This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft
File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json)
Hash identifier: eQfGVsaYQRJbevDORR3S4f+QcGyWBjnk4fCRWz93JYc=
Subject key identifier: 86:88:55:D1:93:DE:80:69:77:E6:9E:69:CD:14:C1:B5:D3:F3:81:71
Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4
Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4
Certificate serial: 2E07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft
Manifest number: 2DE7
Signing time: Sat 24 Jan 2026 15:21:58 +0000
Manifest this update: Sat 24 Jan 2026 15:21:58 +0000
Manifest next update: Sat 31 Jan 2026 15:21:58 +0000
Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: MkSAum17L0s/3RP1FAEtCEFzDEGoag+j/jrWZomjGDg=)
2: 0F6B8D969A6B11F08E49AE43C4F9AE02.roa (hash: Pdk6bT7HhSqGJ2GX150nm/IL+DXi5SGrlxiId38sTmw=)
3: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: hRzik5kXimOwUS6S1oWYsWN9k919CD3fLtMBHNWUanA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl
rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11783 (0x2e07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4
Validity
Not Before: Jan 24 15:21:58 2026 GMT
Not After : Jan 31 15:21:58 2026 GMT
Subject: CN=6974e396-6b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:30:ed:74:4a:5b:bf:02:61:4c:b0:0e:9a:
61:22:86:c7:39:3a:60:64:d1:5f:03:e5:8b:a4:07:
d7:9c:43:da:96:55:06:ad:61:1a:aa:4b:a5:ab:f1:
6b:e9:5d:9b:1c:57:e2:dd:93:ad:86:fd:92:bf:9b:
35:e7:18:51:d9:af:ba:6a:bc:2f:0a:20:e7:9b:0a:
e8:7c:58:cd:9e:d6:27:d6:01:e8:47:f4:d3:6a:36:
f4:08:ee:39:2e:6e:1f:55:73:61:ef:55:52:9e:65:
3f:ac:1b:a1:5e:97:17:2c:e4:fd:75:46:d5:1e:c7:
78:55:73:1f:7f:c8:16:f8:45:82:fa:e1:ea:00:82:
b2:8b:45:7b:b6:b2:d6:b3:b6:88:0c:fa:66:9d:dc:
07:80:ea:0e:d6:ab:75:dd:c1:2d:b5:cb:33:5f:8b:
1a:67:f6:d4:77:06:41:1c:db:e2:1c:39:6e:2c:42:
f1:58:f5:be:e3:a5:45:7f:51:0e:e3:48:d1:dc:76:
a2:d4:96:03:2d:eb:e1:7a:84:81:94:de:3c:7f:38:
ee:64:33:87:af:af:3a:c7:5e:8e:d2:3f:57:1d:ec:
06:07:83:02:19:b3:92:6f:76:ce:62:2d:8e:d4:95:
2a:4e:63:aa:af:f4:5b:48:18:34:7d:d0:ab:b1:02:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:88:55:D1:93:DE:80:69:77:E6:9E:69:CD:14:C1:B5:D3:F3:81:71
X509v3 Authority Key Identifier:
keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:34:13:b6:cc:cb:88:fc:28:fa:fc:5c:4c:c4:d3:dc:31:0e:
1c:eb:a0:09:d1:d4:c6:77:6a:7f:7c:18:12:61:5b:1c:1d:05:
80:09:0a:0f:bc:df:46:da:05:1d:fd:db:34:38:83:e3:ed:74:
21:e9:0e:bb:3f:38:32:d0:60:51:a9:5c:d4:a0:89:73:47:05:
19:42:73:a7:3e:25:a0:f5:13:ce:19:18:b2:1f:ca:ad:66:86:
7d:61:8e:1e:ef:25:64:a5:9c:53:6e:f3:b0:90:f8:42:7b:3a:
aa:2d:1c:ab:a1:ce:8a:3b:f4:79:fd:d1:54:1e:3d:ba:c4:d6:
f0:f0:ab:9a:c3:40:7c:f9:50:71:05:5e:5f:25:c2:a2:1d:12:
63:84:ba:90:15:14:6f:36:d8:46:b6:d6:7b:63:01:74:63:93:
3f:50:28:cf:4c:df:c7:23:b0:a4:7b:97:dd:c8:f6:18:70:18:
aa:5e:15:7e:b2:40:9f:99:2e:fb:bc:3c:05:c1:ef:f3:a7:16:
86:bf:18:40:2e:f4:1b:68:15:a5:ab:ff:97:a7:95:12:b5:7f:
c0:f5:9e:c2:eb:ea:43:43:8d:64:18:3c:d1:a7:58:ff:af:fe:
60:cd:71:10:16:5d:1c:7f:6b:0c:09:0d:2a:47:02:9a:e7:68:
0b:f7:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:49:02 2026 by rpki-client