This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json)
Hash identifier: myFz4ET4Wr3I6N9Kr4zlCgB9CSxUPZs3KlxowWNPxZ8=
Subject key identifier: 82:CF:79:07:41:DA:25:82:9B:A9:5F:5F:14:2F:C1:17:05:9F:D3:B1
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
Manifest number: 0183
Signing time: Sun 25 Jan 2026 03:04:16 +0000
Manifest this update: Sun 25 Jan 2026 03:04:15 +0000
Manifest next update: Sun 01 Feb 2026 03:04:15 +0000
Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: jjWWzQQVv6T6iiUG3t4e5CSCxcgfU0/W4J4YaE7nHNY=)
2: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: xLYaayOa6ljsfyz0Fl5EAR812aBmAL1bIciZu3m45qA=)
3: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: VTp2ABLnUqS/Ob5XrNRvfYj53nTFMS/ZxCFHhPG4kpU=)
4: A17C3508168911EFBF38F580C4F9AE02.roa (hash: VX+Jv3bPS3HePtNKEWgfIHtlmIu9qG2L38hEMCHNp/A=)
5: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: QWiwvzdCs9QlEtO4vjDbxuVVXBGO2+18x2vf8VSunOs=)
6: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: 5dFzBEhRX2qpf3v3P5WZEcaB5fBRXl7gbbBm5x4xFTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Validity
Not Before: Jan 25 03:04:15 2026 GMT
Not After : Feb 1 03:04:15 2026 GMT
Subject: CN=6975882f-8e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:f0:c0:40:1a:e6:53:0a:89:06:0c:a2:39:
77:b6:d2:7c:06:5c:ee:3b:a5:56:4f:7c:c4:a7:aa:
32:01:88:79:19:aa:f8:13:13:db:10:5f:f5:95:95:
38:d1:17:40:2c:ea:45:e1:12:e8:23:5f:4e:ec:f6:
1b:53:21:16:dd:b8:f8:f0:7b:b0:67:ed:1d:ab:92:
a0:3e:71:15:92:c1:9e:42:53:2f:b2:2b:e3:e4:1c:
ae:ab:f6:97:fe:4e:b1:d6:56:e3:24:d5:a3:f7:59:
be:22:c3:36:9e:4f:40:83:e5:84:1a:f4:5a:9a:ec:
a5:b8:da:ff:46:d6:22:b9:58:af:dd:50:f3:73:ca:
46:3f:df:e9:85:84:f9:10:a2:72:dd:bf:9e:f2:2c:
0b:66:4e:8b:4b:fa:92:b4:97:58:16:a6:b3:9c:6f:
cd:4f:8b:50:53:72:67:ea:f0:78:85:4a:ac:6d:0a:
63:66:1b:53:5f:b6:60:65:95:9c:67:99:14:fc:ac:
ee:6b:d3:ce:ff:7c:45:6e:70:95:9b:8c:c8:0e:0e:
b9:82:c6:c1:c2:4c:2f:b7:74:34:a0:0a:51:f4:72:
7a:ca:a9:c1:13:50:25:f2:f0:d4:d3:fa:61:3a:37:
30:ec:de:0c:16:2b:4f:09:bb:3b:82:55:9b:df:41:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CF:79:07:41:DA:25:82:9B:A9:5F:5F:14:2F:C1:17:05:9F:D3:B1
X509v3 Authority Key Identifier:
keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5c:c7:7f:9b:39:8b:50:42:ed:c8:ff:17:d8:5e:ec:d8:25:
f0:4b:77:df:78:81:ba:6a:2c:da:8b:60:f9:0c:02:3c:2f:5c:
17:df:7e:6b:ae:51:de:e0:86:48:b7:82:64:5e:0a:86:22:e6:
72:9f:57:cf:bb:68:be:2b:2c:91:dd:59:76:64:cc:5f:fa:8b:
2e:97:78:fd:ff:30:d0:f4:06:80:f2:6c:bc:59:05:ed:a9:58:
11:c1:dc:19:cf:92:b3:e1:cb:9c:f4:8b:6d:ea:01:48:d3:72:
ba:a7:29:9b:7b:77:15:ef:5e:04:59:b2:41:0b:8c:8b:5f:ac:
95:44:2b:c9:f6:7d:d1:32:48:db:12:e5:f8:2f:2f:c1:e3:6f:
eb:52:09:06:03:ad:84:d1:0d:54:3b:21:9f:98:10:e8:35:93:
2f:3d:aa:13:52:4b:2d:48:3f:f0:97:c6:98:f5:70:0c:80:8b:
cc:29:07:08:91:8e:be:a7:cc:44:47:0f:6a:33:d6:23:53:36:
2f:52:15:c3:dd:31:c4:e5:37:bd:e6:2c:9d:05:ba:d5:77:f0:
be:83:95:26:f7:38:74:2e:57:e5:08:e3:e3:a0:32:0a:b8:64:
bc:2b:c3:67:7c:aa:4e:7e:f6:61:18:d2:1f:f5:fe:b4:ec:af:
66:29:07:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:46 2026 by rpki-client