This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
File: IcuqoETeGlZkRp9Bi80Id7ITlzo.mft (raw, json)
Hash identifier: TNSqSNHOTis4Cd4mzNaZao5ntuYmGlJsYsdpblnvGGY=
Subject key identifier: AC:F3:67:47:7A:B4:26:C3:73:92:44:54:A8:B7:82:EE:2D:F6:03:73
Authority key identifier: 21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A
Certificate issuer: /CN=A911393B/serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
Manifest number: 01B2
Signing time: Sun 25 Jan 2026 02:28:25 +0000
Manifest this update: Sun 25 Jan 2026 02:28:25 +0000
Manifest next update: Sun 01 Feb 2026 02:28:25 +0000
Files and hashes: 1: IcuqoETeGlZkRp9Bi80Id7ITlzo.crl (hash: 6G1L96tMMd3iWgoqVzcYlA7Mev/M3kNsPpqJ6fIUztU=)
2: 6538D178628E11EEBF375134C4F9AE02.roa (hash: 5hu6VPOMwmE3voYXkmp3eUb3lVDeCA+zJokawI+UD3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl
rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911393B, serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
Validity
Not Before: Jan 25 02:28:25 2026 GMT
Not After : Feb 1 02:28:25 2026 GMT
Subject: CN=69757fc9-5a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:fa:f7:08:18:56:dc:36:ce:ef:9a:51:0b:
f9:3b:15:d5:c5:6e:5a:6a:d1:1f:5a:ba:0d:b7:35:
6c:f4:34:b6:2a:0c:54:4f:a7:74:40:b1:a3:66:f7:
65:6d:e9:f9:66:d8:9f:2d:87:e2:24:84:15:cc:32:
2c:1b:5c:a3:d1:49:56:8e:a6:df:00:69:d7:04:d7:
1a:15:31:99:f5:a4:24:c9:9f:93:fa:82:4c:97:c5:
09:e9:cd:50:dd:86:51:84:25:5a:89:82:27:13:f8:
af:f8:38:32:5e:71:05:9a:ed:fb:ef:21:49:f5:1d:
b1:8f:11:99:6c:48:a3:7d:fd:5e:f7:38:09:12:dd:
74:80:49:ee:be:40:05:ed:1a:b3:e0:46:51:99:18:
17:4f:a3:55:ca:e6:1a:3b:61:e1:76:e7:9c:b0:b5:
98:91:79:86:97:be:42:69:53:f1:b3:03:71:09:43:
6e:6c:3e:8a:68:7f:25:cb:45:87:42:cc:b4:2a:1a:
5f:bb:36:99:35:02:24:d5:3a:54:fc:69:d3:87:8c:
0a:de:c6:1c:a2:36:83:28:2a:14:5e:ea:1a:0a:c0:
f0:5d:71:68:7d:dd:19:5c:26:2b:1c:e7:e3:2d:e2:
66:96:4b:73:26:ec:65:83:fd:b9:12:02:6c:0e:46:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F3:67:47:7A:B4:26:C3:73:92:44:54:A8:B7:82:EE:2D:F6:03:73
X509v3 Authority Key Identifier:
keyid:21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:80:9b:6a:93:aa:5d:08:c8:05:57:75:9d:68:6b:dc:84:ce:
63:c1:61:7e:fa:1c:cd:55:92:41:af:60:38:a9:22:03:c7:68:
dc:2d:92:a1:13:bc:23:86:5d:ac:59:ee:ab:17:6f:a7:db:08:
2a:80:4b:cf:c4:89:18:dd:66:b7:54:96:0c:6e:22:ec:24:0d:
f9:f1:91:3c:5f:ad:8b:cf:74:96:68:b4:f2:19:a6:e6:50:52:
8b:16:27:39:bb:ef:bd:82:eb:1a:d7:93:2a:7c:02:93:51:24:
c1:2e:79:9d:c7:b5:5a:8e:35:d3:9d:df:ef:42:b9:b2:18:74:
c5:0d:0b:8f:22:30:cb:95:62:8e:f0:56:26:a6:44:6e:97:b4:
8e:bb:da:5c:bf:e4:48:b3:07:e0:d9:53:68:00:dc:ca:34:4b:
b4:ed:d2:f2:8b:fe:15:d1:5f:e0:68:29:dd:d3:c9:3c:9b:2c:
bf:a4:bf:19:16:55:74:f6:e0:8d:c4:f7:76:25:98:9e:a2:f0:
ce:99:2f:7f:14:83:94:a1:cf:73:a5:c6:76:8a:77:97:ff:b9:
3b:cc:75:f7:b3:74:c2:7d:7e:d1:27:a3:49:86:56:f8:5b:b5:
db:38:8c:21:9c:d0:c0:a5:85:4b:5b:4a:ca:c7:81:ba:98:3f:
10:07:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:09:44 2026 by rpki-client