This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json)
Hash identifier: U6cy/oBUIJs+XNAV/cIvvjdpzHlwcHy3lPLNAIjwGUk=
Subject key identifier: 74:54:6C:13:2C:1C:7C:91:C7:8E:34:ED:1C:7A:2C:7A:63:AE:38:18
Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
Manifest number: C8
Signing time: Sun 25 Jan 2026 05:01:39 +0000
Manifest this update: Sun 25 Jan 2026 05:01:38 +0000
Manifest next update: Sun 01 Feb 2026 05:01:38 +0000
Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: Q8i6gF7QWlTjGHnyrc4bTSsUlWbV0cjWjmZhBf2kq78=)
2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: JeIvajlxzjQj5CfJDRwUxxGvNaX9uDFrrx5zQ5EFSS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl
rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
Validity
Not Before: Jan 25 05:01:38 2026 GMT
Not After : Feb 1 05:01:38 2026 GMT
Subject: CN=6975a3b3-0277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:e3:80:18:94:0c:bb:62:ac:6a:08:a5:1f:
c5:ac:f2:d1:aa:b6:25:be:77:77:5e:52:c2:d9:d9:
5d:b7:a3:0e:cf:88:71:a8:b6:5a:fe:6c:83:52:94:
91:e6:ae:f2:6c:e1:25:7f:c9:c5:46:12:3b:a7:01:
1c:31:f8:5d:5d:c5:52:8e:39:a4:a8:cc:ab:12:d4:
7a:4f:5e:bd:4b:f5:f4:b7:a1:7c:fb:9f:83:62:9b:
40:62:d9:57:e2:07:47:75:29:27:1a:12:9b:b2:1f:
39:71:a5:6e:2b:83:f7:ee:5a:57:df:d6:8c:64:3f:
84:90:81:c2:f0:f8:25:b3:7a:4f:86:97:31:4e:42:
d2:5a:6d:67:79:62:ce:19:a1:f7:81:92:3c:45:cf:
bd:b9:aa:b5:f8:a1:e3:7a:4d:e8:7e:bb:d8:e4:9b:
4b:5d:3b:bf:bb:69:02:0e:85:9e:b7:44:8e:12:5a:
f9:80:bf:53:c9:7f:07:ed:3e:cb:87:61:cf:32:6e:
56:8e:a9:af:e0:ab:92:f4:e3:8f:96:c1:8a:85:6b:
3f:07:02:51:a5:47:80:29:18:ed:ef:dd:a6:42:31:
fb:20:a9:84:8b:45:90:f3:c3:bb:4b:7b:7f:d7:9c:
f3:4f:ea:c2:11:86:e7:61:f3:cf:c4:76:07:b0:8e:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:54:6C:13:2C:1C:7C:91:C7:8E:34:ED:1C:7A:2C:7A:63:AE:38:18
X509v3 Authority Key Identifier:
keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a4:2d:a9:c2:c0:32:78:ae:2f:04:37:c3:73:b5:1b:6b:7b:
c9:9d:ca:35:6f:e9:1c:2f:ae:a6:cc:45:86:b3:d7:f4:48:e5:
1e:12:b1:83:21:8f:6a:75:ba:d2:be:0c:50:29:8f:a4:a6:b5:
2f:48:dc:7d:8a:c0:b0:6f:6a:40:b4:ec:11:a1:9f:93:6e:af:
0f:d5:f2:4d:f1:7e:31:ef:93:66:99:61:a0:0f:2b:ef:a7:ff:
76:97:54:94:65:27:c9:fa:47:e6:3d:08:07:1d:2d:20:64:10:
e3:be:8b:69:0d:9f:da:1b:02:91:a4:1b:d9:60:4c:b6:a1:d3:
54:5b:9d:4f:8d:5e:02:f2:72:87:ed:34:9d:5b:17:8e:b9:69:
3c:6d:65:84:ad:92:f9:3f:54:11:43:2d:eb:6a:c2:03:b1:f0:
b2:ba:33:0c:2b:19:8b:07:af:b5:f3:18:e6:7a:f3:18:34:3e:
82:f4:46:74:b2:b6:fd:96:5f:46:41:32:10:e2:78:be:27:5e:
1d:e4:c1:57:53:c7:2e:51:11:b1:0c:a5:2a:14:c8:20:0c:05:
ad:f5:ba:d4:54:2d:0a:e1:af:31:c8:9d:8c:c4:d4:aa:6b:c2:
9f:2f:ed:27:7f:a0:83:82:05:fa:88:3d:f9:45:ef:b1:f2:36:
81:9a:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:45:52 2026 by rpki-client