This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json)
Hash identifier: tmqqwQ+93vc2Ngj74t4Q1A5B8WcdWeEwkR0sUV7LAvc=
Subject key identifier: FA:0F:C9:25:C4:D6:87:FC:F7:7E:D5:C4:EC:8F:93:C5:08:67:21:C3
Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4
Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4
Certificate serial: 0CD0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
Manifest number: 0CC7
Signing time: Sat 24 Jan 2026 17:53:12 +0000
Manifest this update: Sat 24 Jan 2026 17:53:12 +0000
Manifest next update: Sat 31 Jan 2026 17:53:12 +0000
Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: yAZ8PklkGW5ZS4MBfv9BF9vcqVzgrHvdJ4yqwiEgAM4=)
2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: W5qhrk3NsiS79KgqelHi0v6nSmVUxngvNJSR/yTxWhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl
rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3280 (0xcd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4
Validity
Not Before: Jan 24 17:53:12 2026 GMT
Not After : Jan 31 17:53:12 2026 GMT
Subject: CN=69750708-9788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cd:ba:43:9e:8e:32:96:f5:45:19:59:49:9e:
88:5f:a3:66:98:fe:2c:76:19:c8:4a:52:55:43:74:
4d:34:3a:dc:04:99:c4:8a:71:11:6f:c7:6a:a6:de:
98:6f:34:34:82:70:af:1f:69:61:6b:1d:b6:34:25:
06:37:c5:14:7e:e0:f9:33:e5:d0:85:17:0f:6d:bb:
a1:8f:84:72:11:86:ce:a7:be:b2:8d:8c:55:9b:59:
93:8b:53:d5:67:6a:7e:a8:f9:6f:5e:03:cb:84:26:
55:d6:a5:49:99:82:f1:00:b3:46:bb:bb:f4:71:d7:
c0:a9:bc:15:ea:4b:84:9e:e0:db:1d:6b:bb:53:84:
f2:15:d1:be:b3:b0:9d:2d:ed:3d:b8:00:d9:92:74:
7a:9d:b3:4a:e6:f0:22:4b:fc:02:28:6b:86:b8:48:
e0:50:31:4d:4d:87:06:ca:6b:ed:b2:18:ed:f7:4c:
53:d9:31:9c:4f:12:52:37:25:3f:3f:ec:5d:90:65:
58:ca:f1:f5:be:16:db:c7:88:4b:ed:66:8f:22:36:
6f:29:91:2d:ea:45:7e:1d:b7:d6:be:cb:2b:c9:e1:
77:d8:1f:0b:83:2c:72:b4:59:71:21:f2:4e:9c:f2:
24:2e:74:c9:2e:5e:3d:da:e0:1e:96:9f:a5:a8:aa:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:C9:25:C4:D6:87:FC:F7:7E:D5:C4:EC:8F:93:C5:08:67:21:C3
X509v3 Authority Key Identifier:
keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2a:87:c8:ab:29:d0:8c:d0:52:cc:a6:37:24:bb:30:b8:e9:
3c:35:ee:51:e4:31:d9:f4:aa:bc:0c:a7:d9:8f:80:78:db:d2:
14:6c:68:26:78:43:fd:df:fb:10:b3:01:b0:65:ad:be:96:75:
3a:99:9d:47:c0:58:f6:dc:07:10:3b:3a:59:e9:60:d9:ca:61:
3f:47:ba:79:0b:ec:67:f8:93:42:12:11:1b:61:1e:ee:a6:27:
c0:52:b1:9d:fc:e3:3f:e2:80:44:dc:bb:f8:35:03:ac:19:c7:
22:68:5d:d2:78:dd:99:6c:ed:85:1b:8a:62:fb:7a:12:4e:25:
7f:21:44:59:68:93:77:1b:22:86:73:b7:58:9c:9f:24:f7:76:
94:c1:e4:1f:85:6d:46:97:01:51:6d:f6:6f:55:a9:3a:0b:33:
85:bf:7b:95:c8:73:32:3b:56:ff:31:67:d8:d3:6d:0a:91:8b:
16:25:7b:fe:e3:2c:ed:3e:89:dd:20:4b:8e:98:d3:2c:f9:f3:
30:26:e1:07:31:2c:f6:58:b2:91:67:cd:47:ff:eb:99:6d:d7:
dc:6f:e3:6a:de:f2:18:bd:6e:c0:93:82:d7:c1:eb:26:7f:0a:
83:70:c2:1a:a2:0a:d9:e7:34:27:9b:5b:77:40:a3:35:92:cb:
0f:2a:59:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:10 2026 by rpki-client