This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
File: e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json)
Hash identifier: zNYToNeGJ7Ejhw0cXDEzJPcHe9aKBU8dBDZH1Fdn6zI=
Subject key identifier: C7:56:85:14:7C:68:3C:23:8A:48:3D:A7:C2:1F:D2:03:AA:59:25:E0
Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
Manifest number: 01A0
Signing time: Sun 25 Jan 2026 02:46:46 +0000
Manifest this update: Sun 25 Jan 2026 02:46:46 +0000
Manifest next update: Sun 01 Feb 2026 02:46:46 +0000
Files and hashes: 1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: MYe+FXSRhfGwGXVQECYgIjoL3+RB5Dpks4nApIMKcn8=)
2: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: kgS+E6ztendoWXeY8KRb5qf3OoHXPdPvuEfw1zYbI48=)
3: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: O3rcuPzI43gA/b6lPBzohtucBkFVYWI1mOWlKV5v7BU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Validity
Not Before: Jan 25 02:46:46 2026 GMT
Not After : Feb 1 02:46:46 2026 GMT
Subject: CN=69758416-bae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:e1:86:4b:c4:5e:25:1a:ac:4f:2f:e0:15:
8d:e8:78:55:84:c6:30:d5:58:e1:30:39:ce:bc:2d:
0f:3f:38:a2:d9:51:48:75:2b:c3:5e:2b:5f:23:45:
b7:fc:7d:06:ca:db:ec:af:9d:43:ad:94:f2:43:6a:
a2:4e:70:90:0c:9b:d0:1b:b5:1b:5b:0e:45:2f:50:
fb:8f:9b:4c:fc:4b:2f:a1:d7:ad:a0:8b:7c:f4:6f:
a4:6a:53:10:74:e1:b7:9c:16:6c:65:6b:10:97:e0:
0f:75:a4:a0:8f:65:d0:50:bb:0e:ea:e1:18:e3:d7:
6b:a6:c9:c6:e1:b0:a0:0c:d5:fd:13:11:39:67:47:
b2:85:98:a8:98:ca:0f:10:34:2a:e0:c2:6e:a8:ab:
db:38:f5:5b:19:b9:e7:92:bf:b4:e5:b8:9f:53:09:
6d:8b:c2:a6:aa:46:cf:2c:50:9a:5b:24:12:f6:a2:
94:75:0d:1d:42:03:bc:8b:d5:9b:5b:4d:98:53:08:
9d:ed:68:6b:d5:4a:30:6d:04:d2:f9:7d:d3:a8:ba:
a3:e9:ab:c8:24:b3:00:6c:96:64:16:62:f6:c5:27:
78:77:b2:ee:d9:8a:e9:13:ec:b7:1e:7d:f1:a2:b8:
b5:e7:85:d8:3e:64:8a:4a:5f:84:81:a3:2a:83:d2:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:56:85:14:7C:68:3C:23:8A:48:3D:A7:C2:1F:D2:03:AA:59:25:E0
X509v3 Authority Key Identifier:
keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:0c:bd:d1:df:df:7d:e1:16:e9:c0:59:c2:9b:4d:08:06:29:
15:26:6b:9d:ad:2f:65:a6:de:a4:1c:bf:b8:a0:14:2a:9b:07:
bd:fc:f2:4e:7c:f4:b9:77:6e:85:86:3b:c7:47:40:50:4f:52:
50:90:29:ca:c3:5f:06:bd:46:d5:f9:22:99:42:18:88:25:38:
11:cd:cf:3d:c1:dd:80:00:b5:c5:92:f0:7d:51:b7:87:cc:7e:
04:b6:7c:51:05:2c:a8:f7:e5:c6:cd:c9:7d:c5:5d:64:3b:5a:
51:8a:f5:18:23:41:bc:26:9e:b7:e8:67:ca:c1:2d:af:7c:09:
db:72:3e:56:fc:d0:ea:10:1a:05:da:d1:b2:ed:25:95:94:46:
13:b2:17:20:d6:90:b5:f8:99:38:ea:19:6c:2c:d3:1e:d0:be:
44:2e:8e:8a:bb:1c:04:b6:7e:d2:28:a1:8b:53:36:18:24:5d:
0d:52:17:b5:36:e7:bf:6c:74:b2:ed:3b:6b:a1:e7:74:f4:a3:
fc:5b:a5:5f:dd:ab:94:12:b6:d1:1f:89:c0:f6:3d:78:84:ac:
29:7d:ba:5a:b8:34:4b:54:ff:a6:8c:06:a7:cf:91:15:7f:69:
bd:31:0d:37:ad:14:61:68:29:71:e1:bd:0b:2a:fe:8c:b3:7a:
bd:b3:06:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:45:35 2026 by rpki-client