This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
File: 8bZbeXYWOXNS7L1KLHdPz37G1HA.mft (raw, json)
Hash identifier: Lc+fGglQHs4w6+hrJb39QKNQCxJjkujts+wOXsj58EM=
Subject key identifier: F8:3D:B0:0A:84:56:3E:19:F2:36:1F:45:B3:33:64:BE:18:A6:28:70
Authority key identifier: F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
Certificate issuer: /CN=A91D14EF/serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Certificate serial: 06D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
Manifest number: 06CE
Signing time: Sat 24 Jan 2026 21:27:21 +0000
Manifest this update: Sat 24 Jan 2026 21:27:21 +0000
Manifest next update: Sat 31 Jan 2026 21:27:21 +0000
Files and hashes: 1: 8bZbeXYWOXNS7L1KLHdPz37G1HA.crl (hash: IxZG/z3eNhqLl0h9dGI/9Rk4gDTlSKCHmr7ss65rtwQ=)
2: 226402B0860D11EB8F541B68C4F9AE02.roa (hash: oKHV5TBmq4GqrFfr2VIYxjHb/BXfTV1fp7LSb6WOO9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1748 (0x6d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D14EF, serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Validity
Not Before: Jan 24 21:27:21 2026 GMT
Not After : Jan 31 21:27:21 2026 GMT
Subject: CN=69753939-61a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:39:fc:2a:9d:46:12:32:9d:2a:16:b9:c9:e1:
55:5d:b8:95:94:b3:a4:68:3c:a5:8d:71:79:0d:94:
66:4a:dc:6e:dc:dc:4a:01:55:fc:51:f7:61:ca:d0:
6c:9a:01:68:99:0a:ca:10:b8:5e:eb:20:92:3c:cb:
27:51:de:ac:9b:84:de:5c:fd:c7:96:cb:28:66:54:
1f:72:66:cc:38:12:d9:b4:94:7b:2d:57:29:09:bb:
8e:85:7b:60:62:75:6c:8c:0f:a9:24:c9:5d:e7:36:
b0:ba:ed:f9:75:fd:22:8c:b4:ec:09:81:db:00:a9:
4e:0a:3f:72:fe:42:84:c7:bc:c0:ec:d9:b7:11:4b:
a4:5d:69:ad:5b:2e:fd:ef:1d:9d:88:a0:49:84:c6:
cc:15:b8:ab:d4:be:7f:f4:08:f6:30:3b:a7:90:f9:
29:5d:54:13:ce:93:33:dd:c9:35:7e:eb:93:91:ea:
e7:dc:66:95:43:43:c8:4c:7e:9e:6d:42:d8:e9:8d:
be:c0:e8:a3:c6:84:71:fd:36:82:8e:a6:fc:fa:5d:
b9:be:ca:41:0e:cf:d4:c9:6b:db:7e:8e:e6:17:87:
46:b9:5a:04:7a:c4:91:88:f6:81:f4:90:6b:20:9a:
cb:6b:34:7f:24:4d:a2:39:d4:ab:9e:32:82:00:3f:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3D:B0:0A:84:56:3E:19:F2:36:1F:45:B3:33:64:BE:18:A6:28:70
X509v3 Authority Key Identifier:
keyid:F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ae:2d:6a:fb:97:75:0d:ec:f4:0f:57:d0:d5:51:c2:a9:bc:
7d:57:4e:5c:54:a7:e0:d7:e1:02:d7:7c:5f:79:e6:f3:8b:f1:
e0:42:e4:a9:d9:91:07:b4:da:5d:50:1b:87:81:81:d1:9f:28:
f3:16:97:e1:ac:49:31:97:58:e8:e6:ac:d5:64:1b:38:2c:3a:
f2:12:e2:41:f2:23:86:14:e0:1c:e0:7a:9a:0e:54:3d:e8:21:
93:06:ce:80:f3:a9:50:c2:43:18:09:84:23:73:f5:7f:87:08:
59:f7:88:69:a3:a2:63:31:d7:46:7f:55:1b:c7:1f:26:88:f9:
05:37:16:c5:47:e7:c4:a5:59:c8:ad:85:20:59:75:aa:7c:dd:
12:a9:82:c9:c7:97:fb:1c:c6:f4:25:8d:8d:07:d2:c8:3d:b7:
11:12:71:3c:1a:30:2e:64:49:7f:47:55:d1:b0:49:02:7c:fb:
7c:69:8f:91:bd:68:00:5c:47:6b:42:f9:a1:36:17:1f:a2:67:
15:71:62:5c:2d:40:8c:dd:71:46:c7:f6:26:17:c4:53:a6:88:
4b:41:55:cd:3a:1f:bd:0f:9a:1f:eb:52:6a:32:c2:e4:ab:b3:
14:bc:8f:e8:8d:44:6c:0c:6f:d7:08:35:e9:d7:09:7a:ac:db:
79:52:81:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:23:23 2026 by rpki-client