This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
File: F8IFAD4uuR49xG6qyJD20LUN5uI.mft (raw, json)
Hash identifier: y6KvUuB6dSCNvr+MtHQmsye1BsJAQYAoEoVG4113Vbo=
Subject key identifier: 17:31:87:A1:8C:98:C7:A4:19:A5:E9:DD:70:B9:7B:30:68:62:37:ED
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Certificate issuer: /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
Manifest number: 4F
Signing time: Fri 16 Jan 2026 16:12:16 +0000
Manifest this update: Fri 16 Jan 2026 16:12:16 +0000
Manifest next update: Fri 23 Jan 2026 16:12:16 +0000
Files and hashes: 1: F8IFAD4uuR49xG6qyJD20LUN5uI.crl (hash: aB0eVYznf8xmLKv+zA3fzRP95VTvXVVBKigEtEMF+7o=)
2: 6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (hash: rHMVmuHlGcAJ9rF7Bi/K5y8f08f2S8PIfG+MCG+CXao=)
3: 404053A882BE11F0ADD6D367C4F9AE02.roa (hash: nsvKh5OpF7zkyCTrJCJ8QZA4sK2TVgvtoo9ZmQ1ZusA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 16:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Validity
Not Before: Jan 16 16:12:16 2026 GMT
Not After : Jan 23 16:12:16 2026 GMT
Subject: CN=696a6360-1831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:7c:d8:e4:01:67:68:d5:96:bc:4c:92:3e:
09:29:36:a4:7f:2f:8d:8a:1e:75:d8:44:4c:b3:7a:
a7:4f:4b:1f:ed:46:7e:3d:23:6b:b3:1e:26:06:fa:
a3:cb:8f:aa:88:ca:bc:58:c5:a5:91:13:5e:8f:97:
28:09:2d:3e:27:cf:2d:03:3f:6c:5f:2d:c0:84:b3:
8b:83:84:6c:a3:be:49:4b:29:25:ca:5c:e8:2f:29:
83:d9:36:35:f9:89:cc:0c:49:f3:8d:97:ce:9b:36:
14:1e:4f:dc:a2:fc:8b:e8:af:8b:73:4b:d9:8e:fb:
87:ee:a0:5f:cc:74:21:75:4e:e7:46:01:c0:8f:95:
cd:ba:bd:a1:24:36:3e:4a:2e:f3:05:41:51:f0:32:
37:fc:eb:a7:f1:c0:93:58:be:ef:39:b2:32:60:cf:
62:55:ad:0f:b2:80:1b:34:c1:11:b9:f9:99:0f:6d:
4e:32:80:1c:22:73:04:9e:fc:fe:df:ba:1a:1c:d4:
e5:bc:55:7e:a3:d1:ae:60:73:54:05:a8:36:bd:6d:
5f:af:b0:25:50:51:c5:20:2e:30:06:4e:8a:27:18:
32:c6:72:5b:c5:bb:1c:98:25:07:b1:19:04:a2:71:
c7:7f:e8:a5:0e:66:79:17:5d:84:11:84:89:84:ba:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:31:87:A1:8C:98:C7:A4:19:A5:E9:DD:70:B9:7B:30:68:62:37:ED
X509v3 Authority Key Identifier:
keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:3a:c2:7c:a9:36:ee:b7:83:d1:8a:5c:7f:c2:de:ec:50:8a:
21:99:d1:9b:a6:b9:f7:86:11:8d:3b:96:6e:3a:e1:1d:2a:8c:
40:e2:7a:99:54:c2:c3:7b:d7:b6:60:9e:f0:05:15:37:26:ba:
55:21:7d:57:40:37:1b:ff:c1:b5:0d:a2:ba:53:bd:fc:97:c5:
d7:48:14:ed:29:56:67:b0:74:24:29:30:57:1c:c3:17:17:09:
22:12:b8:9d:55:ef:0b:97:32:2e:36:03:a7:2c:c9:65:be:a4:
af:d1:50:93:58:75:36:9d:d5:ed:be:fd:84:61:4c:ac:04:7b:
39:50:13:20:c8:84:c1:7d:5a:88:37:f3:cf:9d:c1:b3:44:5d:
f8:37:e6:3c:bf:ed:be:62:0b:91:4d:92:79:e8:3a:02:2a:64:
ef:0d:4a:c8:b1:6f:7b:e3:e2:11:c3:29:63:af:ea:f2:cf:93:
5f:20:ff:fa:a9:32:94:a7:27:a9:8d:34:f3:64:71:c3:f5:c2:
58:85:cf:ba:8d:4d:a6:73:3e:7a:d1:6b:50:62:76:82:57:61:
4c:a9:39:ac:12:af:07:f1:35:15:0e:b9:2e:ec:28:12:2b:2d:
ed:cd:15:db:31:0c:9e:1f:d3:96:db:92:88:d5:e6:e2:bf:5a:
de:d4:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:10:29 2026 by rpki-client