This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
File: g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json)
Hash identifier: Ku6iblP0zbBjxekKQl50dpH2UnId+5cL1ME2FXwiXsI=
Subject key identifier: E8:F4:20:D5:EF:DC:34:EC:A6:DF:82:F9:F1:AB:5F:8E:2F:23:EA:EA
Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51
Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
Manifest number: 0157
Signing time: Sun 25 Jan 2026 03:25:20 +0000
Manifest this update: Sun 25 Jan 2026 03:25:20 +0000
Manifest next update: Sun 01 Feb 2026 03:25:20 +0000
Files and hashes: 1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: zz2JrLIWqo2z1hWN+4WVAMLKOZUNHmySlQNJycNVjLQ=)
2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: Vp6oIV4Kwe3FgHjDClftctReHYiAIs5p4BPX7qetipE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl
rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
Validity
Not Before: Jan 25 03:25:20 2026 GMT
Not After : Feb 1 03:25:20 2026 GMT
Subject: CN=69758d20-c242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:6a:4a:81:a6:41:6f:5c:48:06:94:3e:b4:
1a:22:86:72:79:56:58:35:06:ce:0e:00:4e:ba:dd:
86:26:db:80:8f:9b:a9:a8:02:8f:e7:0a:89:c7:12:
40:2e:22:cb:1b:ea:2e:c0:23:4e:34:ce:03:63:14:
7a:37:61:44:f4:88:d6:0d:dd:5e:f1:fc:b2:20:13:
5f:b5:f1:23:9d:62:52:0f:d1:c9:2b:3f:26:ee:b6:
c9:26:eb:bb:8b:2a:c4:ca:4b:d0:c2:b2:42:84:8b:
8f:f4:25:b6:6a:ad:39:a5:66:5d:68:51:8e:cf:67:
bb:e9:f9:21:b2:a7:4f:20:53:b2:84:bd:4e:60:5f:
a3:59:cd:d1:d2:6b:8f:24:b5:dd:9a:7f:f0:1a:ed:
f4:7f:e1:7d:e9:e9:4f:ba:39:26:de:39:af:15:98:
fb:44:39:57:e4:57:57:7c:78:97:35:20:f7:56:1e:
c3:10:23:ba:ff:a7:7a:38:68:69:cf:90:1b:43:25:
b9:6a:fb:36:83:ba:03:1f:cc:5a:33:4f:b0:c1:fa:
0a:65:fd:6e:f5:f8:80:b4:00:32:5a:93:8f:f1:a7:
e6:4f:f9:e7:a4:42:22:7a:c7:8f:c3:73:0d:97:69:
4e:7c:99:bc:6b:d6:a0:4a:17:95:d4:34:d7:d7:17:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F4:20:D5:EF:DC:34:EC:A6:DF:82:F9:F1:AB:5F:8E:2F:23:EA:EA
X509v3 Authority Key Identifier:
keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f9:7b:81:a7:ed:97:5b:bc:a7:ee:61:2a:a4:43:dc:c2:41:
a3:8c:b6:6a:22:ba:ea:fc:b8:54:f2:56:cd:b3:f0:7d:f2:fe:
c9:a4:62:58:6b:4b:ab:6a:b0:45:8b:57:76:f2:3b:cb:30:1e:
c1:c1:09:fa:06:01:15:53:36:7c:98:32:09:d7:3d:68:ef:30:
1e:64:65:97:47:ea:bc:bb:c4:a9:af:9b:c5:04:6c:ff:98:44:
69:79:57:b1:13:82:6e:7e:c8:b9:93:5a:fd:2f:26:60:1e:07:
ba:3e:96:0f:da:d4:31:67:e4:8e:8f:84:01:b5:53:b1:8d:ce:
9c:b0:8e:17:6d:82:87:59:00:89:a4:b1:78:96:bc:1d:3c:60:
3d:08:e7:ff:f4:3f:af:75:7d:e7:d8:df:e1:b3:29:cd:5c:97:
88:38:69:ee:80:79:a3:4b:0a:54:28:96:74:fe:51:58:95:a6:
0d:e3:bc:70:47:1e:7a:16:be:7f:08:ae:db:d8:0d:3d:cd:b4:
e8:17:90:9e:2b:d6:6d:77:d6:40:c4:45:20:bb:75:6e:2e:4c:
54:25:3b:49:0a:4e:84:d9:d7:f4:e5:65:3f:e1:f1:6e:a1:90:
b8:62:c6:68:8b:75:61:1e:de:88:b0:0b:b0:d5:7a:5e:4e:b6:
ad:d3:90:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:49:44 2026 by rpki-client