This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json)
Hash identifier: AnfaYLd7T9tUYotS4Uf1x4n/1KFPSX5/UBdrvQWC5Es=
Subject key identifier: 1C:0F:3C:CF:92:1A:CD:88:6F:58:F1:C8:8C:9E:C3:DF:BC:9F:8E:F1
Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83
Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783
Certificate serial: 080E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
Manifest number: 0807
Signing time: Sat 24 Jan 2026 20:24:50 +0000
Manifest this update: Sat 24 Jan 2026 20:24:50 +0000
Manifest next update: Sat 31 Jan 2026 20:24:50 +0000
Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: X+oILVbKfb8yaj327eTaL3F9C2zb0j3gB9Cwu3QUou0=)
2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: XOu+NGz3wCBtpV1QSlFKSlK/61FIlkWvOgRrc8L4ZLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl
rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062 (0x80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160BEB, serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783
Validity
Not Before: Jan 24 20:24:50 2026 GMT
Not After : Jan 31 20:24:50 2026 GMT
Subject: CN=69752a92-990f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:ed:35:ed:93:f7:a3:1e:cc:54:5e:5b:47:
4a:c4:d6:d9:73:10:a6:73:81:90:81:df:fd:4c:cc:
9b:01:bd:55:6e:ce:f4:4e:da:ce:81:38:3c:77:1b:
bf:01:c0:78:0b:1a:2a:b9:6d:00:94:f4:8a:6b:1b:
af:74:4f:69:69:b6:0b:15:aa:6f:0e:3b:bb:ac:45:
a3:1f:19:a5:1f:b8:db:fc:6d:b5:a8:44:93:2f:11:
0c:4d:00:cc:d9:c1:a1:66:9f:f1:c7:6e:fc:4b:e2:
9d:66:f4:f3:20:bc:65:65:dd:42:ad:41:ad:25:56:
fb:bc:2c:92:79:2b:43:a1:6b:71:8c:4a:f6:75:29:
0c:e0:a4:ff:a7:36:dc:48:27:e2:68:c9:df:3d:c0:
b9:05:3b:3a:ec:48:2c:9f:d6:55:a4:08:eb:5f:39:
c1:2f:f9:73:f0:cb:26:ec:6b:c6:6b:a9:df:0d:1a:
7a:b6:76:79:ee:96:9e:91:67:79:f2:05:5d:d4:99:
3d:5e:d0:67:06:75:4a:02:09:45:a0:8d:0e:53:fb:
82:14:83:6a:0a:4c:03:20:cb:47:c0:12:5a:e8:ee:
71:6f:dc:5b:ea:6a:2e:5e:3a:63:d5:69:e7:4d:a4:
37:5d:d8:dc:69:fc:99:be:33:19:e1:f5:9d:c8:61:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0F:3C:CF:92:1A:CD:88:6F:58:F1:C8:8C:9E:C3:DF:BC:9F:8E:F1
X509v3 Authority Key Identifier:
keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2a:31:89:b6:e4:c6:63:12:55:81:3d:6a:df:40:9e:47:ce:
07:27:50:be:e8:4a:81:6d:bf:09:59:cc:94:d9:30:5b:cf:e8:
59:a0:88:d4:1e:81:f5:e6:88:87:87:de:02:36:45:9d:ea:fa:
29:0c:81:78:23:57:4c:a3:f0:c7:af:55:46:fc:15:dd:72:56:
e0:b7:a5:e4:ab:f8:50:34:de:94:fd:df:7c:b8:28:8c:0c:b9:
11:6c:a0:5c:a1:3c:04:d9:8b:26:ce:ab:95:65:c9:e8:13:fe:
92:e7:71:92:f1:01:49:bd:a2:c1:6e:7d:55:db:e7:fe:19:82:
74:d0:67:f3:a2:94:5d:f0:de:f5:59:9a:3f:11:d9:4f:ce:4b:
c2:89:5a:ec:45:06:d4:4a:91:28:89:9d:df:9c:17:69:56:4a:
5c:03:87:59:78:fd:bf:d0:ff:ff:9e:f2:c1:f6:07:38:22:71:
74:3d:0f:60:9e:dd:c4:e6:d1:3f:53:fb:aa:56:6a:bd:84:12:
1f:37:3d:3a:cf:ad:e4:36:a1:b0:e8:23:ff:94:5a:e1:ee:c8:
87:cf:77:10:84:91:15:b4:3a:0a:32:9a:d5:17:a7:b0:b5:14:
40:4b:c8:cd:e5:d1:ae:b0:cc:81:22:8b:f2:31:75:ec:f8:32:
4c:c0:2e:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBCRUIxMTAvBgNVBAUTKDIyNUNEQjBCRUVENTJGNTE1MDUxRjI2RUIyN0FEMjVE
QzY3OTk3ODMwHhcNMjYwMTI0MjAyNDUwWhcNMjYwMTMxMjAyNDUwWjAYMRYwFAYD
VQQDDA02OTc1MmE5Mi05OTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqWvtNe2T96MezFReW0dKxNbZcxCmc4GQgd/9TMybAb1Vbs70TtrOgTg8dxu/
AcB4CxoquW0AlPSKaxuvdE9pabYLFapvDju7rEWjHxmlH7jb/G21qESTLxEMTQDM
2cGhZp/xx278S+KdZvTzILxlZd1CrUGtJVb7vCySeStDoWtxjEr2dSkM4KT/pzbc
SCfiaMnfPcC5BTs67Egsn9ZVpAjrXznBL/lz8Msm7GvGa6nfDRp6tnZ57paekWd5
8gVd1Jk9XtBnBnVKAglFoI0OU/uCFINqCkwDIMtHwBJa6O5xb9xb6mouXjpj1Wnn
TaQ3XdjcafyZvjMZ4fWdyGFWYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwPPM+S
Gs2Ib1jxyIyew9+8n47xMB8GA1UdIwQYMBaAFCJc2wvu1S9RUFHybrJ60l3GeZeD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJFQi9GODA4NUMzODBE
MTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03VkwxRlFVZkp1c25yU1hjWjVs
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lsemJDLTdWTDFGUVVmSnVzbnJTWGNaNWw0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEJFQi9GODA4NUMzODBEMTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03Vkwx
RlFVZkp1c25yU1hjWjVsNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqKjGJtuTGYxJVgT1q30CeR84HJ1C+6EqBbb8JWcyU2TBbz+hZoIjU
HoH15oiHh94CNkWd6vopDIF4I1dMo/DHr1VG/BXdclbgt6Xkq/hQNN6U/d98uCiM
DLkRbKBcoTwE2YsmzquVZcnoE/6S53GS8QFJvaLBbn1V2+f+GYJ00GfzopRd8N71
WZo/EdlPzkvCiVrsRQbUSpEoiZ3fnBdpVkpcA4dZeP2/0P//nvLB9gc4InF0PQ9g
nt3E5tE/U/uqVmq9hBIfNz06z63kNqGw6CP/lFrh7siHz3cQhJEVtDoKMprVF6ew
tRRAS8jN5dGusMyBIovyMXXs+DJMwC68
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:54:15 2026 by rpki-client