This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
File: 7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json)
Hash identifier: kZ/9A0SbUGEW28a6LnM8j4DxjJSzpMRlDy8pyIVy6FQ=
Subject key identifier: 54:8D:C8:76:CA:28:FE:91:12:4C:53:C2:E0:89:EE:40:16:CD:E5:88
Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81
Certificate issuer: /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781
Certificate serial: 0206
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
Manifest number: 0206
Signing time: Sat 24 Jan 2026 22:13:06 +0000
Manifest this update: Sat 24 Jan 2026 22:13:05 +0000
Manifest next update: Sat 31 Jan 2026 22:13:05 +0000
Files and hashes: 1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: N6ZbwEJbTizgHI/VRkFpaXnsIZEBDxQkgF9SBG9ocDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl
rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781
Validity
Not Before: Jan 24 22:13:05 2026 GMT
Not After : Jan 31 22:13:05 2026 GMT
Subject: CN=697543f1-7418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:7b:88:4f:d3:1f:79:93:2f:d9:bc:4b:00:
fa:6c:8c:83:7a:63:dc:27:aa:1a:ed:bb:d9:c7:e0:
b9:ad:ef:dd:80:76:df:49:b3:60:31:e4:1a:d9:4d:
7c:05:74:a8:e2:f2:39:3d:0c:e6:b9:0a:a0:ac:a3:
90:a6:85:96:b9:a3:58:fa:6c:a3:e9:b8:5c:16:c0:
56:f1:98:32:77:7c:60:64:72:82:74:d2:cc:3e:13:
82:84:2e:f6:a4:75:5e:85:47:70:25:6c:fe:ae:ed:
21:53:97:a5:db:9c:f0:b9:45:ed:bf:32:9c:9d:29:
e5:49:15:73:6f:a1:7d:23:53:4f:6d:8b:bd:1e:2a:
e0:16:74:7c:6f:bf:b2:0d:88:d5:32:01:e8:e1:5e:
4a:28:86:91:23:6b:c6:86:ce:6d:c3:cc:37:5b:c5:
1f:22:64:27:a2:ad:6e:aa:9b:79:15:9b:03:6a:50:
01:2e:4c:1b:2c:7a:23:89:b9:e3:aa:c5:ab:f0:e3:
07:82:37:94:7d:f3:53:a9:bc:5f:66:2b:64:18:fb:
90:2e:b5:d9:db:94:50:d6:3c:ee:94:d0:c8:73:40:
67:fe:9f:f0:cd:c4:90:1d:0a:fa:f1:1f:5a:bb:d7:
e6:48:2f:38:71:24:ff:8d:db:fe:aa:d0:66:f7:81:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8D:C8:76:CA:28:FE:91:12:4C:53:C2:E0:89:EE:40:16:CD:E5:88
X509v3 Authority Key Identifier:
keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:b6:66:c3:22:2b:47:83:82:a4:ef:83:eb:b3:7c:5a:3a:61:
a9:9c:00:d7:19:29:b9:6f:23:5f:3f:58:b5:e1:2f:2e:15:68:
2c:ea:d6:f8:ab:7d:ed:bd:eb:7d:f9:6f:13:f5:d1:65:e1:8e:
a2:b0:bf:9e:45:be:e5:ad:09:bf:20:51:5c:4f:81:68:78:e8:
5b:91:bc:72:76:a7:31:15:c6:d0:b1:05:14:5a:b2:ac:6b:b1:
42:07:ca:df:53:53:e3:55:0c:17:fa:e7:74:2c:7b:d5:14:f3:
a3:2d:40:c2:89:9d:fe:f1:13:b2:12:55:35:59:73:74:c3:d5:
20:47:de:21:1f:66:f6:a4:90:36:a4:74:33:40:db:4c:a2:10:
97:6f:f7:b3:a0:d1:d1:fa:4b:e7:53:c0:d2:14:6e:33:5c:9b:
75:eb:bd:0f:06:5a:ee:4e:14:0a:ee:8b:f7:29:7f:e7:f0:23:
de:9f:12:a0:0e:30:36:73:ab:f0:b6:23:0f:13:5f:ee:76:60:
a6:7a:37:16:f7:92:d5:45:8b:b0:b6:a3:9e:fd:d1:38:db:52:
00:06:78:9b:4c:54:4e:51:f9:af:3a:ed:8b:bd:33:bd:87:e2:
0e:0d:ea:93:a0:5f:16:da:3c:59:f6:6e:4c:1b:25:40:ac:ac:
ce:35:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:08:28 2026 by rpki-client