This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
File: 1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft (raw, json)
Hash identifier: Bu4Jz0GsUUX/FtmNmoKmtv8e+sqOSuQFRM49Fq6rGfY=
Subject key identifier: 29:1E:B3:61:2B:76:94:A5:86:FF:29:48:62:21:6A:BF:6F:03:A6:35
Authority key identifier: D4:80:9E:AA:A2:51:06:46:DD:85:35:9D:F8:6E:65:25:19:47:0F:C3
Certificate issuer: /CN=A918120B/serialNumber=D4809EAAA2510646DD85359DF86E652519470FC3
Certificate serial: 15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
Manifest number: 14
Signing time: Sun 25 Jan 2026 07:02:03 +0000
Manifest this update: Sun 25 Jan 2026 07:02:03 +0000
Manifest next update: Sun 01 Feb 2026 07:02:03 +0000
Files and hashes: 1: 1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl (hash: zIg1vtLhQ26RVZR3kzjVpsVlSuQgNxeiX0ITB0dK9hY=)
2: 78DCA304E0B211F0865FCE9C4B6F56BC.roa (hash: 6AUHnTelCF3W/iVa24MNrbClZ9xiHdNzUBf2Ksi2FnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl
rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918120B, serialNumber=D4809EAAA2510646DD85359DF86E652519470FC3
Validity
Not Before: Jan 25 07:02:03 2026 GMT
Not After : Feb 1 07:02:03 2026 GMT
Subject: CN=6975bfeb-66e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:2b:89:a6:30:54:3d:86:24:3f:a7:1c:cd:
59:90:3f:e0:c8:2d:1e:41:01:09:74:89:8a:f6:d3:
9e:58:70:1c:bf:87:cf:64:50:6b:69:f1:71:3e:15:
9f:92:e3:83:35:e6:d1:ca:38:37:51:95:5b:f1:ca:
c7:2f:f2:69:c3:f9:28:57:2d:31:85:7f:cc:b7:f9:
b4:9b:c0:12:41:95:a8:f6:75:0c:32:8b:64:bb:6e:
50:a7:10:0e:6a:a4:80:df:68:79:54:ae:35:17:4d:
6e:09:74:09:1b:7e:f8:47:5c:97:b0:62:15:b0:92:
83:69:14:74:ff:19:dc:8e:98:f2:51:fe:b1:a8:de:
5e:f5:40:65:21:50:71:64:35:d7:dd:01:aa:10:57:
1c:9f:ea:17:51:00:e7:c4:40:c2:ce:1b:5e:cb:6a:
44:90:b5:f9:94:2f:18:8b:05:65:76:19:94:39:17:
05:6a:83:97:7c:1e:d9:36:93:96:0d:0f:dc:a0:09:
4e:84:ae:9d:b1:ef:27:69:1c:f4:79:1d:f9:06:66:
0b:a7:07:9f:14:49:83:65:01:6b:7c:70:6b:c4:78:
f6:cc:1b:38:a2:f5:a8:91:14:29:d4:d9:c4:37:a1:
de:69:39:aa:0a:fc:fe:eb:f2:8f:77:ee:35:c5:0f:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1E:B3:61:2B:76:94:A5:86:FF:29:48:62:21:6A:BF:6F:03:A6:35
X509v3 Authority Key Identifier:
keyid:D4:80:9E:AA:A2:51:06:46:DD:85:35:9D:F8:6E:65:25:19:47:0F:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:3b:f3:2f:87:37:ed:d1:0b:41:1a:d5:6e:9b:5d:49:31:c5:
0c:b1:5e:96:1e:6c:97:3c:41:8b:f8:87:f0:f8:15:80:a5:bd:
32:2d:2c:c3:20:a8:f1:95:51:5a:c8:ed:75:e7:ce:cf:b2:01:
06:fb:5d:be:1f:6c:22:fd:6b:f6:63:ce:ef:e8:dd:4e:c7:d9:
84:22:ba:74:b3:d7:f7:77:2d:d4:ce:a6:54:2f:3d:cf:72:62:
e7:5b:e6:7b:bc:4b:85:bf:86:af:c0:c9:1f:4e:cc:1f:49:13:
ad:49:72:b8:f5:52:72:36:b4:01:f3:da:5f:a4:05:ea:76:5a:
a3:de:4a:16:82:fd:c2:bc:00:9b:d6:03:56:0f:7e:43:e7:14:
4e:6d:fb:84:4d:2f:c0:54:39:b1:d8:ea:5e:d9:00:14:f9:e4:
57:f5:9b:ca:05:d2:9a:ac:ac:ad:73:cc:c9:65:8d:30:74:9f:
80:93:f3:55:9e:aa:5f:ca:10:6a:4d:74:95:b3:a3:8c:16:12:
ec:d7:41:8a:e8:5f:8b:7d:8a:b9:57:1a:bd:c3:c0:a8:91:2e:
b8:19:42:4d:56:9f:2f:b7:65:80:6d:0d:13:14:16:d7:6e:23:
a7:d4:ea:77:d8:0e:b4:5b:8c:3d:88:cb:2d:e6:46:8b:39:7f:
a0:fa:11:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:41:24 2026 by rpki-client