This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
File: x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json)
Hash identifier: jG7Rx9nnHZUYSACtnQcF/xLluv3Ii9flKLrVakAetZg=
Subject key identifier: 4C:71:E7:49:90:E4:15:04:39:B9:A1:54:ED:78:D6:AF:37:C5:49:43
Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
Certificate issuer: /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
Certificate serial: 1218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
Manifest number: 120E
Signing time: Sat 24 Jan 2026 16:51:51 +0000
Manifest this update: Sat 24 Jan 2026 16:51:50 +0000
Manifest next update: Sat 31 Jan 2026 16:51:50 +0000
Files and hashes: 1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: Pi9dSMSuboLga+DrT3YQwV/pAx8GNxsy5w94WyNzhuM=)
2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: S4PonvpkLuqmrbtgnv8T9QMFORQi4oK8GF7Qf1Ow3ok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl
rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:51:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4632 (0x1218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
Validity
Not Before: Jan 24 16:51:50 2026 GMT
Not After : Jan 31 16:51:50 2026 GMT
Subject: CN=6974f8a7-6f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dc:53:f4:09:60:36:56:82:06:67:91:76:d7:
19:ff:01:90:6a:c1:01:ad:2c:98:bd:60:65:e0:9f:
59:13:9e:ce:51:b2:63:6a:7a:d5:01:4d:1a:87:5a:
64:ef:07:22:9a:dd:d9:3f:80:83:02:ca:92:ff:66:
eb:98:f1:46:16:4c:18:f9:9d:99:f2:c8:8e:54:62:
e6:dd:c2:34:d9:33:38:a1:33:fb:d5:ea:b1:26:5e:
85:fd:7a:ea:fa:18:37:b4:1a:9c:7b:25:c1:62:ba:
59:6e:d9:c7:17:d1:96:27:bf:c1:86:aa:e5:60:f5:
fc:dd:02:6a:4c:88:ad:6b:27:56:74:55:69:8d:3d:
c6:cb:9b:f2:7c:ee:56:b8:96:a6:b4:ea:de:de:f5:
ef:44:c2:a3:59:16:9c:d6:f5:f6:a3:d4:15:61:a0:
e3:9b:9c:a8:d4:18:c0:e1:66:7d:ac:06:d3:f1:f7:
55:69:2f:37:88:7b:ad:77:e6:a8:90:ee:d9:4f:23:
7a:67:cb:95:e4:67:dc:e8:14:e9:7e:22:21:d5:90:
65:21:4a:f6:8e:f2:13:ad:25:c1:83:00:79:92:2f:
35:ee:d8:4a:c0:4a:15:d3:f2:2e:11:a5:ac:d1:24:
92:bb:6a:e4:dc:fb:7a:6b:4e:39:33:17:2b:25:3a:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:71:E7:49:90:E4:15:04:39:B9:A1:54:ED:78:D6:AF:37:C5:49:43
X509v3 Authority Key Identifier:
keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f3:aa:ab:e6:ab:2d:30:17:94:13:ab:fa:02:00:1d:20:1c:
98:3e:b4:a2:8f:21:d9:2d:06:eb:ea:9e:b0:c2:6c:57:13:65:
df:26:38:8d:4f:52:cd:e5:13:60:99:8e:25:b1:3c:dc:2e:30:
da:e7:e4:b0:90:f3:a1:c2:00:76:b4:ee:91:71:69:21:31:00:
95:5e:3f:8a:9b:7e:77:a1:82:6d:b8:1f:95:f5:dc:57:00:23:
cc:6a:ca:53:92:19:26:ae:b9:f4:5d:33:f9:c7:7e:97:4e:59:
dc:43:27:4f:a8:ca:04:10:4d:a8:ce:f4:47:4a:20:0d:84:87:
6f:80:22:d4:83:8f:23:12:a1:cb:10:34:95:b6:df:9c:62:a4:
cb:59:37:01:87:90:fe:77:69:6a:3b:5f:10:18:31:3f:47:24:
4f:d8:13:28:a8:31:69:00:51:9b:00:81:6e:cf:f1:18:9c:1d:
67:8c:57:1b:44:6c:0a:66:23:05:9d:0f:02:72:5b:e7:de:8a:
eb:0f:92:4a:ba:8c:48:62:70:71:58:ba:75:ba:6d:89:69:9a:
46:aa:3d:9c:63:66:a6:da:7f:dd:b9:9d:4a:68:e9:b6:7a:8f:
29:56:fe:02:3d:bf:72:a5:20:10:52:e3:ff:3a:b7:b7:b3:32:
ad:7d:04:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzg1RTkxMTAvBgNVBAUTKEM3Q0Y5NDNFM0E3NjRGMzdDMDAzQ0Q0MzVBMkI4NTQz
QkNFNDc2MDkwHhcNMjYwMTI0MTY1MTUwWhcNMjYwMTMxMTY1MTUwWjAYMRYwFAYD
VQQDDA02OTc0ZjhhNy02ZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA59xT9AlgNlaCBmeRdtcZ/wGQasEBrSyYvWBl4J9ZE57OUbJjanrVAU0ah1pk
7wcimt3ZP4CDAsqS/2brmPFGFkwY+Z2Z8siOVGLm3cI02TM4oTP71eqxJl6F/Xrq
+hg3tBqceyXBYrpZbtnHF9GWJ7/BhqrlYPX83QJqTIitaydWdFVpjT3Gy5vyfO5W
uJamtOre3vXvRMKjWRac1vX2o9QVYaDjm5yo1BjA4WZ9rAbT8fdVaS83iHutd+ao
kO7ZTyN6Z8uV5Gfc6BTpfiIh1ZBlIUr2jvITrSXBgwB5ki817thKwEoV0/IuEaWs
0SSSu2rk3Pt6a045MxcrJTosoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExx50mQ
5BUEObmhVO141q83xUlDMB8GA1UdIwQYMBaAFMfPlD46dk83wAPNQ1orhUO85HYJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODVFOS8wODI1MzhFQ0Y5
NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6ZkFBODFEV2l1RlE3emtk
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g4LVVQanAyVHpmQUE4MURXaXVGUTd6a2Rnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODVFOS8wODI1MzhFQ0Y5NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6
ZkFBODFEV2l1RlE3emtkZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBP86qr5qstMBeUE6v6AgAdIByYPrSijyHZLQbr6p6wwmxXE2XfJjiN
T1LN5RNgmY4lsTzcLjDa5+SwkPOhwgB2tO6RcWkhMQCVXj+Km353oYJtuB+V9dxX
ACPMaspTkhkmrrn0XTP5x36XTlncQydPqMoEEE2ozvRHSiANhIdvgCLUg48jEqHL
EDSVtt+cYqTLWTcBh5D+d2lqO18QGDE/RyRP2BMoqDFpAFGbAIFuz/EYnB1njFcb
RGwKZiMFnQ8Cclvn3orrD5JKuoxIYnBxWLp1um2JaZpGqj2cY2am2n/duZ1KaOm2
eo8pVv4CPb9ypSAQUuP/Ore3szKtfQR5
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:26 2026 by rpki-client