This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
File: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft (raw, json)
Hash identifier: Q9N7qU+xWv/UpvbSE01BQ/XVSqPhK6kjjI+wwxujLwU=
Subject key identifier: 76:84:18:58:75:CC:FA:87:DE:5D:75:4A:09:AD:C8:96:1E:9E:48:08
Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Certificate issuer: /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
Manifest number: 0239
Signing time: Wed 07 Jan 2026 01:10:46 +0000
Manifest this update: Wed 07 Jan 2026 01:10:45 +0000
Manifest next update: Wed 14 Jan 2026 01:10:45 +0000
Files and hashes: 1: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl (hash: aTPc24DvGd/g+m6SDSpI2yIeJbh4z70bP/+Tb/MwcCc=)
2: 2F43497CA16711EFBB0B733EC4F9AE02.roa (hash: ZYbaEoAWqyp/aPXD71n7sec2EkFfTfM2g3XustUPS1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Jan 2026 01:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Validity
Not Before: Jan 7 01:10:45 2026 GMT
Not After : Jan 14 01:10:45 2026 GMT
Subject: CN=695db295-572e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:0a:a9:db:f4:8e:08:18:dc:87:45:28:cb:
b3:0b:b5:f1:a5:1d:e6:49:4a:c2:3a:ea:51:73:30:
9f:d0:ad:da:25:1c:61:5d:fc:3e:b5:16:36:0a:8f:
55:fa:7e:89:db:72:68:4e:1e:58:58:ae:cd:49:76:
f0:08:14:d6:a5:74:43:42:71:8a:4c:04:57:96:f8:
5f:fb:b7:1c:38:65:9b:8f:aa:ec:e1:48:e5:44:06:
d8:26:79:6a:40:72:0f:08:ea:2b:37:78:7a:07:33:
a1:4c:32:8b:08:44:f4:a0:9d:22:a4:f2:40:5f:92:
a8:81:be:9c:98:5f:57:3f:d0:90:83:92:13:be:81:
28:af:f2:32:9a:4e:ba:3f:57:67:13:05:2c:c3:fc:
e5:ed:a6:3e:75:f5:37:97:ef:64:e3:24:62:cb:8a:
55:c9:a9:08:cd:86:ef:18:71:5c:77:b7:87:b3:be:
e0:cc:d0:a9:09:5c:65:2a:b6:ed:fc:9b:d0:8d:ec:
7a:f6:cd:08:6a:bb:f6:0f:2d:c6:40:6b:06:be:1d:
dd:49:58:ed:a5:80:9e:31:43:1e:e4:1e:1a:b5:b2:
6b:5a:93:38:e5:68:9d:fe:ff:36:b9:e6:0e:22:1a:
8e:84:07:ef:21:bf:c3:50:a2:06:8d:07:37:2a:96:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:84:18:58:75:CC:FA:87:DE:5D:75:4A:09:AD:C8:96:1E:9E:48:08
X509v3 Authority Key Identifier:
keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:72:fe:8f:28:b0:1c:fa:a9:39:21:54:f8:44:13:ee:b3:a2:
eb:cf:d4:7e:6e:56:d9:38:06:fd:17:c1:00:b3:2c:b8:96:38:
67:74:a8:09:d6:0f:83:27:52:67:36:e6:7c:22:70:45:1a:ce:
17:c7:5e:3b:13:3a:1c:79:e9:f1:29:ce:3a:9e:d7:bc:5e:77:
c7:b6:8e:a5:06:64:6c:56:fe:d4:48:aa:a8:1d:67:80:fe:54:
23:34:6d:8b:33:ae:32:f8:8a:9c:e9:2b:96:13:54:fd:0a:37:
0a:e4:a5:22:2b:c3:3a:c9:bf:2e:f1:c9:f7:fa:ac:2c:dc:1f:
3f:f6:9f:a0:36:e5:0f:a1:10:9f:5b:60:8b:dd:42:15:14:20:
b8:39:66:73:ea:8c:ad:da:cb:fb:9a:10:9d:fb:8c:19:60:60:
0d:c6:3e:16:83:92:7a:16:1a:39:88:58:8c:40:b7:86:18:d0:
f7:04:a7:b5:2c:5d:be:cd:4f:ab:3b:17:3a:e7:3b:c1:fe:c8:
0a:d6:c6:79:8f:4b:4d:d8:63:6c:f9:7e:4e:fc:e1:21:0f:38:
47:c3:52:d7:b0:58:6e:b2:d0:66:23:d4:69:51:29:6c:b3:4c:
bc:39:6a:af:54:ac:d1:55:e2:b1:2d:be:2f:62:30:44:96:a5:
31:28:3a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 16:24:18 2026 by rpki-client