This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json)
Hash identifier: GVsnAlrNkl4ypuGZm5Zdk966/V2+XJ25oyCcbRvid9E=
Subject key identifier: ED:75:C0:9F:51:E3:A9:E2:FD:33:32:A5:AC:4C:CF:E7:61:B4:52:9B
Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Certificate serial: 0862
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
Manifest number: 60F3
Signing time: Sat 24 Jan 2026 14:15:26 +0000
Manifest this update: Sat 24 Jan 2026 14:15:26 +0000
Manifest next update: Sat 31 Jan 2026 14:15:26 +0000
Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: fcLwVMmHg5oMyDPWcpVikST13bFTvI2MyElGuGRkK68=)
2: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: Wde+/tbwO6emtqEAbVU9kd5LqQ/7rRJAB/r7M8LU5/8=)
3: 813E372A946711F081C10711C4F9AE02.roa (hash: kExd4zSpp7AjmXFgOmX60/PfKSK3ZoaisYrs5b1dJbk=)
4: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: hZakqVHe8O4RVi1dDA3NxvC3rtRxeZVjqvS+/bKAPhU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2146 (0x862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Validity
Not Before: Jan 24 14:15:26 2026 GMT
Not After : Jan 31 14:15:26 2026 GMT
Subject: CN=6974d3fe-0349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:19:b2:f9:33:e9:ca:7b:0d:f2:7b:e8:09:
88:4a:a3:df:f9:f5:35:b4:df:6f:be:7e:04:44:b2:
f8:1f:3f:c7:a8:7e:fa:34:f6:d2:c0:f0:5b:e1:96:
95:9d:24:93:a8:fa:1a:2c:59:ef:e3:1e:a1:72:ea:
33:13:21:1a:f7:8f:3f:db:ef:a0:da:ff:c2:8e:e8:
d0:5c:b1:a7:63:d6:ff:08:cf:4a:c3:e6:4e:73:7d:
80:21:4d:85:65:07:2c:83:e9:36:61:d8:43:5b:37:
ee:6e:49:f3:ed:2b:73:69:03:62:54:a8:da:b3:85:
51:51:1a:1f:23:a8:42:c7:9e:a9:2c:00:3a:56:b7:
df:0e:9e:88:bf:ab:b2:24:42:79:82:80:51:7b:c5:
a3:8f:c9:70:cf:dc:46:ba:8a:bd:34:28:c2:20:bb:
44:5e:91:7e:96:0b:d1:49:23:2a:94:76:12:1c:94:
48:07:48:61:85:a0:aa:e0:79:66:7b:6c:9b:21:ce:
78:b6:50:37:db:db:58:7a:af:79:30:0d:81:7e:fc:
81:93:c4:53:3b:e1:47:d9:81:79:2b:1a:e5:ef:a4:
4b:f2:57:9a:6a:db:39:fd:64:ba:62:37:59:e6:e7:
8d:85:1d:5b:a9:58:5f:39:2f:78:19:ec:32:57:63:
d2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:75:C0:9F:51:E3:A9:E2:FD:33:32:A5:AC:4C:CF:E7:61:B4:52:9B
X509v3 Authority Key Identifier:
keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:86:31:40:b6:59:6f:ba:1b:33:cd:ce:ee:ed:68:aa:93:e9:
b8:ac:5b:b1:a1:cf:c6:c3:b8:19:d4:3a:84:6a:6a:18:d1:5e:
3d:e2:30:e1:04:37:4f:0a:47:6c:de:9b:97:32:fd:4e:3c:6a:
e5:5a:79:d3:89:b4:5b:92:74:e2:5d:94:ee:fc:ec:92:c3:4b:
cf:38:d7:91:d1:e3:59:08:65:3f:d2:10:50:7e:02:a1:a4:9c:
a3:a4:01:38:f6:19:e2:ef:6a:8a:60:c3:fb:17:0b:c1:ca:e4:
93:cc:fb:d4:75:e5:c1:70:ce:fd:21:07:22:b6:86:a3:04:d6:
dc:11:13:e0:a8:65:44:47:7f:87:d1:1c:cf:43:e3:cc:47:a9:
e3:76:5b:cb:82:30:cc:14:f1:ae:c5:de:28:78:07:59:2d:19:
dd:5f:a7:9a:f4:53:da:ab:c6:98:b4:64:40:be:d0:bb:ef:f0:
54:df:1e:69:42:63:76:61:51:f8:b4:19:04:8a:0b:ee:3f:4c:
37:d1:46:a1:54:5b:92:a3:0d:80:04:a3:ce:66:68:4e:6f:c8:
f4:c6:e2:a4:46:ce:70:87:24:3b:f2:7b:8f:f3:9c:12:e1:f7:
c4:b1:30:09:f1:f6:ef:ff:58:6f:b7:ab:53:16:76:21:9f:9e:
6d:13:b4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:33:36 2026 by rpki-client