJptw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3721 (0xe89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Validity
Not Before: Jan 24 17:27:26 2026 GMT
Not After : Jan 31 17:27:26 2026 GMT
Subject: CN=697500fe-df1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:ce:38:69:3b:56:8d:09:dd:4f:de:90:67:
ca:25:1c:7f:86:d2:00:51:ef:9c:65:60:62:a5:67:
e0:47:6c:d6:74:97:be:00:ff:4e:e1:60:98:28:6f:
17:67:81:60:cd:e1:45:c9:5e:58:cc:55:b1:e5:55:
fb:73:63:ef:3c:23:f0:03:b2:d2:3d:26:b2:46:8e:
eb:d9:a9:fc:bb:28:7c:39:1d:74:66:68:0c:72:d2:
21:20:03:08:fb:a3:98:1f:83:5e:11:bb:8b:d3:d3:
b9:28:08:9b:76:7d:dd:18:f7:24:6f:16:ec:0f:79:
3f:9f:6d:20:5a:91:8a:c7:5d:cf:97:14:70:cf:c2:
0a:03:09:47:1f:7f:b2:4b:9c:4b:9a:a2:35:6f:6c:
68:14:a8:64:ee:d0:45:62:a4:3f:7b:d8:e8:48:19:
10:66:d7:a7:5a:f3:15:8f:84:08:65:c8:55:a6:18:
b9:dd:03:c2:c9:3b:fd:7c:1b:d3:31:45:e7:64:5e:
ce:7d:a3:05:75:db:7c:f4:f8:a8:dd:83:1f:c5:ff:
ec:3e:f7:7c:ea:59:8e:2f:6f:64:8c:1f:a1:15:bb:
3f:7e:e1:8c:67:49:96:0b:16:13:dc:ea:69:e7:a7:
90:21:21:f8:67:b8:77:28:05:6d:02:b0:90:cd:e4:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5C:7F:8F:72:47:9F:80:AF:24:C7:A5:25:C6:60:37:A7:59:95:D7
X509v3 Authority Key Identifier:
keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:69:fa:67:d5:0d:85:27:22:c6:cc:a5:c5:86:73:07:25:22:
06:8e:31:04:23:2b:b2:37:52:a8:4a:36:e0:5d:0a:c9:e2:a9:
f0:dd:9c:d2:08:0d:ce:4b:bc:70:85:8f:c6:3b:b2:fa:62:db:
41:da:69:3b:63:4a:e9:b6:ad:77:95:68:9b:48:fd:10:51:14:
35:ac:eb:10:d0:61:ae:16:e8:52:01:13:3d:eb:a3:ea:f5:85:
bc:7f:2f:b2:d6:6d:1e:03:78:38:b8:09:f7:c6:8d:72:8c:9a:
74:a4:29:f4:c9:23:d5:ed:1f:71:c0:5e:59:03:17:ca:0b:6c:
31:1d:40:26:fe:f0:5a:e6:9d:85:4f:c3:e1:46:01:ee:c0:6b:
c3:87:8d:99:64:96:3c:73:12:3f:0e:b0:7d:b6:49:d9:6d:ab:
2c:ad:77:02:66:c1:1c:58:fc:08:54:d4:18:d3:d2:2d:4a:16:
3c:29:82:8e:d7:cd:80:78:0d:71:39:e1:a1:ef:c3:bc:16:d1:
34:65:20:1e:94:ab:6a:5b:f1:11:8a:c7:1d:78:3b:ef:d3:ef:
ab:11:5b:b7:82:8d:3a:ef:c6:ff:08:fb:70:88:91:0a:5d:dd:
6b:85:7e:90:d2:ce:30:ef:3e:10:4d:d2:25:55:6c:23:46:26:
3f:69:bb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:52 2026 by rpki-client