This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json)
Hash identifier: UiuelAnv6cxb9DWPYudqxMWiF/C0lhkpAnwAUl9gIUA=
Subject key identifier: 99:53:BF:F0:BE:E3:5A:ED:4E:8E:CC:1B:39:4E:EC:96:9D:39:B0:36
Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Certificate serial: 0851
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
Manifest number: 09A3
Signing time: Sat 24 Jan 2026 20:11:10 +0000
Manifest this update: Sat 24 Jan 2026 20:11:10 +0000
Manifest next update: Sat 31 Jan 2026 20:11:10 +0000
Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: ED6vUdeIXMzDZ+EnOOStm8bCMn8ZpMa9IraSmpv3rJg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl
rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2129 (0x851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Validity
Not Before: Jan 24 20:11:10 2026 GMT
Not After : Jan 31 20:11:10 2026 GMT
Subject: CN=6975275e-172a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6e:50:a1:39:e6:7f:8e:b3:c3:e6:6d:9d:8c:
92:09:be:b2:fe:43:d0:da:46:c7:e8:f9:12:45:3b:
99:bf:28:8f:6c:41:a9:27:37:d7:fc:3d:36:45:71:
fe:4c:51:92:69:28:f3:cd:c2:f2:3f:6e:99:32:9f:
bb:c9:b0:ad:3e:01:2c:cd:58:17:83:97:72:3b:c8:
de:db:3c:2e:b1:20:21:e4:1e:3e:85:78:47:b6:61:
8d:cf:00:f5:62:9e:dd:6f:42:ea:f1:db:63:48:70:
87:cc:98:e2:e7:d3:02:65:2b:dc:09:11:ee:e1:5a:
a9:3e:0f:38:a0:53:4b:7b:14:7e:c1:4b:31:ad:a8:
9a:bb:96:ab:c7:ce:d3:aa:8d:e8:d3:6c:d2:3e:4b:
ef:62:ea:71:82:9a:48:e6:80:f4:eb:a2:0a:c9:a0:
38:03:56:bb:9a:67:78:c9:c2:49:7b:a6:0e:92:cd:
6c:6c:33:87:9a:33:7a:fc:d1:d1:6b:f1:4b:cd:e8:
5f:ea:7b:e3:83:8e:69:13:d4:51:ae:a7:ee:d6:d4:
e8:22:27:d0:5f:2e:24:97:6c:e4:40:00:44:5f:87:
ff:ca:d9:9a:68:5b:dd:cd:72:84:8a:9a:2d:b5:a4:
6c:f4:b7:2c:13:55:e6:02:52:bb:df:08:00:34:3c:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:53:BF:F0:BE:E3:5A:ED:4E:8E:CC:1B:39:4E:EC:96:9D:39:B0:36
X509v3 Authority Key Identifier:
keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:08:0e:83:10:4b:35:e9:0c:1d:5c:1f:a9:6b:a1:fe:a8:a0:
d7:81:a2:09:d5:46:63:d5:17:6c:92:84:c4:22:12:8e:0e:01:
48:10:8f:8a:84:76:8c:6f:09:be:52:13:83:2e:b9:ac:d5:8d:
4f:f2:15:20:f8:63:ad:91:c4:e8:5f:28:9c:02:11:b5:51:c1:
20:9b:37:08:5b:04:df:48:70:01:90:20:a4:a8:c3:5d:1e:72:
c0:95:ac:f0:03:78:7d:98:6a:60:cf:d4:a8:e4:39:15:45:bb:
84:08:70:10:eb:cc:20:69:9c:4d:8f:b3:f7:6d:9a:57:8d:24:
9f:50:ad:21:14:6e:0f:93:57:71:42:39:13:f0:20:d1:7a:e2:
fa:14:23:77:ec:07:bf:76:00:03:c5:d2:8f:50:19:f8:05:46:
29:b6:4b:28:b5:10:4e:fb:a9:b8:0c:c2:b1:72:91:3e:e8:93:
d4:f0:21:62:be:77:f1:c3:c0:12:f0:60:77:16:61:46:79:ec:
1c:6f:43:2c:73:4f:4d:2b:63:33:e2:62:f3:52:9e:b4:59:ec:
37:2a:0b:5e:37:79:69:ac:46:ff:20:f6:cb:be:68:a5:7e:f5:
48:ea:d0:c3:00:68:48:3f:a9:4c:ac:0c:62:eb:0b:1f:69:1b:
1c:00:b1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:46 2026 by rpki-client