This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json)
Hash identifier: Wb37FdO80VlSMxfJF4YIE69+NBBpzJmIo3aKSP4+6Do=
Subject key identifier: 58:ED:D0:80:29:43:11:3D:18:2F:14:2A:FC:48:56:4D:C6:ED:3D:AE
Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Certificate serial: 0E7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
Manifest number: 0E66
Signing time: Sat 10 Jan 2026 17:27:44 +0000
Manifest this update: Sat 10 Jan 2026 17:27:44 +0000
Manifest next update: Sat 17 Jan 2026 17:27:44 +0000
Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: 7cxMcwa+AUFfG4cYbIzPLZ1/mj3mDDU43zFsHyIfGoE=)
2: AC549BBCD64C11F086D19BCFA9248E41.roa (hash: kkD8m4xPSHDatd7pcaQ2uOtuQasmUwgdOM4/i7kaYvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 17:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3711 (0xe7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Validity
Not Before: Jan 10 17:27:44 2026 GMT
Not After : Jan 17 17:27:44 2026 GMT
Subject: CN=69628c10-fd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:be:9c:cf:42:83:d3:ee:6f:7e:c4:11:7d:
10:0b:57:50:a5:2d:c4:10:b6:ad:0b:8b:cf:68:8a:
dd:72:4d:bd:6f:3b:07:12:ae:ec:b6:69:05:e6:23:
aa:ce:de:4c:fe:fc:bb:c7:8f:39:75:c9:d5:b0:c8:
e0:b1:a7:47:94:ac:59:e9:a6:50:0a:d8:d1:07:d6:
a0:ae:8d:9c:e3:f7:f6:19:0a:07:40:c2:e9:65:f0:
5c:32:78:5f:a3:c2:bd:b0:4a:34:5f:ee:62:4d:5f:
a0:c4:51:cf:df:91:61:0f:d7:33:27:6f:27:5c:37:
1f:0b:54:f2:69:31:05:8a:42:9d:69:92:67:92:da:
c1:8b:f4:bc:8f:82:4c:eb:90:97:72:47:44:8e:94:
04:e5:1a:b0:4f:fb:32:09:97:4f:d2:12:89:98:18:
56:36:70:8e:4d:2a:25:fb:3d:1c:4a:dc:e3:3b:f8:
a2:bf:71:53:8f:df:b9:7c:c7:1d:56:fe:35:e4:f3:
6c:87:b4:85:d2:a8:73:c0:a7:10:44:35:3c:f7:41:
4b:67:aa:91:74:94:6b:e8:a2:5a:c2:45:1c:d3:a2:
f0:8a:ea:81:1e:bd:7d:77:fb:95:f3:b2:e7:e8:e0:
f8:d5:e8:b0:fe:5f:49:b4:c7:fc:b7:87:4b:b5:92:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:ED:D0:80:29:43:11:3D:18:2F:14:2A:FC:48:56:4D:C6:ED:3D:AE
X509v3 Authority Key Identifier:
keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:5e:ba:f5:85:9a:f5:22:33:ba:2f:7e:4f:0b:f7:08:0c:00:
b1:37:b3:09:9b:65:18:5f:10:7e:43:bb:e7:cf:36:70:6c:ff:
79:3e:27:61:e4:bd:19:1f:c5:80:5a:44:91:db:6b:83:70:f2:
bb:39:65:34:f0:d2:38:9e:00:08:c1:74:63:67:83:a1:6d:a6:
9c:09:4f:7b:9a:a4:33:9b:0c:aa:99:ae:6f:c3:d9:fa:87:d4:
97:2e:ba:f4:54:ab:31:8a:e0:6b:d0:32:52:ed:0f:04:17:da:
13:37:1c:0f:2b:28:35:69:66:be:a7:e6:fb:a7:ee:3d:fc:f9:
d7:e0:f1:b9:88:54:ee:73:0a:28:bf:46:93:83:8d:bc:1a:9a:
5d:5c:36:ba:e4:6a:59:33:ad:cb:74:22:8c:98:a8:7d:22:b2:
9f:4d:78:81:f6:eb:e3:2f:29:0b:d5:05:9a:87:1b:a9:20:66:
f3:9a:d1:a1:96:ae:2c:7e:69:d3:d6:e0:f9:ca:58:12:b8:d6:
0c:5f:f6:93:af:70:74:7e:76:85:82:fd:77:f6:64:08:1e:87:
08:27:f1:76:28:56:52:2d:f1:89:65:18:e4:95:d0:5e:15:91:
82:86:79:0b:33:b6:e5:2f:81:a7:86:85:6b:35:eb:4d:52:4a:
87:67:3f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:19:35 2026 by rpki-client