This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
File: 8NcRIKkqhY23KUlvzL8YJcnwPGM.mft (raw, json)
Hash identifier: MksZnvlz8NBbGJdw8WcWCzF7EDM5WN2hgA3Qveygge0=
Subject key identifier: D3:FB:68:B3:E7:36:25:7A:FF:58:D2:B7:6E:33:B7:DC:B2:D7:86:6C
Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
Certificate issuer: /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
Manifest number: 05
Signing time: Tue 27 Jan 2026 07:23:09 +0000
Manifest this update: Tue 27 Jan 2026 07:23:09 +0000
Manifest next update: Tue 03 Feb 2026 07:23:09 +0000
Files and hashes: 1: 8NcRIKkqhY23KUlvzL8YJcnwPGM.crl (hash: HEmXDrE7pnUN/RwRGFUzSHXnVr/WIlWkQfgLq/G4SW8=)
2: 9A084BBCF86A11F098E22A404A6F56BC.roa (hash: +lAlL7Cv2EfgtjGoVqEkKqM1JuOyfGTEtlZcd1zcqHE=)
3: 097C10E4F92B11F090A6283D396F56BC.roa (hash: /Mawuqcu13jJfA7gdT/LNV8vB1ks+7WTyRxpwb7mJZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl
rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 07:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
Validity
Not Before: Jan 27 07:23:09 2026 GMT
Not After : Feb 3 07:23:09 2026 GMT
Subject: CN=697867dd-51aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:15:d6:24:ed:64:af:10:67:e4:18:f1:fb:
86:dc:3b:87:e5:26:e5:a1:8d:82:d1:08:cb:ee:55:
63:83:9c:b5:5a:0b:cb:f8:d5:60:b1:20:d9:08:bb:
00:bf:64:8c:be:84:33:91:37:eb:f4:53:f2:a9:44:
0a:8b:1e:c7:b4:ba:c4:6b:91:a8:d7:9c:04:79:6b:
24:e1:e6:1f:b5:7a:c3:49:f3:59:b9:f3:76:37:1b:
8a:2b:54:bb:2b:6b:b0:84:51:48:e2:0e:14:1f:5b:
60:8e:27:4c:30:c5:0e:18:7a:d5:c4:c9:df:46:e3:
fe:74:45:44:f1:51:90:b3:1c:cc:85:cb:20:27:96:
45:25:2c:4a:ff:90:ad:02:e4:b9:2f:e9:5e:ec:c5:
2f:af:2a:2f:4b:04:52:e2:d1:f9:20:9f:5a:52:fd:
a8:1e:39:fc:ff:1a:66:c1:18:a3:1a:8c:3c:0b:48:
fd:0a:19:66:31:0e:11:94:90:dc:df:29:8d:07:92:
2e:61:f6:46:b6:33:ec:31:7b:11:ac:f7:8e:d4:8c:
5e:f8:b4:1a:a0:10:ae:20:18:60:ab:75:86:27:9b:
ad:7f:10:2d:c8:06:ba:4c:1f:30:bd:0a:e8:aa:77:
ec:ad:87:07:00:c4:ed:14:68:89:88:76:4f:68:91:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FB:68:B3:E7:36:25:7A:FF:58:D2:B7:6E:33:B7:DC:B2:D7:86:6C
X509v3 Authority Key Identifier:
keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:6f:b5:8c:7b:05:03:ad:82:6e:ba:d3:58:ae:50:46:56:82:
ff:28:46:07:a0:38:3d:20:d4:e7:04:60:4e:e2:f9:70:bb:d4:
ab:ec:3a:56:c3:6f:99:5c:b3:5c:29:1b:2c:17:13:cd:ab:69:
f8:86:99:71:80:cd:de:80:2d:fc:cc:f9:59:8c:be:0a:dd:4b:
3c:dd:39:dd:4f:c1:7b:d3:89:45:78:3b:6f:72:81:e7:1e:40:
58:81:c3:81:0e:30:f0:2d:36:dc:54:8b:37:b7:d2:21:f9:17:
2e:8d:78:c0:24:c0:ee:c1:71:37:20:ff:85:97:da:59:5f:91:
ac:1e:95:93:9b:d7:c7:73:72:43:6b:8a:6d:27:b5:44:60:e4:
4f:89:70:4c:3b:02:a2:68:79:d6:2f:34:5a:1b:0c:8b:df:a5:
69:62:13:0d:11:a8:a9:81:2a:92:2e:12:ca:92:10:dc:6d:4d:
06:b2:cc:fb:c2:86:b6:b6:28:e8:d4:cb:c7:c1:af:3d:47:b6:
37:b0:4b:08:8d:3a:4b:81:4d:3f:b1:c0:9a:a3:44:96:39:c5:
31:bf:05:7d:74:56:36:05:24:08:4d:76:c3:76:a7:20:6f:fb:
bc:6d:c5:b3:d5:3c:87:1a:02:1c:c7:30:61:de:7d:b1:2c:55:
22:49:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:34:00 2026 by rpki-client