This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
File: iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json)
Hash identifier: glmUUr/XDPuwr9He8kUnFYV7x3ZG6PDY1ueMAdghWDs=
Subject key identifier: BA:45:94:95:26:31:A9:6F:B2:48:E4:14:FE:A2:E6:94:D5:60:36:72
Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2
Certificate issuer: /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2
Certificate serial: 026B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
Manifest number: 0264
Signing time: Sun 25 Jan 2026 00:53:05 +0000
Manifest this update: Sun 25 Jan 2026 00:53:05 +0000
Manifest next update: Sun 01 Feb 2026 00:53:05 +0000
Files and hashes: 1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: RtUzgRIIwQUckcST5Mnqw1dGWuYHk/S8kUQd/brQFqw=)
2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: RK5tPBygONDShLt3IeKagZkrWMr91hP51vzRoPslud0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl
rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2
Validity
Not Before: Jan 25 00:53:05 2026 GMT
Not After : Feb 1 00:53:05 2026 GMT
Subject: CN=69756971-1dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:68:8c:c7:f1:d7:80:e1:62:89:73:a2:62:
13:0b:6f:bf:de:da:59:cb:50:d5:21:26:59:1d:2b:
8d:98:a5:3c:63:b7:3f:41:be:c5:35:60:42:47:31:
c5:b4:bf:29:8c:b8:2e:79:2c:11:e5:d5:07:52:f3:
ef:e1:a6:85:12:89:5b:ab:89:89:4a:7f:43:3b:4a:
3f:ec:dd:80:97:cf:30:a0:db:4a:ba:60:88:70:44:
a8:47:3f:bc:ed:c2:37:ca:3d:72:6c:85:e9:80:dc:
07:9d:ca:86:48:4d:9d:3c:3d:60:51:c9:8b:df:5d:
8c:8e:b3:01:f0:68:cf:7c:0e:d9:7f:56:a9:2e:fe:
52:72:45:36:60:ea:cf:89:9e:c9:6d:c0:48:ee:31:
8f:cf:42:49:75:ae:70:8d:a1:41:9d:c0:6f:77:b1:
34:f6:c1:33:41:d8:5d:cc:6d:66:b8:28:13:a2:b9:
33:ac:f1:c8:3c:cb:b5:af:91:85:19:42:f5:18:df:
7e:7e:b3:57:20:a9:19:61:85:5b:e5:17:32:22:7b:
49:96:0c:48:9f:c5:7f:c9:80:0c:af:07:2c:9f:7b:
8f:41:8c:65:88:f9:b7:65:d6:20:f6:32:2a:d3:60:
0d:07:a2:49:0c:af:1f:39:96:38:06:35:c7:be:ea:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:45:94:95:26:31:A9:6F:B2:48:E4:14:FE:A2:E6:94:D5:60:36:72
X509v3 Authority Key Identifier:
keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:81:70:4e:26:19:b7:d2:f0:38:b2:a9:6d:27:8d:d2:44:67:
ac:10:03:17:e3:57:52:7b:ef:d7:46:22:d6:40:60:af:79:c3:
8e:c6:e4:08:5b:b8:8a:c4:34:f1:de:5b:48:dc:2f:24:6e:45:
ea:4b:eb:c7:0b:8d:58:8c:4c:dd:df:f5:29:3b:8a:4a:62:41:
ea:89:62:9f:fd:8e:bf:e6:c2:4e:1a:04:0b:68:ac:96:40:e6:
26:86:eb:ea:c5:84:5d:e1:79:8b:46:c1:38:91:b1:f6:7b:ba:
70:4c:4b:f6:34:3d:25:c8:89:7a:7a:95:28:7a:8f:26:b0:32:
5c:e1:79:cf:30:40:94:62:49:a8:d6:f4:6d:47:2c:0f:50:ff:
29:e4:80:80:a6:e9:65:fa:b5:70:96:0a:90:0e:82:d5:31:c2:
c9:51:e4:9a:14:58:18:b0:52:3a:51:49:5d:02:85:73:47:fb:
5d:f7:25:54:7a:ad:02:55:5b:ad:4a:6c:5b:c9:c1:f6:18:fd:
14:8c:86:92:41:e4:ac:99:09:84:85:e9:24:ff:74:20:e0:24:
7b:66:a7:2c:b2:c7:90:61:b3:c2:3d:eb:f5:1d:f0:0a:46:ae:
ff:69:63:d7:0d:56:a8:92:b5:da:b7:4e:3b:d3:2a:78:a6:1e:
55:1d:0d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:11:37 2026 by rpki-client