This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json)
Hash identifier: yFe6sJD6kqTXnrW859kfVX/AseAGoNO1Efs9ewrC54w=
Subject key identifier: 67:9D:59:C8:D8:35:45:14:CD:FE:B8:65:7E:C2:EE:5F:77:3A:18:8A
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
Manifest number: E0
Signing time: Sun 25 Jan 2026 04:45:42 +0000
Manifest this update: Sun 25 Jan 2026 04:45:41 +0000
Manifest next update: Sun 01 Feb 2026 04:45:41 +0000
Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: TG39fj9mkrVIHystQQS1BIBPmkknltmjV6nbo9DowAA=)
2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: aniyMN410sjj0MEX+PDPaHXzJQYHXYAopGV6HCn0kcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Validity
Not Before: Jan 25 04:45:41 2026 GMT
Not After : Feb 1 04:45:41 2026 GMT
Subject: CN=69759ff6-8af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:81:a1:56:01:84:dd:58:98:b8:67:8b:a4:
05:b0:8a:33:9e:57:e3:a1:e4:1b:bb:ce:21:9e:58:
0d:4e:a6:8b:e5:eb:9d:c1:20:84:3d:64:d7:16:d2:
e8:9e:1f:b9:38:bb:f9:fb:84:74:f7:fd:db:a6:64:
bf:5a:3f:39:b7:d3:73:a5:f9:0e:05:82:61:96:5d:
bb:71:3b:60:e4:4c:7d:dd:fe:44:fa:0d:43:ce:c3:
70:3f:93:9d:86:fb:39:7e:42:07:7f:dd:4e:33:c0:
d3:4c:6c:a2:27:0e:b8:89:38:9c:c5:0b:72:ed:e7:
09:46:eb:0d:a0:c2:cd:41:6d:e2:7f:3d:fc:27:30:
b3:aa:d3:7f:a2:ad:b7:af:e7:f7:7b:71:0b:e3:ac:
29:3c:13:58:85:5e:22:61:6b:23:ef:a9:56:b2:79:
02:38:23:49:cd:d8:35:1d:64:a7:ef:4e:89:a5:a4:
36:ca:ed:9b:66:a3:0a:5c:c2:68:df:e5:27:e4:11:
16:26:e1:12:25:d1:eb:ef:80:f3:a1:a5:d7:f8:c9:
0d:65:b7:3b:32:7f:62:87:5b:14:7d:f9:d4:4e:2d:
7d:c9:19:71:aa:2c:61:dd:3e:41:1f:08:51:eb:d4:
f4:b5:2e:74:34:27:4f:1f:96:38:1f:50:4d:3c:5d:
57:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9D:59:C8:D8:35:45:14:CD:FE:B8:65:7E:C2:EE:5F:77:3A:18:8A
X509v3 Authority Key Identifier:
keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:66:93:ac:4a:f8:15:97:ea:4d:1d:fd:24:6b:ff:91:ad:3c:
ac:8a:56:fc:64:89:6d:51:a5:8f:f7:92:88:32:91:be:1a:74:
a6:e0:89:13:97:5c:be:c2:66:4e:ef:38:0f:a1:8d:f9:3a:af:
32:0f:be:f8:df:ce:08:f4:4c:9a:24:1a:89:cc:a8:72:1d:4d:
85:13:31:ac:d8:31:f1:3e:f9:fc:97:20:ad:39:20:4b:be:d3:
28:fd:12:f7:63:da:05:68:18:37:7d:58:02:da:ed:a9:77:e0:
a5:3a:76:a8:94:31:a9:8d:24:a1:4a:df:94:76:fb:e3:ed:6d:
c2:36:48:e9:06:3f:ad:e5:bf:4c:a9:5c:f7:1d:38:60:e4:3a:
fb:31:d9:be:56:8a:66:19:e5:4f:63:ac:9b:f2:78:ae:42:8d:
d9:c4:06:ab:63:5b:f7:8d:bf:81:74:b2:3e:6a:6f:01:87:77:
3d:fc:a8:1a:a1:9f:f3:b4:89:56:de:2d:90:40:63:52:a8:bd:
3b:5b:30:12:df:6d:21:31:fe:88:69:0d:30:db:bc:70:3e:f6:
bd:b2:02:4f:01:0c:a5:87:8a:23:e6:32:76:53:c0:99:20:d8:
54:d3:ea:b4:15:a7:1f:79:55:ad:ff:55:10:4c:9a:ed:19:fb:
8d:21:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:15:28 2026 by rpki-client