This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json)
Hash identifier: QVB9vhXm3rnPuml00y/zlrUlZlSvFfvgtLc5EDZUIPY=
Subject key identifier: 88:0F:39:74:3A:67:6E:78:BB:A1:B2:52:04:C2:3F:35:41:12:3D:33
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
Manifest number: 0224
Signing time: Sun 25 Jan 2026 01:57:03 +0000
Manifest this update: Sun 25 Jan 2026 01:57:03 +0000
Manifest next update: Sun 01 Feb 2026 01:57:03 +0000
Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: RfLU3DcYbsP0817D+tfWn6do0meAM6j7fVKxzLytocM=)
2: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: 8RemKyfJQtXvAOB/Ei52MDI9KMaFn3vaXMJC+OL2BTo=)
3: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: xJf9OjyZ9tl22O94Y+hCu+z+3Ka7jvHkbMt39lHsOuw=)
4: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: jgvNZRe9TtRr8CjiSGyPeDv21uzfhNhZZ8tu5qtOBO0=)
5: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: 1iYx6AnDG5k3WAo1cEbcn3Zch3QKy9Aj+tVhGhOpm2M=)
6: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: /H0+uJjrBUM5k1a0PlilTjkv6OXrTMlJFAf/4vjgSHc=)
7: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: 6GO7eV9ptg4bEhjgmfPj3OiDNEEWB+tcYPU19G/hzs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Validity
Not Before: Jan 25 01:57:03 2026 GMT
Not After : Feb 1 01:57:03 2026 GMT
Subject: CN=6975786f-2a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:7f:f5:cc:37:b4:b6:d9:c5:89:c3:92:25:
74:d2:7b:a7:5e:7b:72:bf:0a:51:94:6c:38:b3:b1:
a4:b4:54:0a:85:ec:f5:36:00:f9:48:9d:55:8d:fb:
62:d5:19:27:57:81:cc:22:d7:1e:e0:f9:ef:0f:e8:
88:e0:c9:29:a0:76:5c:79:2e:eb:df:8e:04:18:7b:
15:98:d0:7f:48:07:4c:90:e2:0e:a8:fe:20:e4:c5:
1d:8c:0f:67:91:0e:eb:68:47:60:c9:34:13:59:20:
5d:ff:d5:2a:5b:22:68:4e:ac:8d:60:68:e7:69:31:
c8:c7:62:3f:c7:f0:0c:9b:00:c0:4d:c6:7c:a1:79:
1a:0e:95:26:7e:d2:36:20:ba:72:0d:c2:fa:bb:c2:
f0:46:c6:8c:ff:e3:68:92:c2:0a:2a:f6:f1:9d:67:
66:3e:51:09:58:2b:3e:c4:c8:7b:0d:6e:a2:a1:c8:
13:6d:a2:6f:b3:66:86:26:6a:3e:0a:29:4d:03:f3:
c0:35:63:ee:92:d8:ff:0f:3e:f0:74:72:b9:d5:18:
38:5b:b6:eb:04:8c:4f:39:e9:bb:60:fb:20:e9:07:
e6:41:5a:c7:81:c9:66:16:d4:70:0d:03:ce:a5:d6:
ab:65:95:ce:cc:3e:01:05:57:6d:bd:26:04:8f:d4:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0F:39:74:3A:67:6E:78:BB:A1:B2:52:04:C2:3F:35:41:12:3D:33
X509v3 Authority Key Identifier:
keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:f6:c1:d4:ad:59:18:a1:7b:e6:a2:ef:39:17:61:e7:16:43:
98:27:97:1c:1d:5a:bb:57:76:36:78:64:f7:55:5b:aa:93:d4:
11:33:e1:0e:f5:1d:66:22:82:b8:a0:c4:86:73:58:77:14:97:
3f:7d:88:e5:3f:f3:75:f8:c7:0c:73:ee:2d:54:5c:d8:2a:8c:
2a:cc:cc:b3:45:26:02:4c:67:dc:d7:d9:3f:1f:89:6b:61:e0:
39:7f:3a:d8:6b:30:19:92:69:16:e3:8f:a8:b7:9d:9c:64:cd:
df:b8:de:d7:89:5e:d4:92:d2:51:f1:72:c9:3c:89:43:0f:18:
be:d6:fe:bd:51:ca:43:53:ea:14:71:93:30:31:c0:10:91:3f:
9a:b7:e4:fc:11:36:a5:56:ba:05:77:c9:a5:7e:78:b9:99:2a:
48:ef:7c:28:f9:d5:36:ee:38:e1:6b:23:05:1d:cc:ca:28:e4:
95:d0:26:61:3d:dd:b0:aa:42:72:8f:22:2c:7b:12:a2:ca:6c:
fa:13:52:ee:46:0e:be:72:a8:8f:43:e8:80:ac:c5:85:24:1c:
8b:b8:66:1a:6a:14:8a:f5:1b:14:e4:d4:63:61:c6:43:42:61:
ee:dd:9c:03:4e:bf:6a:e3:41:09:5e:2e:af:30:d8:d1:98:1b:
71:11:14:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:08:47 2026 by rpki-client