This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json)
Hash identifier: GS0uytBbjJKO0sExSrJHJ9LR4y6am3Wikh3WRuZSAD0=
Subject key identifier: 40:41:5C:8B:BC:21:06:5A:E2:EC:2A:93:40:E6:B5:CF:39:D9:3C:47
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial: 24EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
Manifest number: 24CB
Signing time: Sat 24 Jan 2026 15:37:17 +0000
Manifest this update: Sat 24 Jan 2026 15:37:17 +0000
Manifest next update: Sat 31 Jan 2026 15:37:17 +0000
Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: 6cim5HqDaEvnyyw73XveOMgC37qld5cpyro7ZqPFUQc=)
2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: +ttwdPCfkA5o4U1d3HtcdyMxofKcodTHs7x31tg/unw=)
3: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: GhF9PvzI5x/9vujTT/xlTVo+qNPcjDRdk9u4YkdwFYk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9451 (0x24eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Validity
Not Before: Jan 24 15:37:17 2026 GMT
Not After : Jan 31 15:37:17 2026 GMT
Subject: CN=6974e72d-cab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4f:e9:2e:b9:1c:5a:1d:e0:12:92:bb:ac:97:
1c:43:46:fa:d6:8d:4e:b3:a2:ec:ca:eb:66:b4:0c:
32:19:17:1e:93:33:60:7e:eb:46:50:9d:64:73:e5:
94:27:93:69:63:d6:65:db:f3:72:7f:de:26:26:3a:
71:79:f0:ee:62:2c:f3:14:ab:5c:d5:b1:7b:54:aa:
b6:80:d2:d4:80:49:66:21:6d:c1:6c:c5:ef:ac:32:
a6:28:52:69:aa:12:d2:19:36:68:03:c7:c4:0d:b5:
6f:71:c3:14:fd:ff:d0:8e:40:ad:e9:62:56:1f:ad:
99:6b:08:28:94:d1:52:ec:aa:41:39:44:ab:79:c5:
11:29:0b:5f:ec:8f:bb:26:b0:1c:c0:ab:7b:49:77:
3d:5d:a8:44:4d:a1:30:4d:05:e1:88:34:af:6c:64:
f8:25:32:a4:ea:e5:2e:5b:db:61:71:fd:c5:d5:5a:
dc:b2:8f:b7:91:9c:1d:ba:f9:bc:f5:9f:9e:5b:1e:
23:e7:29:59:6e:d3:16:c5:6d:a4:19:87:7f:9c:27:
43:dc:7b:dc:b5:1b:bb:ee:69:7b:43:93:17:a9:88:
14:e0:a6:65:0d:39:e8:4c:c0:32:61:b0:82:e4:ed:
55:82:b0:5c:61:97:e9:0b:ef:28:18:7b:08:22:8b:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:41:5C:8B:BC:21:06:5A:E2:EC:2A:93:40:E6:B5:CF:39:D9:3C:47
X509v3 Authority Key Identifier:
keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a2:37:35:a4:66:53:36:dd:48:6f:34:c3:82:0a:4f:77:f0:
08:e3:58:78:0c:d5:81:6b:51:2d:e2:5a:8d:e1:26:4e:ac:81:
2a:f2:28:f7:43:56:e2:32:b6:53:a0:18:f3:5f:14:56:d7:bc:
0c:03:ef:0a:d5:68:63:48:77:e6:95:8a:83:8a:ef:e8:05:fe:
75:76:65:7a:06:cf:1a:b2:cd:e7:fb:8e:f3:ef:1f:0f:71:58:
66:9b:11:c4:67:6c:21:0c:1f:ba:0d:3e:65:63:ac:26:50:a9:
e0:0a:22:eb:19:7c:49:01:52:09:d6:12:b6:ec:42:51:04:f6:
01:11:38:9e:d5:48:20:79:48:0c:c4:e5:8f:7c:20:20:ed:04:
94:ff:fb:36:42:ff:2f:d7:c9:45:2b:81:0c:55:86:ee:c9:b1:
00:e6:94:d8:3d:83:82:21:68:3d:c9:9e:a7:0e:a3:ef:6b:c2:
62:8d:bf:ce:37:f4:6a:9c:1c:6a:c6:2b:32:8c:04:1f:42:35:
26:d6:b8:08:0c:62:41:e8:a3:da:7e:f9:aa:bc:9b:0a:dd:02:
1d:ab:ee:31:06:31:a1:43:c4:7c:22:15:e3:9c:00:67:58:bb:
6d:f7:5f:12:b8:91:50:66:04:1e:44:ec:78:fe:bc:fb:8a:a9:
81:4f:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:02 2026 by rpki-client