This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
File: ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft (raw, json)
Hash identifier: zwxpJ4lsVdjNU4wFS02MlE4KXbmalLnWn8j7dpP5hcY=
Subject key identifier: BB:4B:7A:79:72:91:7D:64:85:44:52:8A:BD:79:AF:82:4E:7D:C0:D9
Authority key identifier: 21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC
Certificate issuer: /CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC
Certificate serial: 191F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
Manifest number: 1916
Signing time: Sat 24 Jan 2026 16:13:18 +0000
Manifest this update: Sat 24 Jan 2026 16:13:17 +0000
Manifest next update: Sat 31 Jan 2026 16:13:17 +0000
Files and hashes: 1: ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl (hash: kQdEh0Pp5pXz2xEZtXuqupDv1H2415wWtSX8ShW/tNQ=)
2: BD843CCE984011E79A256C82C4F9AE02.roa (hash: cv0ZUc0lebxpCeCaHLbic5zL6MtIPbL3843SH+qN9Dk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl
rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6431 (0x191f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912382E, serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC
Validity
Not Before: Jan 24 16:13:17 2026 GMT
Not After : Jan 31 16:13:17 2026 GMT
Subject: CN=6974ef9d-cac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5e:c2:b0:02:72:34:ca:72:60:22:fa:95:e8:
81:89:dc:00:c0:34:27:4f:19:8e:fd:b6:a5:d1:3a:
2e:6f:dc:8e:6c:fa:be:4d:fd:3e:c2:45:05:bd:d7:
17:f9:ad:00:17:53:d6:81:45:fd:13:72:dc:2e:f2:
b2:d9:31:09:e7:41:56:99:3b:d6:11:80:22:fc:d7:
93:d6:f0:7f:f4:1a:69:12:c5:e7:5c:5f:f6:89:87:
4a:8a:1c:9c:60:62:0d:ef:34:46:5f:52:cd:22:e1:
67:e1:85:16:17:de:24:1c:a5:f2:ed:f4:94:05:f3:
54:8c:ea:91:5a:3d:94:54:2f:44:b2:50:3d:ab:fa:
b6:3f:ec:a6:ff:aa:1f:16:97:9e:38:92:4d:20:ed:
55:0a:d3:0f:cf:d9:f2:c9:e7:fd:ab:a8:d5:24:e2:
0d:96:d6:92:f9:d0:1b:ad:18:dd:d7:a1:a5:99:a9:
82:1b:32:ed:02:b6:bd:ff:88:66:3a:73:4a:5b:57:
71:cb:9e:85:62:ed:b7:56:2d:bb:85:1f:9d:c9:ca:
2d:7b:51:6f:f5:33:1e:01:2c:ef:f0:47:08:79:72:
08:f8:91:3d:42:e1:db:64:ed:10:fe:61:5c:a2:1f:
33:4d:d6:b6:d4:f0:7b:8a:2b:08:9d:14:12:79:39:
30:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4B:7A:79:72:91:7D:64:85:44:52:8A:BD:79:AF:82:4E:7D:C0:D9
X509v3 Authority Key Identifier:
keyid:21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:31:68:fe:37:c6:0a:1d:78:b0:b3:01:59:0f:53:ee:7b:31:
77:c0:5e:37:3f:f5:3e:77:a6:28:d1:b8:9d:92:54:46:73:69:
7f:6b:f0:3b:7d:48:43:4d:bf:f4:4f:39:58:bd:de:08:31:d7:
46:b6:43:66:73:6b:30:d2:6f:07:dd:84:5c:48:a4:a0:d7:e0:
11:be:ed:76:1d:2d:12:05:c4:fb:22:17:d0:5a:fa:1a:34:7b:
b4:e7:60:95:40:0e:a2:55:76:a5:89:be:af:ab:e1:5c:3d:8f:
e6:01:cd:e9:9a:e1:88:be:31:8e:7d:cc:60:3e:58:73:f7:ab:
69:53:71:42:e5:d7:22:2a:6c:c3:c3:06:d9:e0:cb:75:f2:e0:
60:bd:b5:c7:27:76:5f:8c:52:4d:91:e1:58:bb:e4:78:52:f6:
fa:0a:f4:31:19:33:18:40:67:00:e3:03:e8:ba:db:d2:2c:90:
2a:0f:9d:52:68:59:e4:2f:23:92:8b:27:f6:7d:74:39:f2:b1:
be:64:bd:1c:7d:f9:42:35:f3:70:c7:46:66:68:35:1a:30:c6:
64:31:0d:77:93:1b:e1:a3:b4:e4:d6:39:bd:ac:19:38:2e:8c:
d6:03:01:9a:85:a2:f5:da:1a:63:d6:0d:08:ff:cd:92:8a:ff:
f0:6d:b9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:57:55 2026 by rpki-client