This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json)
Hash identifier: /T3kpEJ34Aa+EZxLwXOyN/krLrYtesk6sMdy1OBwr44=
Subject key identifier: 49:88:D6:A2:C9:07:8F:21:CF:C5:B7:6D:E2:7C:1C:22:A9:90:DB:86
Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F
Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F
Certificate serial: 21A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
Manifest number: 21A2
Signing time: Sat 24 Jan 2026 15:43:56 +0000
Manifest this update: Sat 24 Jan 2026 15:43:56 +0000
Manifest next update: Sat 31 Jan 2026 15:43:56 +0000
Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: gytLLU8KnZCJeaXAW9bKuzcxcTXhuo/edp7tkQbbCPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl
rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8610 (0x21a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141526, serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F
Validity
Not Before: Jan 24 15:43:56 2026 GMT
Not After : Jan 31 15:43:56 2026 GMT
Subject: CN=6974e8bc-933b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:14:cc:fa:8d:63:83:f8:56:d1:3f:e5:d5:
da:40:95:1b:94:7d:31:67:82:9f:05:57:86:29:f9:
87:14:25:96:96:84:53:2d:2c:a6:37:8c:89:1e:76:
14:c1:15:35:33:08:59:3b:11:93:5b:95:3b:35:b1:
49:16:69:d7:f9:7c:18:2d:3a:7a:7b:88:b6:ec:41:
71:5c:1a:ce:55:5a:e6:88:e9:1d:c6:7b:07:34:4a:
e4:d4:92:04:4f:d7:57:4a:70:0e:ea:fc:e9:b3:a7:
7e:a8:01:61:6e:df:40:a0:15:94:f1:d3:63:cb:03:
eb:f7:3c:af:fc:b8:a9:da:6b:d8:74:c0:e2:34:a7:
45:3f:ed:08:d1:c6:da:31:80:dd:ed:80:ea:fb:09:
8a:e5:d1:46:7d:87:26:63:76:de:ee:9f:69:41:86:
ec:06:3f:73:b9:85:7f:5f:2a:d7:68:3d:b8:7a:d0:
58:0e:92:32:32:02:8a:f1:1d:5b:29:44:01:ed:60:
aa:f3:95:df:c8:0d:13:05:ed:19:9a:f0:2f:61:b2:
59:a3:19:03:7d:74:4f:be:87:06:5b:b4:4c:24:f0:
63:38:19:c4:fa:0c:26:9c:ba:f6:1d:91:a9:b3:da:
29:4a:27:01:46:80:8c:e0:70:a6:7b:ad:80:27:49:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:88:D6:A2:C9:07:8F:21:CF:C5:B7:6D:E2:7C:1C:22:A9:90:DB:86
X509v3 Authority Key Identifier:
keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c5:25:73:a3:45:5d:db:11:f6:c7:9b:27:84:50:de:f6:55:
d7:fa:e8:fc:1f:5f:5d:1e:5b:59:30:b4:f8:14:58:9e:8d:8d:
a2:94:c1:0d:55:5d:95:7d:86:db:bd:7e:6c:22:b9:67:57:b6:
54:7f:04:d0:c0:35:42:50:21:c6:08:bb:bc:6b:da:ac:21:2f:
a5:30:e4:01:b1:67:8c:cc:71:11:04:34:1f:76:31:8a:64:2b:
83:59:fb:23:03:21:03:85:2e:6a:93:93:cf:6a:6b:8e:32:73:
0e:94:ed:63:32:85:47:7f:67:5e:99:28:cf:83:8a:72:6f:15:
80:c6:53:fb:9d:9b:98:40:4d:d3:e6:93:89:1f:a0:ed:d9:20:
7f:98:a4:88:9c:5e:05:3b:69:24:6a:3a:8f:c5:d8:bf:25:f4:
85:52:7a:39:f2:07:36:03:62:2a:4d:47:85:40:fc:fb:39:52:
5e:39:8d:34:39:0d:67:30:65:08:1d:db:07:a4:54:70:f6:77:
ac:39:09:e2:41:70:1f:18:87:62:0d:74:dd:b5:1c:cd:e9:f0:
11:75:e2:c5:0b:40:cd:05:78:83:16:62:64:45:f8:bd:71:8c:
b3:f8:d2:ba:12:71:94:73:c9:d5:66:a5:42:50:25:cc:fe:94:
19:ce:e1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:41 2026 by rpki-client