This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json)
Hash identifier: kQRAj1y6L3+WBmrCOCHG12dkBNHsscUxkROPGZXicuE=
Subject key identifier: 5E:14:BD:99:7E:37:6F:C1:8E:DD:B2:41:E3:D0:5A:34:19:B5:99:9D
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial: 04C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
Manifest number: 04BE
Signing time: Sat 10 Jan 2026 23:06:28 +0000
Manifest this update: Sat 10 Jan 2026 23:06:28 +0000
Manifest next update: Sat 17 Jan 2026 23:06:28 +0000
Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: kLAWBF6Rgeo5+4Sv3npAu6XjZvNdhR99GoX4kje9PNs=)
2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: qCU/OsBRO4+PMlzfkCWYCpZe9YTKzCH9brvEdyELMJs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 23:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Validity
Not Before: Jan 10 23:06:28 2026 GMT
Not After : Jan 17 23:06:28 2026 GMT
Subject: CN=6962db74-9016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:8d:14:6d:a8:fd:8f:c8:74:ee:72:7c:c5:
15:89:4c:6d:56:ff:da:b2:09:94:65:ca:13:de:00:
77:0a:64:77:43:b9:cd:9b:09:cd:e8:d6:e4:c8:e5:
b7:db:f0:51:c8:f3:30:27:19:35:70:b5:1c:72:56:
cf:fa:b0:89:96:b2:ac:6a:91:e8:25:0c:d1:33:75:
dc:7d:1e:aa:c7:df:28:fd:d3:0f:ed:f1:62:b3:f0:
4f:e6:13:bb:57:ed:78:ca:93:e9:92:02:b4:4f:56:
82:12:3d:96:c5:40:89:6c:1f:35:09:02:2c:cf:c0:
5e:ae:32:03:70:60:8c:10:dd:d3:06:d2:f5:bf:63:
00:d5:3d:a3:25:c0:7a:6e:ee:09:7a:1f:ff:29:f3:
4b:f6:95:e7:26:c4:ed:a0:1a:46:15:0a:2e:25:db:
6e:7c:c3:2c:3e:34:35:10:c1:77:dc:ac:c8:bc:6e:
ab:ef:3a:8d:7d:6f:03:6f:b2:1f:34:ee:d7:c7:d6:
2c:f5:07:d1:aa:66:b3:62:3b:f2:25:ab:9c:26:bb:
21:e1:e0:9c:fd:32:8d:b4:c6:3c:32:71:c7:56:54:
c4:2d:cd:c7:f5:ea:12:8d:76:af:6b:76:7e:0e:fe:
cd:4e:c3:61:12:61:f0:52:ca:e6:52:a5:99:c6:c1:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:14:BD:99:7E:37:6F:C1:8E:DD:B2:41:E3:D0:5A:34:19:B5:99:9D
X509v3 Authority Key Identifier:
keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:8f:75:d6:b0:25:1c:3a:b3:26:66:77:d8:c4:06:ac:d6:be:
5e:64:bc:57:e7:3a:24:da:32:5d:7b:89:7a:9d:4d:1a:b1:63:
61:df:5a:be:b0:d5:0c:bf:75:9d:d7:c3:01:5a:c7:11:1d:de:
d7:d7:3c:cc:8b:5f:a5:7c:26:61:45:2f:d9:da:43:e0:c3:f2:
38:ba:e4:df:20:34:17:51:59:25:dd:57:ce:5d:78:d1:1b:13:
0c:57:10:7e:92:b8:8c:73:f5:3b:f4:d5:b0:28:fa:1e:34:49:
1f:ce:ea:11:98:a9:ce:0e:2e:91:a3:e0:5e:c6:0e:ea:20:20:
05:f3:69:51:4e:20:34:22:de:b1:e3:b1:e1:2d:cc:87:06:8f:
0e:91:13:46:67:b4:ae:e7:e5:05:3e:12:91:a9:25:ed:48:7e:
83:e4:97:bf:6b:81:b2:49:50:8a:fb:ad:26:ab:b3:12:9d:b3:
75:4d:41:89:b9:a0:62:18:de:fb:2f:94:15:a4:1f:05:dd:26:
bc:de:81:f9:01:78:c7:52:a9:bd:40:94:70:62:9d:9f:d2:bc:
95:50:11:30:e9:1d:d4:c3:e7:1a:8e:4b:3b:19:74:b1:ae:7e:
cd:66:82:92:4f:3b:6b:5a:33:ac:cc:9b:ac:56:e1:ba:16:6f:
ed:1d:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:31:05 2026 by rpki-client