This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
File: 8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json)
Hash identifier: GyrzfA9iH8VrBZx44say6n1Cldfx4jO8WVpxv0o8sCg=
Subject key identifier: 39:69:35:6A:11:A5:55:12:B4:3B:07:63:5E:2C:C2:89:81:31:EE:07
Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
Manifest number: 0122
Signing time: Sat 17 Jan 2026 03:51:01 +0000
Manifest this update: Sat 17 Jan 2026 03:51:01 +0000
Manifest next update: Sat 24 Jan 2026 03:51:01 +0000
Files and hashes: 1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: W3T5t6liqYQ8tqNsEFszXl7Yu5yWmdgQkhd2lycCAfQ=)
2: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: vmrZgLw19B5ritq7z4vG50pAGmXRwXJvrAIY9L3sz/4=)
3: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: P4Mm2VNQngkGMc8lCO6eHVGOp7Fy5SVP9GQX/B339mE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 03:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Validity
Not Before: Jan 17 03:51:01 2026 GMT
Not After : Jan 24 03:51:01 2026 GMT
Subject: CN=696b0725-a8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:74:fc:90:8c:ae:e5:a3:1a:70:01:19:51:
11:0f:f3:d4:38:08:79:cf:b1:00:50:06:2e:06:fc:
98:bf:24:da:ff:7e:f9:38:67:af:cc:1b:86:ad:aa:
43:4b:13:fd:05:31:e2:23:ff:cf:8a:10:a5:3c:4d:
69:7f:b6:61:39:9b:1c:01:18:c0:5e:a0:80:98:0f:
7d:cd:d6:b3:24:c7:3a:f1:a0:48:8d:a6:38:09:e8:
42:f9:37:93:30:fe:15:b5:9d:2f:fe:43:66:94:93:
65:55:b8:46:cd:97:42:a2:4d:c4:cc:5a:47:e5:95:
37:44:c6:75:b1:4c:b0:14:1e:60:e2:31:67:49:47:
9b:44:a8:6b:ef:38:f0:fe:da:fd:41:7b:cb:be:6d:
d5:ad:e3:2a:b5:21:5d:14:e1:e0:4d:5b:b7:78:41:
0d:ed:00:c9:06:21:8b:5f:2d:c4:b2:10:6e:af:ac:
4f:fa:2b:bf:2a:4b:37:52:14:33:3b:76:b9:91:52:
a1:6b:bb:58:32:ef:e1:32:1a:7f:36:8b:dc:5a:46:
29:45:b7:8c:ab:57:ce:aa:93:7f:d7:41:d7:c8:f7:
77:86:c3:ba:30:9f:a4:f0:7b:5c:b6:27:42:01:70:
1f:85:0f:66:b5:58:3a:c7:4c:c7:cf:4d:f0:64:69:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:69:35:6A:11:A5:55:12:B4:3B:07:63:5E:2C:C2:89:81:31:EE:07
X509v3 Authority Key Identifier:
keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:08:79:cc:7c:c8:75:f8:ae:7b:6c:fc:e7:1f:ba:4b:11:ac:
3e:57:88:e5:c6:35:01:31:07:d8:38:e9:3d:50:14:63:43:b2:
e4:b8:e7:04:72:eb:cc:3c:30:0f:09:99:a8:0c:4d:67:37:02:
6b:ae:c0:b5:52:e1:1f:dc:c0:fc:d6:43:c2:ba:2e:63:c5:ed:
62:d3:eb:8e:18:30:a3:8d:a5:fc:ca:89:75:18:a3:29:ff:3d:
78:fb:c1:f1:7e:15:19:e8:a6:21:ae:c3:70:36:a9:52:ad:b2:
c8:ae:26:da:48:57:6f:30:f9:23:c8:ec:9a:32:78:12:53:50:
00:34:0d:56:6e:5c:54:27:36:ab:b9:19:6c:44:c0:0f:52:6e:
41:7d:e4:b0:79:7e:c5:e5:ff:2e:bc:39:cc:89:6c:a9:91:f3:
23:98:8b:5d:40:13:26:a9:5d:e6:8f:5b:0d:42:8d:12:f7:6d:
1e:61:3a:36:20:29:86:c7:eb:01:3d:08:6a:68:07:0a:e7:16:
fd:fc:83:39:80:ae:16:a6:14:52:54:5b:0b:eb:ee:66:72:60:
86:15:a1:e4:6a:43:28:8a:5c:8c:6e:77:9a:88:ff:c4:61:78:
04:42:3e:37:e0:3d:76:2d:2a:49:c4:be:46:a3:a7:50:4d:42:
c4:39:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:26 2026 by rpki-client