This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
File: ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json)
Hash identifier: dnIc9Y7KkAiDA9WMPZdibkv+OL5JDnb6Qgk9ky17dd8=
Subject key identifier: 09:AE:59:BF:91:09:71:01:99:22:F6:2F:9D:5C:62:47:9D:BB:46:F0
Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
Certificate issuer: /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
Manifest number: 0122
Signing time: Sun 25 Jan 2026 03:59:45 +0000
Manifest this update: Sun 25 Jan 2026 03:59:45 +0000
Manifest next update: Sun 01 Feb 2026 03:59:45 +0000
Files and hashes: 1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: 4grTQbxWNu78rqGFlsuOwNgsWqjpr6T0TvJ6yBn7cPQ=)
2: A8051CC4508011EF81053074C4F9AE02.roa (hash: iZKi03yPXyvt2gp9n65NJaRxsO6y4f9eMVz9ZTKKOUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Validity
Not Before: Jan 25 03:59:45 2026 GMT
Not After : Feb 1 03:59:45 2026 GMT
Subject: CN=69759531-9506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:5f:7d:25:2d:8c:46:a6:12:ec:ce:a5:af:
35:4f:a3:50:fe:f1:97:f2:fc:0f:00:a5:a6:cc:30:
b1:c3:6d:d1:d3:fe:f9:87:9a:a5:bd:d6:f1:7a:b5:
c4:03:95:94:d5:38:9c:d5:ce:41:67:52:ac:64:d2:
90:46:c2:c0:1e:ed:d5:18:39:15:f9:8f:d3:0c:d7:
32:d1:08:7a:62:8a:65:51:94:5c:a1:f1:2c:99:a3:
b0:d3:d2:da:fe:a0:9f:22:4a:52:aa:9b:00:20:b4:
fa:6b:95:80:ec:b4:93:0b:a2:79:0c:c5:db:46:63:
ea:99:d8:d8:81:bb:4f:21:f6:b5:30:ed:e1:a8:23:
d2:b9:5e:82:0b:72:83:fe:3d:2e:9d:73:cb:fb:90:
91:2e:4f:40:1b:79:a9:42:59:82:de:70:5a:21:d5:
78:2d:58:c2:af:be:55:f3:88:b3:53:46:ac:a1:e7:
9f:4a:04:16:93:5c:be:d5:20:36:de:9d:5f:b3:3e:
44:42:3a:b4:7e:7a:99:54:3b:e0:1c:63:c1:44:d0:
98:f5:db:a3:a8:2c:8a:6f:fd:c9:a1:bf:7b:47:c9:
fe:e4:28:ed:b1:d7:c6:ef:76:30:2d:10:75:d3:10:
0f:73:b4:46:b0:1c:d8:4a:eb:d9:e7:a7:37:d1:36:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AE:59:BF:91:09:71:01:99:22:F6:2F:9D:5C:62:47:9D:BB:46:F0
X509v3 Authority Key Identifier:
keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f0:d6:25:56:91:96:13:e2:08:ce:dd:86:06:b9:e2:fd:24:
f3:0a:dc:b4:bc:c9:b1:c7:39:75:36:2b:68:8d:7e:04:14:e2:
6e:d9:2d:e2:40:33:06:b9:ce:c6:4d:8d:65:c2:d0:73:b8:43:
e3:dc:ab:62:4b:60:ff:1d:c4:50:2f:45:1c:30:4e:ae:38:55:
d4:14:c9:23:03:2c:7f:f1:b8:38:34:21:c3:1f:2e:45:95:89:
65:f2:43:2b:2b:cc:a2:30:d0:f6:0c:27:e6:e8:4a:ec:e0:21:
e9:74:ce:db:81:37:f7:5b:ef:bb:34:d0:b4:e3:40:1f:ac:32:
fa:9e:f2:7d:33:5e:4a:ad:87:cb:af:19:97:66:31:12:00:87:
45:0e:0b:26:65:6d:8f:06:61:e5:bf:9b:ee:bc:55:0b:e5:3e:
76:25:d3:16:0d:6c:3c:15:f3:63:e3:56:e8:d9:c4:4f:7a:c8:
73:30:93:9e:a3:05:69:4d:0f:37:5a:a0:98:62:8b:49:ec:d6:
6e:26:98:eb:6c:e3:d5:f5:b2:3b:57:e3:24:dc:78:97:ff:45:
10:97:e7:c2:9e:9c:5f:1d:52:26:7d:71:d8:09:13:e0:f6:0c:
25:39:49:0b:b5:f3:8d:95:2c:ba:e1:8e:09:83:87:fd:54:40:
02:a8:ed:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:07:31 2026 by rpki-client