This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
File: IRoCHoq99NvyBwgibMgyj9JBMd8.mft (raw, json)
Hash identifier: Y2ruQsH39lmLTmzHWLUHkWKhf9wPruFkkP0eu3tV+JY=
Subject key identifier: 85:35:F2:57:E2:F8:EA:63:00:76:0D:8E:60:8D:BF:5D:3B:0E:7D:AC
Authority key identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF
Certificate issuer: /CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
Manifest number: EF
Signing time: Sun 25 Jan 2026 04:40:05 +0000
Manifest this update: Sun 25 Jan 2026 04:40:05 +0000
Manifest next update: Sun 01 Feb 2026 04:40:05 +0000
Files and hashes: 1: IRoCHoq99NvyBwgibMgyj9JBMd8.crl (hash: hAMTsth6+E/86RrkGiRckYzQ5umZ5Uu+TkpBb5vNp7M=)
2: 00926CA2D41F11F092947183C4F9AE02.roa (hash: 6Kb8qTYjaoIOVP7kkTd2rIa7gwLmY36EevcUKuSxehs=)
3: 0029F6EAD41F11F0B1A47183C4F9AE02.roa (hash: S2OZL34K7y7KU66LSbkx0n+jdpTeHIrf5kcKi6P19ww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl
rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170F11, serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF
Validity
Not Before: Jan 25 04:40:05 2026 GMT
Not After : Feb 1 04:40:05 2026 GMT
Subject: CN=69759ea5-7e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:7f:fc:5f:4a:8b:a6:c6:95:11:ad:68:2f:
f8:e3:4b:7a:cd:15:7f:00:81:66:8a:9d:01:67:36:
d8:3e:e1:29:2b:f3:66:1a:be:68:68:d1:e6:3d:6b:
48:72:75:68:fb:49:97:5a:45:bc:07:18:31:35:c4:
7e:40:78:c7:49:80:b1:da:2d:22:eb:92:7d:89:f2:
59:38:01:9b:c9:a4:ec:a8:11:03:9a:44:e0:d6:81:
f9:b7:cd:ff:49:33:c4:92:8d:48:75:f8:51:32:cb:
f8:9d:df:85:ea:bb:44:42:2c:8c:03:8b:93:8f:40:
00:af:60:6f:4d:96:90:bb:bb:f1:66:bd:15:0e:e8:
92:24:3c:c2:b7:6a:b0:4c:0a:90:4a:ea:d3:08:ec:
84:25:4e:df:f4:e7:7e:e9:d0:40:5a:70:9d:dd:f4:
38:f1:1f:85:40:ed:75:fb:f2:7e:e7:16:f2:95:d9:
9f:9d:92:d5:e4:8f:90:5c:5f:0d:ae:da:49:3b:69:
2a:60:18:a2:69:37:6e:01:f7:44:bd:a0:ef:05:2b:
0d:bc:d0:f1:99:98:08:de:8b:e8:d1:61:d2:ca:b4:
09:22:c4:b8:86:ac:02:36:8c:64:30:99:98:5a:fb:
2e:5e:07:09:ed:51:3b:ee:e4:84:da:43:a7:04:83:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:35:F2:57:E2:F8:EA:63:00:76:0D:8E:60:8D:BF:5D:3B:0E:7D:AC
X509v3 Authority Key Identifier:
keyid:21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:92:03:56:ed:33:f4:32:0b:7d:45:0e:a1:80:49:d2:a2:2b:
71:de:11:30:1c:af:78:c8:61:64:17:3b:c6:48:0e:2c:0c:f7:
38:d7:82:88:98:51:cb:c4:6d:66:b4:52:b9:be:77:1d:72:77:
38:53:e6:b0:bd:81:6e:8d:e2:f9:ba:d2:01:47:f0:01:8f:81:
89:a2:cc:b4:ba:62:ff:8a:c2:d6:6a:08:7d:1f:ed:3f:9a:9c:
06:35:c4:10:fe:e0:6d:9d:b0:5b:ae:57:4c:49:54:f9:5c:cd:
99:62:1e:ea:9b:fa:27:78:a2:b8:67:0b:ee:42:79:c2:84:73:
e6:ad:94:9e:c2:cb:56:5d:a8:40:fe:95:3f:62:fb:fc:e4:64:
a6:fb:52:12:32:df:13:57:02:70:bb:0d:65:1b:60:e6:fc:c1:
bf:ad:33:1d:26:bf:e8:12:a7:a3:99:60:55:c0:32:08:cb:95:
ce:11:25:03:9d:df:a4:3f:7c:f3:e6:eb:9b:b0:c2:7b:bc:3c:
10:bc:05:cd:94:db:91:1f:82:23:13:13:24:8c:2c:a4:b3:53:
22:7b:ab:87:d4:f8:bc:33:e9:10:48:d3:e6:84:0d:d2:d9:b1:
c8:f2:f8:4b:a5:e8:35:c5:23:29:c1:b6:08:74:50:c0:76:0d:
dc:9c:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:43:52 2026 by rpki-client