This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
File: 8FIaW22wTXVvopUqDymjkSEsWLI.mft (raw, json)
Hash identifier: 6BBaMykybodDVYU7kxb34DzDbwK8z0a4FKaXRRtkAMQ=
Subject key identifier: 55:1B:6D:2C:7A:28:60:7F:27:E6:B5:C3:47:05:C2:1D:14:36:E1:FB
Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2
Certificate issuer: /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
Manifest number: 29
Signing time: Fri 23 Jan 2026 06:41:10 +0000
Manifest this update: Fri 23 Jan 2026 06:41:09 +0000
Manifest next update: Fri 30 Jan 2026 06:41:09 +0000
Files and hashes: 1: 8FIaW22wTXVvopUqDymjkSEsWLI.crl (hash: eih+06kCpjcgWUacibIGTULxXn6WYuXE6xqC4DCxTJo=)
2: E9689162C8FE11F0BCA3A555C4F9AE02.roa (hash: cxYtuj/s/bSvnaQ4JfJbG+7S68mrHrbAGrbGPiwy+Uo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl
rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
Validity
Not Before: Jan 23 06:41:09 2026 GMT
Not After : Jan 30 06:41:09 2026 GMT
Subject: CN=69731806-c2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:c1:de:c7:e1:c3:e1:0a:b3:df:3f:3b:a4:
83:c1:7d:43:ea:c0:5e:a0:7b:18:d1:86:cd:08:b3:
e2:66:13:df:01:fa:3b:0c:b2:1e:2e:91:34:0c:6d:
94:cb:e4:15:b3:44:31:74:d3:db:a0:e9:9f:86:10:
5f:2d:b4:fc:41:e4:3f:8e:e2:73:8a:91:28:41:79:
27:b1:46:44:b6:dd:c9:43:77:5f:6b:a7:42:6e:9e:
a6:c8:7e:40:c0:1f:b3:19:53:7b:ac:a6:d6:be:81:
97:8d:ca:dd:f6:7a:fd:e5:3f:4b:96:af:10:2e:c3:
f9:ad:95:70:f9:73:15:4b:b9:ee:2b:34:23:de:2f:
6f:5b:01:4d:18:2d:47:c9:61:70:9e:37:61:53:60:
1c:47:dd:84:4b:92:46:7f:6f:75:2b:2d:7d:9a:95:
2a:ed:0a:53:90:93:ae:ad:71:0f:99:42:80:9e:75:
a2:c7:9b:6e:a0:4b:87:65:c6:1b:33:64:a6:bb:c0:
f8:54:4e:81:83:c9:71:34:8b:7b:02:cc:17:e6:3d:
20:ed:4b:da:20:ce:54:8f:6e:ee:b1:44:d3:0a:b9:
a5:a9:38:4b:27:da:0c:ce:40:3b:74:a9:0e:5a:7c:
9a:9c:4a:57:ec:0e:89:f8:3e:8d:22:ca:61:71:b3:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1B:6D:2C:7A:28:60:7F:27:E6:B5:C3:47:05:C2:1D:14:36:E1:FB
X509v3 Authority Key Identifier:
keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:22:f5:c1:7b:32:e7:19:d1:ca:1e:c9:a9:38:00:f8:17:db:
c3:14:34:9f:8e:a4:b6:bc:29:35:73:ce:04:10:f1:35:2f:49:
77:89:4f:17:7c:27:cb:74:02:4b:f5:69:02:87:55:30:6d:a4:
a3:29:24:44:99:13:97:9b:9f:61:06:fd:92:81:e4:ef:fb:5e:
3a:03:9b:62:c1:21:f5:dc:a4:89:04:5c:92:c6:bf:17:09:1d:
97:84:5e:32:ef:cf:cb:95:61:66:42:a2:23:fa:8a:01:dd:93:
c4:48:6b:2c:a1:71:5b:9e:c9:74:bc:14:b7:34:1d:4c:87:2c:
69:47:65:98:ca:b6:97:7e:dd:f3:2c:fb:f7:fd:47:02:9b:ae:
8c:c8:0b:d9:38:d2:7e:34:8a:e8:85:b5:1c:41:85:c0:f1:bd:
5f:47:fd:e9:6a:91:a4:d8:b1:7c:09:af:10:07:50:8b:18:16:
e7:95:f2:d4:07:c2:bc:5c:ac:bb:59:06:18:fb:2a:db:88:0b:
6e:a3:80:fc:26:ab:e4:4c:a5:82:8f:72:b9:23:d5:69:a1:8e:
2d:ee:1a:83:31:f8:de:d1:98:be:f6:4f:5c:b3:19:5a:a3:50:
8d:2e:06:67:e6:f1:13:04:e1:f0:e8:a9:6d:dd:6b:84:6d:10:
9a:95:92:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:16:42 2026 by rpki-client