This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft
File: i0WgWBIZndhsv8hCI_2BqzMGJrk.mft (raw, json)
Hash identifier: p3NzPJ9hbr4+goAdJf3uI2URN7cE3erjOmDNMpE8vY8=
Subject key identifier: 0F:2E:8B:E2:D8:99:53:73:17:86:76:A8:98:FA:EA:99:46:0F:3A:17
Authority key identifier: 8B:45:A0:58:12:19:9D:D8:6C:BF:C8:42:23:FD:81:AB:33:06:26:B9
Certificate issuer: /CN=A919762A/serialNumber=8B45A05812199DD86CBFC84223FD81AB330626B9
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft
Manifest number: 44
Signing time: Sun 25 Jan 2026 06:27:01 +0000
Manifest this update: Sun 25 Jan 2026 06:27:01 +0000
Manifest next update: Sun 01 Feb 2026 06:27:01 +0000
Files and hashes: 1: i0WgWBIZndhsv8hCI_2BqzMGJrk.crl (hash: C1gjv0M23sTiZNHc7wQ05LeG1geHa0kTJmypvRRZk9s=)
2: 9724DB52944911F0BBB4490AC4F9AE02.roa (hash: lpN7ylnahjPKcKqzXzMQXkmAw/ItFEQm+gEhm6BkKOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.crl
rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919762A, serialNumber=8B45A05812199DD86CBFC84223FD81AB330626B9
Validity
Not Before: Jan 25 06:27:01 2026 GMT
Not After : Feb 1 06:27:01 2026 GMT
Subject: CN=6975b7b5-47b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:80:b7:74:0d:15:cb:92:7a:e8:9c:b7:a0:e5:
8a:a4:e5:58:16:88:7e:43:f7:a6:98:f3:43:ff:9c:
55:bf:ac:b0:56:be:65:0c:0b:bf:28:c1:f1:b0:0f:
ce:22:0f:bd:78:06:5a:e9:ca:ac:20:2f:28:0f:a8:
d9:19:28:69:4f:82:3f:92:03:e8:a1:06:1b:e2:4b:
e6:de:7d:61:76:e5:ad:de:82:5c:5f:10:fb:d3:fd:
8c:57:a2:7d:b7:6b:11:a7:bf:ea:6b:72:e2:3d:64:
fa:9e:94:08:70:49:78:1d:d7:1b:05:60:46:28:0c:
c8:12:26:a2:e1:dc:2a:bf:a8:f3:58:cd:0b:cb:45:
65:6e:b4:69:4f:03:7b:1a:81:5e:e7:26:16:53:ea:
28:1a:6b:d5:0a:73:36:44:56:89:3a:7e:df:2f:55:
36:54:46:cd:4c:95:4f:03:00:a9:75:97:6c:f8:97:
58:fc:12:b6:bf:99:2b:87:bb:ce:c0:4e:d6:e0:8d:
c0:73:d7:cc:36:99:78:46:eb:a2:9d:eb:cf:6f:98:
fd:44:4e:11:c8:71:1e:e3:e7:a9:45:b2:62:f2:f5:
18:4b:12:92:67:6e:fb:6c:d4:5e:0b:4e:f2:e6:8f:
66:77:b1:a3:94:f8:ad:50:d0:57:74:52:6f:55:1f:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2E:8B:E2:D8:99:53:73:17:86:76:A8:98:FA:EA:99:46:0F:3A:17
X509v3 Authority Key Identifier:
keyid:8B:45:A0:58:12:19:9D:D8:6C:BF:C8:42:23:FD:81:AB:33:06:26:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:af:f5:66:05:1c:16:be:40:e0:9e:51:5e:4d:db:56:2e:cd:
81:5e:c5:d3:6c:8b:37:8c:97:86:c8:3d:ff:5e:45:16:90:b3:
4d:08:3d:3e:f1:b1:19:23:3a:3b:03:be:18:d3:9a:39:dd:80:
9f:73:67:ff:15:51:e5:17:15:e2:7a:d6:e3:47:ec:c7:d9:0d:
b2:f2:9e:24:ae:0b:b8:15:70:81:5f:da:b0:a8:bc:b3:77:1e:
91:9d:26:4e:1f:5e:06:b8:28:7a:36:6b:a0:87:83:c3:96:97:
8e:08:b4:d7:9a:dd:3d:63:75:75:75:3b:d0:5d:14:53:b7:7f:
f9:df:c9:2f:a4:fa:70:10:4e:62:0b:7d:61:21:a9:40:b0:d6:
00:9e:9d:d3:d4:b3:6a:6b:65:6b:f6:ce:ad:41:3a:b0:76:59:
37:4e:f6:09:c8:f5:98:bf:ab:aa:f7:c7:66:d8:b1:c3:52:05:
c1:fe:b7:bb:49:67:b9:c7:49:d2:72:d3:64:8a:bf:e8:30:ad:
34:bb:b4:f3:0f:4d:ba:ba:e3:b0:a3:14:d5:10:17:15:c9:84:
db:1f:f0:d3:c2:39:b7:30:49:38:8e:65:fe:56:4f:63:65:0c:
a1:6f:04:21:5c:b9:ca:13:3f:86:3f:76:56:57:59:85:79:4d:
88:46:e6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:58 2026 by rpki-client