This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
File: cI8eBxM4VcgHTu1fjIO0RmpgesI.mft (raw, json)
Hash identifier: NjH1SaQwIqQxDmNzWSy7GHF/k7XvZosz/N89KeC+81o=
Subject key identifier: AB:63:DC:FF:42:97:74:9A:57:23:D6:BC:A5:95:0B:12:BD:E4:4F:1C
Authority key identifier: 70:8F:1E:07:13:38:55:C8:07:4E:ED:5F:8C:83:B4:46:6A:60:7A:C2
Certificate issuer: /CN=A9171D16/serialNumber=708F1E07133855C8074EED5F8C83B4466A607AC2
Certificate serial: 0186
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
Manifest number: 0181
Signing time: Sat 17 Jan 2026 03:23:23 +0000
Manifest this update: Sat 17 Jan 2026 03:23:22 +0000
Manifest next update: Sat 24 Jan 2026 03:23:22 +0000
Files and hashes: 1: cI8eBxM4VcgHTu1fjIO0RmpgesI.crl (hash: zRgLiUdTeU7GUbYozlfgTGkLLV9eaCOsTPz9b10zWpE=)
2: BFC0298670DC11EF8B65D95AC4F9AE02.roa (hash: o3gzQfsgkhYyTiyDY0PiWkPRF0sSCXlHLqcLBoAqtO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.crl
rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 03:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D16, serialNumber=708F1E07133855C8074EED5F8C83B4466A607AC2
Validity
Not Before: Jan 17 03:23:22 2026 GMT
Not After : Jan 24 03:23:22 2026 GMT
Subject: CN=696b00aa-e872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:f8:e3:4e:2e:13:a1:3c:74:8c:4a:38:09:
ab:56:b4:72:50:60:b0:bf:e5:58:f5:cf:0b:01:1c:
dc:3a:db:29:b4:a5:4f:dc:c4:bc:ff:84:a1:c1:b4:
06:7a:10:b6:83:85:3f:a9:a1:8e:79:cc:6a:8b:a8:
a5:75:00:bc:5b:0b:9f:0d:d5:ae:09:99:53:0c:15:
a5:2f:b1:16:23:86:2c:05:52:06:46:d0:14:6d:8e:
e2:30:51:25:ce:1c:e8:21:31:75:2e:36:45:6e:79:
38:8d:55:ed:57:2e:00:8f:7c:58:f0:a6:96:c1:ec:
ea:f9:fe:95:68:36:d0:41:50:a4:10:f9:73:0a:dd:
51:46:63:48:c0:14:30:6e:09:e9:5f:7a:6f:7d:61:
d7:95:02:ec:52:4d:63:29:0b:b8:a3:5d:dd:74:e9:
37:06:62:45:d0:0f:a4:1e:3a:38:bf:10:4a:5d:d7:
6f:61:5a:cf:77:24:07:c3:b0:ee:25:df:bf:e3:5c:
e4:43:68:fb:6e:77:ed:03:5e:6d:e9:ff:e0:7b:9a:
bd:09:42:46:c9:38:4c:12:95:ac:3a:32:ee:05:13:
a8:df:28:5d:82:1c:6f:75:a9:74:a8:19:f3:b5:8b:
48:14:0e:0e:1f:e8:d7:53:f6:2b:63:11:4a:0f:23:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:63:DC:FF:42:97:74:9A:57:23:D6:BC:A5:95:0B:12:BD:E4:4F:1C
X509v3 Authority Key Identifier:
keyid:70:8F:1E:07:13:38:55:C8:07:4E:ED:5F:8C:83:B4:46:6A:60:7A:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:07:42:96:16:87:a6:ab:48:51:05:c7:cd:c6:7e:ba:e3:76:
ba:66:0a:bb:7e:df:29:6d:56:3a:5d:92:c6:2a:b2:62:73:ea:
ac:0f:7e:ad:11:0c:de:24:a8:df:86:24:24:b5:3f:c8:25:db:
2d:f2:5d:e2:58:09:31:67:a3:0f:f9:14:60:5e:7e:c1:32:7f:
64:05:fb:8a:0c:a9:09:c6:69:19:2e:df:de:45:73:36:64:3b:
f9:eb:79:47:b3:36:de:06:a2:1a:77:a7:8d:7a:85:b2:95:7a:
32:42:6d:0e:cd:49:bb:a6:d0:cc:9d:8e:35:6d:28:11:2d:3c:
e1:75:c2:90:c6:59:00:82:1f:79:57:06:7b:5d:15:f4:2f:61:
ec:80:9f:71:4f:8b:b2:bc:80:34:b9:76:6c:5a:b1:f6:e7:c6:
b2:ae:48:0f:81:42:ed:de:2e:df:61:d6:90:f1:57:fb:b1:fb:
e8:ef:f7:f2:27:1c:d2:ea:16:90:c4:53:58:f4:ee:38:37:b8:
74:fb:7e:da:7e:ad:0b:eb:75:94:2f:fd:5d:2f:00:54:ac:68:
44:18:bf:a5:40:9f:fb:d3:44:6b:94:05:36:81:70:79:11:d6:
d1:cf:86:7d:29:47:6c:e5:6f:d1:bd:4c:9d:63:4d:0b:38:19:
a2:de:6f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:16 2026 by rpki-client