This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json)
Hash identifier: LWeQduhB2K+k9vB+oyMPcCVm8YiNu03s37DnM8PYdOA=
Subject key identifier: 61:4D:92:50:6B:4E:71:7F:71:FF:98:36:C2:B5:E9:75:2F:AA:B6:79
Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0
Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0
Certificate serial: 088C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
Manifest number: 0885
Signing time: Sat 24 Jan 2026 19:58:51 +0000
Manifest this update: Sat 24 Jan 2026 19:58:51 +0000
Manifest next update: Sat 31 Jan 2026 19:58:51 +0000
Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: eu5kuhZ/oDYIsdwyBLMU3r6Z0vP07PocWnsNsKhhG0w=)
2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: pAtkMYoP9pyBPl/xXuNkKMm/3mhUwbxuTSTQt0etagU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl
rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:58:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0
Validity
Not Before: Jan 24 19:58:51 2026 GMT
Not After : Jan 31 19:58:51 2026 GMT
Subject: CN=6975247b-7237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:60:6e:28:ab:d6:13:cb:c8:99:ed:90:07:
bb:0e:fc:e5:b1:44:f1:ea:98:bb:68:6f:54:13:f6:
d0:e1:6d:42:31:ae:01:de:99:98:49:3a:c1:81:9f:
3c:48:00:db:ad:1c:6c:67:50:39:56:31:30:a3:cd:
aa:99:01:af:1d:6d:c8:f4:e2:8f:a7:fe:6d:28:03:
0b:14:1a:d9:e2:fe:83:d3:45:97:92:1f:1f:24:c7:
fa:b8:1c:d3:b4:c7:7a:5d:54:b8:bc:47:45:23:0a:
e7:05:d7:5d:92:d1:3b:6b:15:ee:f5:1f:02:45:36:
68:18:24:08:f7:46:62:60:db:98:71:9e:94:08:77:
fe:d5:01:cb:dd:45:c6:5d:92:a0:48:c5:e8:f3:cf:
3f:81:a8:74:de:f5:17:20:16:31:0b:6e:2d:05:4d:
71:e3:19:e4:5a:93:dd:7d:4d:1a:21:e2:45:a2:c8:
32:d9:a8:a0:76:02:bd:4d:38:2e:ec:10:17:9f:95:
55:3e:9a:20:dc:2b:07:10:2d:ba:31:4f:66:e7:70:
b4:a3:1d:47:40:4d:f3:01:a0:68:31:c6:00:8e:21:
32:79:38:70:cb:7c:2d:7d:0e:f9:6f:93:9d:85:5e:
58:7f:11:76:e9:e7:0f:dd:c2:ff:87:5d:df:4e:b4:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4D:92:50:6B:4E:71:7F:71:FF:98:36:C2:B5:E9:75:2F:AA:B6:79
X509v3 Authority Key Identifier:
keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:0a:b2:82:80:dd:b4:cc:36:7c:a7:3c:c3:44:c5:3e:44:3d:
6c:75:11:e4:b8:b1:da:f9:7e:48:4d:16:c2:a7:78:13:d9:1c:
1f:16:f8:d5:44:04:17:af:34:62:fc:41:ef:7b:ec:fd:d7:5e:
1e:7c:c6:23:ac:36:8d:cc:c9:76:3b:e5:49:80:06:40:46:86:
89:a7:9f:d5:d4:69:73:9a:11:13:7b:62:c8:7b:6b:8d:bc:87:
a7:fa:75:f2:bb:b6:6a:4d:89:c6:5a:5a:85:60:75:c1:18:a2:
9c:39:15:75:7a:84:b9:a5:d7:24:59:01:aa:ab:8c:42:cb:dc:
8d:9e:cb:e1:e9:c2:7f:82:8c:2b:09:e3:f7:e8:8c:94:96:0e:
c9:64:3e:34:12:72:48:2b:6d:f9:bf:72:8b:e2:49:ba:8d:b6:
18:a1:f6:90:69:32:0b:56:04:e1:a6:3e:a0:de:01:9e:7a:dd:
83:7a:74:cf:2f:7f:4d:b7:ed:94:0b:3e:57:ac:bd:de:75:51:
c6:61:e2:21:f3:f3:b6:fc:7e:f0:53:5e:ca:24:dc:1d:c1:15:
db:79:e2:03:34:21:47:c1:93:19:ec:fa:13:21:d9:5b:69:9f:
da:85:ec:3e:a0:65:2e:21:74:04:84:d0:6f:e7:af:3a:2e:5d:
31:ee:c6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:28 2026 by rpki-client