This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
File: E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft (raw, json)
Hash identifier: 5UphpzaFUsKzAFrHu6hgoI3I0oNiJmR5Pb4RmVsXTdU=
Subject key identifier: E6:B5:47:B0:20:17:46:97:C6:37:8A:27:B0:33:EF:D9:F6:B0:5C:E3
Authority key identifier: 13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE
Certificate issuer: /CN=A91A68C0/serialNumber=13C2AB779B5A8DBBB396C9E5845817930BBE16AE
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 07:08:45 +0000
Manifest this update: Sun 25 Jan 2026 07:08:45 +0000
Manifest next update: Sun 01 Feb 2026 07:08:45 +0000
Files and hashes: 1: E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl (hash: hT2WcMKhk34No0/WifS/vjwpjDaM9GO6XHvOtHwxGA4=)
2: 53134072F0E511F09202A4D23F6F56BC.roa (hash: P721aHxkdI9YJXFMOAQ3Ec2boWDG+y2zUzAur2uL1k0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl
rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 07:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A68C0, serialNumber=13C2AB779B5A8DBBB396C9E5845817930BBE16AE
Validity
Not Before: Jan 25 07:08:45 2026 GMT
Not After : Feb 1 07:08:45 2026 GMT
Subject: CN=6975c17d-03e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:67:cb:ff:39:f1:ca:3d:94:cc:8d:08:dc:
aa:6d:4d:2e:81:0b:44:95:4a:e8:af:c0:4c:51:db:
bc:78:23:79:ef:6b:b4:66:5c:3e:4d:76:66:a5:0b:
2f:0e:f8:06:0a:2e:ee:05:3f:ba:98:28:c8:75:84:
a0:f4:5d:58:25:d3:28:83:86:a0:e6:0e:54:2a:10:
12:1c:96:08:e8:18:9b:89:20:65:08:e0:a9:16:bf:
6d:07:4e:2f:7f:e1:a1:6a:27:a2:85:67:89:4a:75:
df:45:94:aa:ec:c8:8d:24:c8:0d:42:5d:67:c6:68:
32:28:ca:47:1b:de:48:2f:00:11:83:7d:d6:e3:87:
19:c5:a8:82:06:85:91:02:b3:e9:d1:b8:f1:86:d5:
9c:e2:08:d0:63:83:da:d3:2f:d9:5a:00:dc:c5:cf:
53:30:49:6f:77:19:0d:ac:c0:ef:22:6a:f5:0f:25:
54:0d:de:e5:41:7c:cd:f9:19:82:24:fe:d1:c3:be:
f8:d8:16:3c:86:6b:2d:b6:ca:04:db:49:4e:7e:b7:
c5:c7:59:21:1b:51:e9:de:59:da:40:cd:d1:62:7b:
81:95:fd:ac:23:73:c7:bf:1e:54:f8:06:5c:92:37:
5c:60:6c:1c:97:29:ec:ff:49:ed:c3:df:f2:38:c4:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B5:47:B0:20:17:46:97:C6:37:8A:27:B0:33:EF:D9:F6:B0:5C:E3
X509v3 Authority Key Identifier:
keyid:13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:db:b9:3f:7d:17:48:8f:9e:06:e9:bf:58:41:28:a9:f6:8f:
e3:9e:8a:69:d7:be:ef:c8:bb:7a:83:6c:79:3d:86:79:04:a5:
62:73:5b:e4:b5:70:65:b9:37:a9:80:6f:2a:37:d5:9d:f6:65:
f7:60:a7:4b:db:ef:d1:77:a8:04:21:bb:b6:e2:21:e8:eb:d0:
0b:b7:3d:a7:c1:54:b0:32:53:10:2c:61:c6:c2:f5:07:78:16:
92:ac:87:b9:83:4d:0a:8d:3d:1d:54:6d:19:1c:fa:48:e7:cb:
f3:4e:44:db:bb:62:d3:2d:6a:05:f4:c6:8f:21:a6:47:27:84:
37:c3:36:37:84:e5:98:44:84:3f:27:d0:04:2e:f0:be:5f:98:
12:e6:77:e7:d1:1c:41:08:93:36:34:29:e9:62:92:d3:0a:7b:
c9:d9:95:f1:72:95:32:78:6c:38:19:9d:de:3d:ab:32:3b:2f:
79:f0:4b:66:4b:4d:e7:2e:69:dd:83:ea:c9:cb:4e:08:89:c5:
a4:fb:8a:1d:ca:1c:6b:53:7f:04:94:e9:9b:22:14:56:d5:bb:
02:c1:2a:14:d2:cd:bd:f0:1c:48:2c:1e:bf:51:b9:56:52:c5:
df:8d:7e:f7:96:f1:00:15:2f:77:42:6a:f5:06:28:64:0f:4f:
fb:a7:78:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:13 2026 by rpki-client