This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
File: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft (raw, json)
Hash identifier: g2MIVTxxV0oQ9WMGltp6j36z7IVPs9faGeNFNStaTjc=
Subject key identifier: 84:6E:1C:1A:B9:8F:7F:4C:14:BE:63:41:76:A7:65:D6:89:92:8B:41
Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A
Certificate issuer: /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
Manifest number: B3
Signing time: Sat 17 Jan 2026 05:11:41 +0000
Manifest this update: Sat 17 Jan 2026 05:11:40 +0000
Manifest next update: Sat 24 Jan 2026 05:11:40 +0000
Files and hashes: 1: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl (hash: NznV1v7xE4DKwYSpM1i8H8uUl92ZhrlpXHTMUrDaaQY=)
2: A42925E8DFDA11EFB5E94125C4F9AE02.roa (hash: mx4Ct5Tnd5YkFq5qkT60Yq1dgh6KZfYC5nrKRxnyy28=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl
rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 05:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A
Validity
Not Before: Jan 17 05:11:40 2026 GMT
Not After : Jan 24 05:11:40 2026 GMT
Subject: CN=696b1a0c-298a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:16:84:1a:48:82:67:3f:a0:4b:b5:19:d2:21:
b5:d5:77:df:1b:8f:7f:9e:29:60:8e:00:6d:70:40:
6a:1b:ec:8c:48:70:fc:c0:b9:40:e0:fd:78:ec:71:
5c:51:a6:2b:c0:4f:af:a0:15:cd:9b:b0:74:d7:e5:
62:7f:61:ae:59:57:c2:7e:08:ae:02:b1:0f:f3:31:
e8:35:29:8a:46:f8:2a:b7:3f:e8:9d:85:13:ab:09:
d7:72:9f:fa:fa:8d:93:53:07:28:4a:3b:55:01:30:
66:d5:d9:19:4e:48:f3:3c:bf:83:4a:71:7a:34:60:
4d:f3:58:fa:7b:6a:2b:ba:c2:46:d9:e0:7e:da:46:
d5:49:f7:53:05:c9:f5:73:b2:2e:ab:be:45:e8:29:
6d:48:ca:c4:50:5f:1b:8b:89:e4:de:60:98:84:58:
5d:50:f0:23:e4:04:b9:d9:15:09:3d:b1:c7:e6:06:
bc:4b:fe:fa:ec:3e:a0:a3:eb:ad:f1:cd:42:34:1d:
6b:8c:24:82:6d:b4:67:48:df:90:b6:07:de:f1:06:
3d:ee:34:39:59:15:ab:0e:21:e8:29:c7:e4:c4:d5:
bf:fa:f0:7e:db:26:29:8a:ea:5a:f6:dd:2f:7a:13:
28:e1:0f:02:15:e9:6d:21:bf:53:92:b6:b5:61:e8:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6E:1C:1A:B9:8F:7F:4C:14:BE:63:41:76:A7:65:D6:89:92:8B:41
X509v3 Authority Key Identifier:
keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:cf:5a:d2:a2:9d:83:39:c0:87:0e:c1:65:d3:03:c7:2e:5b:
58:88:10:62:68:09:f2:46:76:06:76:1c:de:b4:bf:cd:f1:2c:
42:90:32:57:96:d1:ae:05:1a:88:15:8d:eb:1f:b7:29:9c:25:
82:26:2f:cf:0e:77:db:b3:98:cb:a3:74:36:e3:50:79:23:38:
f0:0a:fd:40:9d:97:1c:d7:99:89:82:86:b1:00:6b:99:0e:06:
c9:7b:44:e7:81:c6:40:6d:5f:03:6b:fd:69:e1:83:fb:3b:b7:
53:bc:77:7f:87:8b:fa:f4:53:32:9c:2b:aa:98:22:cb:b5:d3:
be:eb:8e:a1:09:38:f3:4c:1d:7a:3e:05:da:d5:4f:67:fa:f3:
b6:14:8f:df:3a:16:87:d0:6e:9e:cb:51:14:a6:20:ce:fc:ae:
b5:41:df:46:21:de:ca:dc:9f:68:42:7c:16:29:60:03:c5:44:
60:ad:1a:f3:42:46:f2:5f:5a:d4:8c:2b:65:7a:01:1b:4a:7f:
e8:35:d4:18:66:61:e2:22:3e:ff:8f:35:80:d6:3b:48:d4:40:
44:d1:12:1d:aa:04:a6:1a:18:fc:ca:fb:62:d9:36:e0:de:e4:
c9:8b:41:43:33:4d:8c:da:61:c5:d4:fa:c7:70:55:55:d5:9e:
5a:21:2d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:55 2026 by rpki-client