This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
File: I9szI90s15w3OFgdQvSrD0mINMI.mft (raw, json)
Hash identifier: 6+SMjKxWi842X7mKcCsGDPRgIYRxMz3d38EX8TDQpEI=
Subject key identifier: 28:6B:86:00:20:26:80:4A:DD:52:5B:EF:FC:52:9F:BF:A3:27:09:8B
Authority key identifier: 23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2
Certificate issuer: /CN=A911C28A/serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2
Certificate serial: 0642
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
Manifest number: 063C
Signing time: Sat 24 Jan 2026 22:00:21 +0000
Manifest this update: Sat 24 Jan 2026 22:00:20 +0000
Manifest next update: Sat 31 Jan 2026 22:00:20 +0000
Files and hashes: 1: I9szI90s15w3OFgdQvSrD0mINMI.crl (hash: 4gx33dUdp6e5A+zBUB33ZVectqNcOcA7zk0WLnyEPh8=)
2: 2D5E84AAC2A911EBB2025B36C4F9AE02.roa (hash: dCkT6bEicYFMQep7850krPGfdcTTuO3WSPylF2CQFFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl
rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1602 (0x642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28A, serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2
Validity
Not Before: Jan 24 22:00:20 2026 GMT
Not After : Jan 31 22:00:20 2026 GMT
Subject: CN=697540f5-bd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:07:99:58:4f:84:46:db:fb:28:e6:f7:48:
5e:e9:e7:2f:59:c7:e5:5a:32:7f:b1:cc:6f:0e:fa:
e5:0d:52:f9:ef:30:59:f2:94:54:bd:eb:54:02:49:
7c:40:e4:16:c8:60:3d:60:3a:23:3d:40:53:dc:3e:
10:12:b2:f4:2c:4a:f9:38:9e:58:5d:f3:3a:3d:01:
fd:51:12:5e:1b:13:f2:0f:2c:91:13:b9:bf:3d:de:
d8:07:f7:3f:d6:be:94:61:88:55:2d:e6:3b:06:26:
43:88:b2:c6:cd:b5:6f:f0:b5:2a:06:7c:e5:cd:fe:
fc:92:b4:10:f5:64:69:96:53:08:07:4a:f3:11:43:
1e:ab:68:59:25:d6:f0:33:05:42:b0:8d:44:0f:09:
ad:1a:c9:f0:09:ba:61:cf:1c:d1:f7:27:2d:cd:f1:
45:87:d1:17:79:57:91:cd:c8:b2:2d:61:2e:24:67:
20:88:87:ba:a2:7a:90:d0:88:d0:ad:05:3d:e5:5b:
41:09:85:3b:cc:db:53:de:1a:02:70:a9:98:9b:c9:
ba:bd:fd:eb:aa:ac:21:92:cb:35:dc:7e:ac:f9:3f:
b9:37:53:9e:79:25:31:74:2c:ba:c2:da:ee:d1:f0:
99:cc:b4:00:d4:84:c6:96:b6:97:85:72:8d:70:67:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6B:86:00:20:26:80:4A:DD:52:5B:EF:FC:52:9F:BF:A3:27:09:8B
X509v3 Authority Key Identifier:
keyid:23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:dd:64:93:62:40:75:73:22:46:48:56:a3:2b:18:d1:3a:f5:
ef:68:a7:76:c9:03:1b:75:d7:d4:c5:b4:c2:e6:90:a1:b7:7a:
a8:98:06:e2:b9:40:b2:04:41:22:1a:fe:09:9c:c5:0a:5e:40:
0d:9f:d7:74:f5:1e:ae:69:56:ec:e7:4a:21:40:4a:18:42:1a:
e0:a6:1e:92:9d:f3:53:cb:7a:9d:66:ef:47:43:d9:48:f3:53:
5f:25:5e:65:88:d6:9e:2d:38:21:a5:ba:d9:aa:95:42:d3:9e:
cf:d1:c9:7e:6d:46:b3:b5:b1:68:7a:7f:41:d8:c8:99:fa:33:
ee:62:10:f3:31:58:62:21:a1:cf:fa:15:6d:16:35:d9:81:84:
bb:9b:d2:ec:8c:3a:f6:07:c1:ce:57:6b:9d:ea:40:08:23:68:
4a:a0:1e:d6:30:92:d9:46:14:a3:4c:42:39:37:db:d3:c6:95:
24:9c:8c:db:5c:40:96:2f:06:c0:98:94:25:71:0b:75:a2:c0:
c8:ec:0b:99:83:04:5e:c1:44:fe:1b:c4:0c:d4:c7:aa:74:d0:
56:4a:5f:2d:12:fc:ea:7a:44:62:86:0a:70:b3:69:ee:e1:6c:
c4:54:54:41:ce:e5:86:30:ef:76:46:b0:36:2f:7e:85:13:92:
c8:d3:c9:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEExMTAvBgNVBAUTKDIzREIzMzIzREQyQ0Q3OUMzNzM4NTgxRDQyRjRBQjBG
NDk4ODM0QzIwHhcNMjYwMTI0MjIwMDIwWhcNMjYwMTMxMjIwMDIwWjAYMRYwFAYD
VQQDDA02OTc1NDBmNS1iZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxaYHmVhPhEbb+yjm90he6ecvWcflWjJ/scxvDvrlDVL57zBZ8pRUvetUAkl8
QOQWyGA9YDojPUBT3D4QErL0LEr5OJ5YXfM6PQH9URJeGxPyDyyRE7m/Pd7YB/c/
1r6UYYhVLeY7BiZDiLLGzbVv8LUqBnzlzf78krQQ9WRpllMIB0rzEUMeq2hZJdbw
MwVCsI1EDwmtGsnwCbphzxzR9yctzfFFh9EXeVeRzciyLWEuJGcgiIe6onqQ0IjQ
rQU95VtBCYU7zNtT3hoCcKmYm8m6vf3rqqwhkss13H6s+T+5N1OeeSUxdCy6wtru
0fCZzLQA1ITGlraXhXKNcGfZ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChrhgAg
JoBK3VJb7/xSn7+jJwmLMB8GA1UdIwQYMBaAFCPbMyPdLNecNzhYHUL0qw9JiDTC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4QS8yQTM1NjZBOEMy
QTUxMUVCQjREMzRFMzVDNEY5QUUwMi9JOXN6STkwczE1dzNPRmdkUXZTckQwbUlO
TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k5c3pJOTBzMTV3M09GZ2RRdlNyRDBtSU5NSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzI4QS8yQTM1NjZBOEMyQTUxMUVCQjREMzRFMzVDNEY5QUUwMi9JOXN6STkwczE1
dzNPRmdkUXZTckQwbUlOTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB93WSTYkB1cyJGSFajKxjROvXvaKd2yQMbddfUxbTC5pCht3qomAbi
uUCyBEEiGv4JnMUKXkANn9d09R6uaVbs50ohQEoYQhrgph6SnfNTy3qdZu9HQ9lI
81NfJV5liNaeLTghpbrZqpVC057P0cl+bUaztbFoen9B2MiZ+jPuYhDzMVhiIaHP
+hVtFjXZgYS7m9LsjDr2B8HOV2ud6kAII2hKoB7WMJLZRhSjTEI5N9vTxpUknIzb
XECWLwbAmJQlcQt1osDI7AuZgwRewUT+G8QM1MeqdNBWSl8tEvzqekRihgpws2nu
4WzEVFRBzuWGMO92RrA2L36FE5LI08m4
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:12:05 2026 by rpki-client