This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft
File: IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft (raw, json)
Hash identifier: iAFDqI4uaYeFlZfCngXvWdw41645QXg3qQfv/m+HOa4=
Subject key identifier: 31:BC:B4:6E:D9:AF:61:16:5C:6C:C0:7D:20:3B:3C:CE:0B:D0:65:B4
Authority key identifier: 22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8
Certificate issuer: /CN=A914C475/serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8
Certificate serial: 0775
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft
Manifest number: 0C79
Signing time: Sat 24 Jan 2026 18:06:23 +0000
Manifest this update: Sat 24 Jan 2026 18:06:23 +0000
Manifest next update: Sat 31 Jan 2026 18:06:23 +0000
Files and hashes: 1: IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl (hash: HIzhZr7tEnMUaCSH4ocnCvvAXmSgfRsCFR6wxCYxdl0=)
2: D6F76118231C11EF84144357C4F9AE02.roa (hash: MiuSv15VLIaeb36ClOcMlCFhKBkosPaBSp5hyovVY7I=)
3: 01283BC2532011EBAE6D1F37C4F9AE02.roa (hash: JIJ/oCcEDSrDoKJ+TtwRZ0ixy/ch1ebZjc7Ukat5+wI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl
rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1909 (0x775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C475, serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8
Validity
Not Before: Jan 24 18:06:23 2026 GMT
Not After : Jan 31 18:06:23 2026 GMT
Subject: CN=69750a1f-6222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:14:fe:26:fa:5a:51:95:d5:d2:bb:52:69:
ba:8d:f9:e5:43:71:39:db:36:43:59:9d:33:42:42:
03:d6:d9:b5:eb:8e:5f:f3:0c:b6:5c:38:e3:0d:58:
fe:0d:25:68:6e:6f:24:b6:69:9d:7f:d4:77:ed:de:
07:d2:7f:0b:ab:ad:77:d1:c7:8d:dc:97:8c:69:ee:
10:6a:c3:a4:31:a3:35:8a:20:ff:f8:68:8b:e3:e9:
05:a7:84:49:f2:a8:27:4f:7e:5d:cb:d9:10:42:31:
22:cc:e8:a0:90:5f:c5:42:95:a1:e9:45:8d:6b:14:
c8:b2:7d:87:59:0a:33:27:0f:e1:61:e2:7c:3d:32:
0f:cb:2a:af:6b:b6:21:68:71:76:f3:8d:d1:74:81:
bd:bc:d5:60:a0:f7:f7:19:a9:18:a1:b3:38:99:2e:
d6:e4:2b:65:f7:35:29:86:6a:f9:a9:df:b5:d9:7a:
16:15:ac:d5:07:49:61:07:10:88:d5:fc:63:34:f7:
57:db:7d:e0:b7:a1:e3:6b:7b:ce:64:4d:80:99:c4:
fd:bd:e3:eb:dd:9f:e5:d4:f0:8c:15:1a:5e:b2:cd:
83:d0:fc:c1:46:44:bd:74:51:df:ea:31:a7:5d:de:
f3:0b:21:91:b0:9d:fd:fa:39:ff:4b:9d:4e:71:13:
5c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BC:B4:6E:D9:AF:61:16:5C:6C:C0:7D:20:3B:3C:CE:0B:D0:65:B4
X509v3 Authority Key Identifier:
keyid:22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:38:25:28:02:d2:94:8b:15:3b:14:2e:85:09:ce:10:22:10:
6d:5d:12:23:18:87:d3:3a:61:b6:de:e1:a8:5f:95:2a:91:63:
2a:b3:bb:46:75:e9:53:33:cb:88:4a:1b:2c:b1:a5:01:bf:71:
80:f8:d4:13:37:b6:25:91:a3:82:66:7c:8f:cb:ba:4f:35:d8:
1a:b5:12:8e:2e:e1:11:d8:4b:99:57:ef:80:a4:46:47:14:6f:
ca:44:ec:32:b3:44:d6:09:51:73:f8:69:bc:94:6e:19:96:d8:
86:10:7a:88:b1:c6:d2:46:ce:cc:a8:b3:21:88:79:da:bc:89:
d1:71:c1:9e:54:67:83:be:07:ce:c2:99:6a:42:f9:df:a5:0c:
7f:fb:43:09:66:46:39:4f:31:a2:41:05:ff:fa:8e:08:02:f6:
97:94:57:88:4c:0b:38:e4:c6:a6:14:e8:ed:f4:e3:66:a8:2e:
65:06:2b:7c:0a:f9:c2:ee:0f:c1:b0:2a:ad:c5:10:65:0e:c4:
b9:12:f6:39:78:9d:35:37:21:cb:99:28:e3:85:c9:40:56:a6:
3b:bc:09:f0:31:99:f3:fd:12:19:d6:e2:37:d2:c4:af:a8:9c:
b1:86:f6:2f:d8:58:b6:af:56:5a:7d:f8:1d:80:2b:92:16:65:
6f:db:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:48 2026 by rpki-client