This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
File: IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json)
Hash identifier: vNijc+iwmdvE4I62pVkT1JkQ9cBoGqKADj/sw8oNP3c=
Subject key identifier: 4A:4D:ED:75:37:27:84:C0:A5:01:6E:CB:CD:F8:E3:AA:29:B1:77:88
Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7
Certificate issuer: /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
Certificate serial: 0BB4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
Manifest number: 0BAC
Signing time: Sat 24 Jan 2026 18:31:49 +0000
Manifest this update: Sat 24 Jan 2026 18:31:49 +0000
Manifest next update: Sat 31 Jan 2026 18:31:49 +0000
Files and hashes: 1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: J0sj4eYQtsX61Mb4ag6eTXgh+yeusamOZjS8OIKaxSQ=)
2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: Qsy4TKaFv40VH7rqRhiymRYP7EU8I6x9tTe3ND6Wurc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl
rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2996 (0xbb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
Validity
Not Before: Jan 24 18:31:49 2026 GMT
Not After : Jan 31 18:31:49 2026 GMT
Subject: CN=69751015-8aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:d4:53:b1:c6:b1:5b:bf:73:c8:49:a6:04:
e0:89:08:fb:6a:d5:24:86:c4:f3:cb:b8:62:a4:29:
0a:37:92:12:f5:bf:08:85:c7:5f:16:5b:95:0e:d2:
b5:11:06:9a:2d:31:ca:c9:a9:41:43:c6:a4:71:1d:
56:86:e6:31:c0:8a:66:c2:6d:2d:ed:47:83:fa:4a:
61:b7:a3:da:f3:61:6c:a5:ea:a3:be:92:50:7d:20:
25:84:c1:ba:23:f7:bb:36:ca:c1:0d:e3:f6:e8:fc:
ad:a2:37:2d:bd:2e:44:f2:3f:0b:b1:aa:d4:bc:bb:
f1:c0:65:13:3b:b7:28:ef:75:18:32:92:0c:1e:b0:
3a:3f:45:63:c5:e4:d0:ff:48:e6:ad:9f:89:f9:54:
01:a3:3a:0b:85:3d:ab:c2:bb:7c:27:3e:b7:aa:ee:
b2:b1:5e:19:f5:9f:fa:74:ee:20:0e:d2:f0:40:e6:
1f:2f:9a:e3:6b:c8:84:86:c9:4b:92:79:25:87:87:
e5:bc:40:8d:04:5f:9a:4d:76:38:6d:34:35:de:92:
8a:15:0b:9f:64:93:60:5b:9d:1f:de:bc:11:a9:42:
1d:39:93:f7:a5:4d:81:3d:d7:34:f3:51:74:b3:14:
83:cd:1f:30:b9:30:07:ff:09:cc:42:2b:4a:6d:78:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4D:ED:75:37:27:84:C0:A5:01:6E:CB:CD:F8:E3:AA:29:B1:77:88
X509v3 Authority Key Identifier:
keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:cf:99:d7:ca:eb:28:f6:f3:41:9f:82:4b:2e:ee:ae:dc:16:
e3:31:c7:8f:57:f4:41:57:3c:05:ce:49:89:98:62:88:98:36:
3a:4c:6d:5d:11:76:a6:ac:d8:f6:61:0f:f3:e5:b1:5a:f7:59:
82:dd:d9:f3:af:52:01:9c:63:c5:fc:8a:99:03:04:13:32:44:
d4:69:77:f8:cb:4a:17:21:f4:e6:76:fb:aa:b7:bc:43:4c:01:
93:8b:f5:22:58:b8:16:8a:73:e7:80:12:d0:8e:4a:66:c8:29:
c4:c2:fd:d9:82:63:6d:e0:68:21:66:ed:d3:ea:e6:c9:5d:ff:
c3:0c:5c:58:1b:6a:f5:97:8e:90:ba:59:a4:81:67:0f:7e:9c:
57:90:2d:74:ad:31:b3:99:20:30:3e:d4:c2:40:7a:b9:65:bc:
3c:67:a2:d1:3b:62:49:b6:3b:30:a5:9a:64:49:43:66:c8:01:
6d:ab:f4:5a:c8:70:ef:63:79:ef:05:54:42:4a:69:79:8c:7e:
ad:f6:44:f6:c0:a6:56:42:2c:f8:9e:b9:d6:9d:a6:99:16:cf:
50:d5:93:11:98:f0:81:24:e1:33:01:ed:b1:75:53:00:e9:7d:
30:c5:08:74:64:08:eb:2b:37:90:6c:c1:a6:6a:70:c7:32:2b:
ee:30:95:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:23:01 2026 by rpki-client