This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File: iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier: 664j2dk8k5uMe/23bQyrtiw4l21qrlQ9/r1kjG2/xJc=
Subject key identifier: 2B:05:FC:90:7E:80:DE:DB:0D:EF:FD:9C:73:9E:20:28:0B:8E:71:F8
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial: 03B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number: 03A9
Signing time: Sat 24 Jan 2026 23:53:23 +0000
Manifest this update: Sat 24 Jan 2026 23:53:22 +0000
Manifest next update: Sat 31 Jan 2026 23:53:22 +0000
Files and hashes: 1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: /gRC90CJUmABrzsA7uY8cxpJ5L3LKP75QqBdP+RzWwA=)
2: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: daMU3ImqJzsIleot5aS0XfHVIYpdh2rNrlvSYi4RSDw=)
3: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: 4UMRc+U+QvsxtO1R2mqRXzqp5X2s02DN1FDAeR0/6VE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 946 (0x3b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Validity
Not Before: Jan 24 23:53:22 2026 GMT
Not After : Jan 31 23:53:22 2026 GMT
Subject: CN=69755b73-35e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:ef:7a:48:0b:f7:4c:3e:9e:ed:a6:fc:06:
3a:5f:85:ab:d5:a7:25:8f:4d:df:26:c7:20:81:30:
32:71:be:6f:2c:c9:56:53:4f:46:bb:bb:44:09:f6:
bc:85:0f:a3:a9:2d:d7:cd:ef:67:3d:4c:c0:c6:c9:
79:12:b7:b9:d5:bd:5c:fc:7c:f9:77:09:f0:3c:71:
a7:1d:1b:f0:48:29:d5:15:27:a1:b2:a7:ee:85:9e:
a9:4a:03:c2:77:71:2e:3d:3c:1b:d2:dd:7b:81:62:
6f:30:2a:76:de:5d:2c:53:00:6c:e7:04:cd:ce:29:
ff:39:3a:33:e8:15:d2:a3:4e:c1:0a:ae:df:f6:fc:
06:f7:fe:de:01:93:1f:e7:66:1f:b1:3e:25:3a:2b:
6f:3b:9d:8f:49:20:03:23:93:98:68:7a:ff:8b:d5:
25:58:ee:60:0c:6b:f0:72:31:61:0d:69:19:a8:69:
41:bf:eb:fc:e5:1b:40:92:f5:43:88:e1:a1:f7:5e:
d8:44:bd:52:fb:bb:c5:a9:95:c4:0d:42:ff:eb:58:
4d:ff:78:66:16:1d:f4:11:8f:32:99:c8:07:b1:dd:
f3:8c:c1:22:70:a5:d0:2a:86:48:c7:79:86:1a:10:
cf:9e:a2:53:35:34:8b:77:9f:e1:7d:6d:e9:1e:a8:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:05:FC:90:7E:80:DE:DB:0D:EF:FD:9C:73:9E:20:28:0B:8E:71:F8
X509v3 Authority Key Identifier:
keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:9e:20:d8:83:4f:23:2e:1e:b1:d9:dd:d9:d4:a0:8d:e7:9a:
01:9c:31:c6:93:13:da:dc:35:09:9a:cf:dc:9f:1b:b3:d7:c9:
89:57:33:7c:f9:48:24:65:4f:ff:b4:9d:48:fc:25:a9:fc:da:
1f:06:32:d8:12:4d:48:4c:46:51:5d:94:44:4e:c4:2e:5d:42:
f0:95:a1:0a:95:ab:f5:af:d5:9a:ad:ba:17:9a:13:e6:11:a1:
b5:8a:79:45:cc:11:a0:fc:7c:07:d3:3a:42:ba:4e:e3:b9:9a:
c9:cf:c4:42:ab:fd:9d:de:fa:32:c1:16:bb:d1:51:6d:42:49:
72:09:5a:7b:32:69:04:50:7d:77:4d:58:84:9f:5a:bb:a5:a1:
2f:67:60:53:28:8a:1d:58:8e:47:f2:ae:9a:e6:a4:9d:ba:4f:
ba:fd:0f:fd:86:a9:e7:0d:f6:d7:9b:42:12:02:39:62:a8:da:
0a:11:07:8a:ac:9c:f8:bf:c0:9a:49:03:ec:36:9b:e9:eb:2f:
f1:8f:27:97:2d:56:4b:51:95:0f:31:8c:85:5d:5b:88:5c:08:
4d:9b:a2:c1:51:75:8a:e3:a6:09:3b:f7:ea:1d:09:fb:0f:92:
4b:1c:c7:27:34:92:8a:6e:6e:9a:25:38:af:ea:02:77:3d:bc:
98:fb:5d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:44 2026 by rpki-client