This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
File: 8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json)
Hash identifier: SBqLjIZql57vNhEe0A0fj5TtxHXLCUMNl55FXHTUg7w=
Subject key identifier: 28:C7:F3:75:E1:97:7E:B6:83:18:35:EA:E6:20:52:2C:94:7D:DF:5D
Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
Certificate issuer: /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
Manifest number: 011E
Signing time: Sun 11 Jan 2026 04:00:44 +0000
Manifest this update: Sun 11 Jan 2026 04:00:44 +0000
Manifest next update: Sun 18 Jan 2026 04:00:44 +0000
Files and hashes: 1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: 8XJPpQtEO1sLMjHeSMhCs1j0pgoghKVfm4F53td2Aq0=)
2: E36214403D0011EFAD623342C4F9AE02.roa (hash: AwYKGbCuVNqR5TnlD+W51Ob1Ci3CK6EmFUtU8criHKk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Validity
Not Before: Jan 11 04:00:44 2026 GMT
Not After : Jan 18 04:00:44 2026 GMT
Subject: CN=6963206c-936f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:92:2a:4b:19:f4:7b:de:19:88:47:45:a4:
27:04:98:4e:2e:09:bf:d4:68:ca:1c:d7:e4:8b:6a:
89:2f:3b:bc:da:39:22:a0:b4:ce:f9:20:d4:6c:80:
89:8f:66:c3:98:72:96:25:d3:3e:12:17:3e:8e:a2:
53:fb:76:94:9b:b5:5c:c4:e9:1f:8b:21:73:e1:2d:
e2:0c:01:29:05:af:17:46:c6:93:e6:35:54:2d:67:
23:0d:18:f1:1d:97:17:32:af:88:10:46:6f:32:b5:
e5:9e:f9:a5:ee:6b:3e:b7:e7:3f:2f:7f:f8:fc:68:
5d:2f:5f:e6:76:d1:03:e4:45:b6:b2:5a:b1:fb:da:
47:b5:70:7c:c2:a1:30:3c:eb:ee:a5:4c:fc:97:e8:
8d:a2:11:5d:48:35:0c:10:74:22:b5:1f:2f:36:34:
9b:71:12:ce:b4:c4:71:b8:c0:60:fb:bd:e0:5d:27:
e4:60:b2:fd:e4:9b:93:fd:7d:5d:ae:be:ad:81:ee:
af:19:27:ad:c2:ed:fa:4a:de:dc:52:bc:64:26:56:
ee:01:1a:0e:8a:14:b0:bf:7a:d2:bd:de:b7:63:e8:
a4:bf:7a:b3:fa:77:1f:1e:64:81:55:2a:c5:67:8a:
e0:95:42:fb:49:5b:94:52:47:2d:04:f7:6e:6e:e2:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C7:F3:75:E1:97:7E:B6:83:18:35:EA:E6:20:52:2C:94:7D:DF:5D
X509v3 Authority Key Identifier:
keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:27:71:8b:95:0b:8c:3e:b5:1d:b1:51:5a:2e:6f:ea:71:22:
7c:fc:a2:10:8c:69:f7:31:c5:c2:35:52:54:03:63:ed:84:f7:
62:fc:3f:5c:8c:24:37:d3:5b:b7:52:db:83:79:94:f5:44:0b:
ba:38:0d:7b:4c:7e:e4:e9:d5:c1:70:e8:57:51:c2:3d:cf:47:
1a:9d:0b:db:d8:db:ff:b5:2f:0d:c7:ed:49:42:9b:99:9d:cf:
f1:a0:69:de:7e:48:79:e9:24:87:0d:93:90:a8:3f:24:d7:4f:
46:a4:a6:cb:21:c7:49:fe:6c:5b:0c:b9:b2:80:82:31:9b:01:
ed:5c:c8:20:74:a5:69:3e:69:71:04:37:f8:96:2f:18:1d:ec:
07:c3:69:74:5b:dc:fc:99:99:30:f9:c6:e8:94:ad:1c:9b:af:
cc:96:66:74:fc:1c:b4:45:b0:6a:9c:c4:ae:f4:61:24:0c:71:
fb:b4:ad:d0:07:a7:ff:f6:3d:95:6d:f4:82:e1:98:cf:41:a0:
a8:15:bc:ca:90:5d:e6:68:b9:3d:50:30:23:88:e8:53:4d:59:
66:f9:28:52:58:d7:b6:1c:60:fd:d9:2a:ce:d4:4c:b6:06:58:
0b:0d:25:42:8c:5a:6c:0b:b5:28:73:9d:57:1b:3f:bb:af:18:
6c:6f:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:57:33 2026 by rpki-client