This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json)
Hash identifier: tcq8ZNbrQl7GShYPuvp/mW/6xEhgOICVGGz/DcFJo1Q=
Subject key identifier: 55:83:07:80:B1:A3:51:9E:19:F5:23:12:92:7A:7B:9E:6F:17:8A:8D
Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Certificate serial: 0AFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
Manifest number: 0AEB
Signing time: Sat 24 Jan 2026 18:54:24 +0000
Manifest this update: Sat 24 Jan 2026 18:54:24 +0000
Manifest next update: Sat 31 Jan 2026 18:54:24 +0000
Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: b/xsbZOEWIOT+E/VVAwCtivyNgkm4TxnTcLxTTZfDz8=)
2: 676A2DE2564911F08353B443C4F9AE02.roa (hash: YM/jqlM3yjwQowPEPNTW8kWHF+17BJwpa8g+tmnEC0w=)
3: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: +qdSnSMI4Cq6GPacx1y6troGvfBHeu8mDwsrgTG91us=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2815 (0xaff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Validity
Not Before: Jan 24 18:54:24 2026 GMT
Not After : Jan 31 18:54:24 2026 GMT
Subject: CN=69751560-058f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:59:f7:14:98:c2:45:2b:2d:f7:aa:76:49:f8:
e0:95:2e:1d:f8:4d:2e:9a:17:d6:be:55:5d:4a:3e:
1b:f1:bd:d5:ea:92:ee:58:41:c0:49:d1:7c:3b:7f:
fd:41:20:e1:5f:2c:7c:8d:a6:60:ef:02:68:b4:c0:
89:58:2c:30:16:6b:9d:11:64:53:af:e4:7c:9a:e7:
1b:3c:0e:5f:fe:17:9d:dd:d1:68:d0:ea:23:c1:9a:
1c:ce:69:d8:29:2c:5c:a2:a8:b0:a9:c4:89:a8:2a:
eb:c2:0c:78:1d:17:b9:55:77:ea:a5:88:04:a6:b3:
0e:d3:af:7d:57:9b:b2:49:1b:7b:19:6a:d5:7e:6e:
87:86:d6:76:11:9c:42:9d:f4:d8:af:ff:c8:49:97:
4e:8d:10:1c:75:cd:d6:b9:56:7c:bf:f8:ed:87:3c:
8c:93:f1:15:c8:b7:73:a6:41:63:f1:e3:ea:9b:ba:
59:dc:0a:56:56:f5:a8:1e:25:85:c4:af:03:2e:3d:
03:ab:8f:91:b9:93:b4:f5:87:55:65:9d:6b:38:17:
c6:fe:21:d6:b1:5a:56:f9:ba:11:d0:9b:ed:56:e2:
82:6f:5a:47:76:29:5e:1d:f9:04:94:80:1b:af:1b:
98:d1:99:bc:0a:9e:9b:c1:1f:25:d1:01:1f:c3:c9:
30:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:83:07:80:B1:A3:51:9E:19:F5:23:12:92:7A:7B:9E:6F:17:8A:8D
X509v3 Authority Key Identifier:
keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:44:a5:c6:5a:1c:0f:7e:85:7e:4b:cc:4b:7d:a4:d9:b5:bd:
d9:f1:57:61:4f:00:a3:32:38:f1:59:71:1b:1d:9d:6d:63:cf:
e9:57:f7:76:e9:40:d6:66:ee:92:bb:6f:15:80:f7:3f:3e:e6:
39:41:55:23:b4:25:65:b4:cd:9e:0f:a3:7d:80:b1:d6:6f:e4:
1d:4d:68:6b:0a:07:60:6c:42:20:c2:ff:ed:00:cb:a9:a7:b2:
43:f7:9b:0d:d1:db:ce:da:23:69:3c:bd:ab:6d:cf:b6:4e:8d:
a0:07:5f:b3:d2:46:ef:79:dc:3c:df:a7:ff:9d:40:92:5c:53:
7f:94:1d:42:d7:6f:eb:2b:41:53:40:b0:d9:93:86:74:39:0c:
10:d3:7c:86:a0:7b:78:85:37:e9:d0:52:07:0d:22:bc:89:3c:
81:ce:c1:56:ce:6e:86:ae:25:b2:71:06:d4:59:89:4f:26:74:
f0:56:e8:f2:ec:15:70:ee:7d:fb:05:90:b2:a4:16:b0:21:39:
cc:6d:a4:93:e2:dd:3f:31:24:a4:01:3d:20:e2:35:68:68:6c:
53:1f:fe:b0:03:54:31:0e:97:3a:4f:b8:d4:df:bd:8a:cc:f6:
a7:7c:80:26:cf:42:82:a7:26:b7:de:a2:a0:16:15:cc:4f:12:
e6:9a:46:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:37 2026 by rpki-client