This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
File: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft (raw, json)
Hash identifier: FvEsOLDVeySJlVHJCwwbfQL3HUzgQ2P7poZ8a3qF/Mw=
Subject key identifier: F2:65:1E:65:E0:0F:70:B1:90:DA:95:87:02:C3:FF:29:9B:6B:F7:F3
Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC
Certificate issuer: /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
Manifest number: E4
Signing time: Sun 11 Jan 2026 04:44:13 +0000
Manifest this update: Sun 11 Jan 2026 04:44:13 +0000
Manifest next update: Sun 18 Jan 2026 04:44:13 +0000
Files and hashes: 1: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl (hash: HEdgTAxeh6KJgZAINX4UexExjTrd49Y0TW9ehLSrCQ0=)
2: 10B69CB69A7811EFB88E9513C4F9AE02.roa (hash: h0Ix2v/co1mQt8N7/1X7T+jzKKiC9C9BGQ0eCb34Oxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl
rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 04:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD87, serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC
Validity
Not Before: Jan 11 04:44:13 2026 GMT
Not After : Jan 18 04:44:13 2026 GMT
Subject: CN=69632a9d-f90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:73:85:97:58:dc:3c:2b:59:6c:16:60:af:
3c:17:22:70:7c:16:fe:7e:1c:96:99:6e:a7:06:66:
f2:16:98:1a:01:7a:bf:75:a4:0d:ca:8c:9b:48:17:
25:2d:6e:a5:cd:3f:6d:e3:e3:a2:51:7b:a7:43:35:
04:a2:35:28:2f:b8:66:7e:cf:49:05:bf:a1:bb:43:
3a:cc:47:f5:03:2b:71:f8:fb:92:a7:10:b0:2a:a5:
07:87:53:1a:d1:6d:6c:2f:4a:04:03:11:be:c0:1c:
44:c9:8e:1a:5a:80:5c:92:6d:8e:c2:09:35:50:ec:
8f:79:49:6d:48:35:c5:fe:74:2f:64:22:0d:1c:e1:
ae:21:a3:8c:78:37:2f:f9:83:01:10:82:a4:cf:f7:
80:27:a8:01:d4:3c:2a:3c:dd:83:ae:aa:32:95:ca:
59:8f:60:b0:df:b8:de:36:a2:d7:95:97:aa:d8:f7:
e0:21:58:e1:22:14:4a:7d:a7:2c:09:45:a6:4e:fa:
51:c9:2b:93:07:04:0a:57:02:38:3f:b4:84:2d:ed:
05:25:fb:31:ad:19:53:bb:31:4c:20:8e:79:a5:9a:
52:23:05:d5:81:46:5f:d0:b2:35:35:e2:a3:05:b3:
29:51:e2:2c:84:39:3f:42:e8:43:5c:55:45:f9:a5:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:65:1E:65:E0:0F:70:B1:90:DA:95:87:02:C3:FF:29:9B:6B:F7:F3
X509v3 Authority Key Identifier:
keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:fe:7a:0e:a5:e0:c5:9e:fc:19:64:77:b0:22:63:d2:5c:b3:
b9:64:74:25:a0:73:ed:16:96:6e:0a:11:5d:87:a2:1a:c4:50:
c4:3d:2b:87:d0:76:72:54:9a:c4:ec:56:6e:95:65:2b:11:dc:
93:35:fe:65:bc:5c:97:84:8e:86:c9:4f:02:f1:30:29:08:28:
5b:c4:f5:35:02:22:01:4a:f9:46:7f:d2:3c:43:39:8d:41:12:
ad:a1:b2:3d:f3:15:0f:f0:14:d7:92:5e:b8:c1:23:18:6a:71:
a8:f8:c2:e3:66:42:aa:1d:9d:77:c9:f2:da:8b:90:57:f9:f4:
13:9f:f3:73:fd:ff:58:01:e6:47:fc:01:bd:aa:b1:d4:17:e5:
0f:5a:a1:29:55:60:a1:96:e5:28:82:7b:32:00:cd:5e:03:86:
7d:dd:d3:71:94:7d:39:fa:a0:33:97:dd:70:68:f4:ca:a2:56:
52:e8:6a:42:5f:1c:e8:56:85:73:ec:24:22:64:c8:c1:ea:13:
97:64:5b:50:5b:2f:74:83:fe:36:c8:bc:1e:5d:72:98:80:d7:
d5:d7:82:df:bd:63:35:54:e9:50:4b:97:88:65:9c:f1:03:c6:
09:dc:45:99:bc:66:64:f6:05:f2:45:d4:5c:c5:ba:ec:2b:d2:
8d:d6:55:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:31:55 2026 by rpki-client