This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
File: a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json)
Hash identifier: aMZT8QWbQnNj66nE41Y1t66z3GkGGmYNzW6YKkX35w0=
Subject key identifier: 66:F6:3A:6A:79:8D:13:45:FD:BF:E3:3A:B9:1F:34:83:C8:B2:4B:C9
Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
Certificate issuer: /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Certificate serial: 075E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
Manifest number: 0757
Signing time: Sat 24 Jan 2026 20:59:50 +0000
Manifest this update: Sat 24 Jan 2026 20:59:49 +0000
Manifest next update: Sat 31 Jan 2026 20:59:49 +0000
Files and hashes: 1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: 4ALEXLRwx/2QwWFM9Ugug++f+Ly6F0uHBzsnEPpzTaI=)
2: 715A7174F80411F099DDF14C6E6F56BC.roa (hash: czSUWkJH2qK1x4LMIuOs8ap+/AAaQlGwSHC4CNcs3zI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886 (0x75e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Validity
Not Before: Jan 24 20:59:49 2026 GMT
Not After : Jan 31 20:59:49 2026 GMT
Subject: CN=697532c6-64f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:6f:1b:03:a4:1b:6d:b5:20:a9:5d:d7:f1:
5e:ac:a7:c5:0e:89:61:6e:1e:22:99:21:fb:c7:03:
ec:3d:e0:78:80:b0:2e:f5:72:4d:2b:66:7f:20:12:
61:13:a1:38:c4:57:76:e1:19:30:b3:e4:a2:1e:08:
b4:d6:b2:53:38:9a:e6:eb:a7:41:b8:1f:d2:83:bd:
e2:ef:62:7d:3b:69:67:dd:ee:e1:62:d5:fe:2f:c6:
84:36:fa:18:ed:9c:fe:f2:03:a3:b4:2f:ab:f9:cd:
a4:ca:a1:ce:60:f1:1e:b5:09:51:bb:e9:b4:3c:51:
06:33:74:25:c9:48:c5:62:36:2a:c5:2a:c4:f7:13:
bf:74:94:13:83:88:fc:1d:12:b2:2f:2c:14:01:a5:
11:2d:ca:c5:22:39:47:38:64:c6:68:63:01:b1:82:
41:71:42:f2:a5:80:92:51:8c:af:58:e4:3a:67:3f:
a8:f7:50:71:2c:d9:5e:5f:cb:a9:4c:e8:f3:7c:4e:
eb:fc:e9:d4:36:9c:af:f6:83:36:4d:96:7c:21:74:
da:7c:90:3e:6f:79:71:5b:5c:3a:8a:6c:f0:4d:af:
a6:17:42:f2:b1:3a:e9:0e:de:d8:0f:44:50:c8:9b:
2a:f1:2f:9d:06:a4:e8:05:ab:b9:bc:88:49:7b:bb:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F6:3A:6A:79:8D:13:45:FD:BF:E3:3A:B9:1F:34:83:C8:B2:4B:C9
X509v3 Authority Key Identifier:
keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:12:9c:74:ed:50:8d:e0:05:40:6a:9c:5a:97:6c:d9:0c:fe:
73:82:0b:96:8b:0d:cc:1b:0f:89:83:8b:ff:ae:8d:3d:5f:b9:
d5:fb:58:4c:f0:41:b6:2b:e9:f8:93:1e:12:52:e4:d7:f4:f9:
81:f2:57:fd:86:0a:27:a3:97:07:9e:c5:92:de:56:42:f2:8d:
bc:40:10:61:eb:be:df:b4:bb:2a:5e:e7:34:b4:d6:15:6e:f5:
1a:9b:9d:05:e8:ef:3e:78:7a:33:9e:30:5b:70:50:8e:17:b9:
f6:80:76:fd:b8:3c:c8:86:fc:3b:e4:10:77:86:74:5a:82:27:
4c:74:7f:fa:21:4c:5b:2e:d1:89:3a:3f:cb:53:17:c4:a8:43:
50:7c:eb:aa:e1:6e:11:a4:da:94:3d:70:f5:86:8f:a8:77:1b:
34:a7:77:ab:63:8c:a0:a2:6f:42:ce:a7:22:1d:43:5b:4f:67:
10:cb:d9:7e:46:0f:69:11:3e:3e:8c:96:8f:4c:58:5d:53:3f:
20:ca:e0:fb:82:90:83:2a:44:9a:d6:cb:e8:ed:80:e9:44:69:
a2:c0:6f:bc:3a:fc:06:f2:2e:14:ac:f2:7f:9e:15:1b:dc:a8:
f9:1e:e0:cf:b6:19:97:a4:f2:dd:48:6e:e8:dc:bb:47:4e:f3:
fc:fe:d4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:05 2026 by rpki-client