This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
File: iU_hE5i2ea6xsRixveZz4Yz26TQ.mft (raw, json)
Hash identifier: axutEkURzB934ekqzHKJgcRvTelt7oEI46Ab2RZd3wE=
Subject key identifier: AF:AB:5C:6B:CD:5F:4D:9C:AA:8A:FD:26:C6:4D:62:92:28:96:57:4E
Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Certificate serial: 13F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
Manifest number: 13BD
Signing time: Sat 24 Jan 2026 16:43:05 +0000
Manifest this update: Sat 24 Jan 2026 16:43:05 +0000
Manifest next update: Sat 31 Jan 2026 16:43:05 +0000
Files and hashes: 1: iU_hE5i2ea6xsRixveZz4Yz26TQ.crl (hash: ftgy2itoGBhV0NXTtj8QBiMn39HIYXk7mtzoGvG0JfA=)
2: 1AE4CD843AF511F0B702C741C4F9AE02.roa (hash: Ev9eMpCw/MzuG/D+D40guHshDgyLCaCtAL+5ytANYiw=)
3: 02BFF64EE6A811EFB5943878C4F9AE02.roa (hash: GoAy5cjhZ6tHusMFJznhNoSIq/l4hxWlmp0vD6wrtPc=)
4: B2E4A482E4D611EDB15EDE36C4F9AE02.roa (hash: jOCYNbolAoXMHScfQ9iviRSTkspAFWIu2eYuLyyZDaI=)
5: AF14F7EC516411F08E03714FC4F9AE02.roa (hash: 96q0yHBSk/Rmlo0qmQ4XhZWgKPNkJp4u/4iyHTCtNz4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5105 (0x13f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Validity
Not Before: Jan 24 16:43:05 2026 GMT
Not After : Jan 31 16:43:05 2026 GMT
Subject: CN=6974f699-4cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:b0:aa:73:53:68:90:99:c3:3e:07:cf:0d:
81:84:73:cb:b2:89:68:bd:3e:d6:96:3f:16:0d:18:
04:50:94:d7:43:92:69:bf:0a:aa:12:84:10:c6:5e:
ef:60:c3:5b:f2:a8:c8:aa:b2:e6:4b:5b:07:1e:e3:
67:cb:6a:1b:62:bd:f0:dc:9c:48:0e:a3:4e:83:4a:
35:a6:97:b8:1d:35:7a:36:75:1e:cb:82:1a:d7:05:
9c:e6:5a:dd:8c:bb:0d:dc:14:85:9f:0a:17:4f:0d:
c6:87:2e:c6:73:4c:4c:9d:bc:0f:8a:10:9b:39:4f:
9d:39:d8:e9:fb:46:93:50:bc:f3:c6:bb:93:59:a6:
36:4f:99:ce:6b:a4:a2:20:93:b1:dc:b4:f2:2b:b3:
4d:06:e9:8a:7e:19:57:30:a5:cb:43:d9:c8:b4:a7:
97:a4:9d:ba:c3:74:84:b2:57:a1:98:60:e7:b1:5f:
08:2d:23:1f:63:94:ce:99:fc:1f:53:41:c0:f1:bf:
b6:fc:27:4d:00:26:ac:f4:3e:28:18:ee:c0:40:29:
cd:21:20:b6:3c:e4:62:00:61:35:7a:06:19:3d:48:
59:4d:c1:a3:82:c8:26:b2:36:52:7f:f3:ab:72:25:
bb:ba:41:8e:6b:37:1e:88:26:ad:c1:e2:cf:1e:ce:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AB:5C:6B:CD:5F:4D:9C:AA:8A:FD:26:C6:4D:62:92:28:96:57:4E
X509v3 Authority Key Identifier:
keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:70:8d:a8:a9:ef:ff:38:62:3c:1b:a6:6f:c6:79:43:27:55:
fa:c5:56:06:f5:00:59:5f:36:7f:8c:3a:71:d4:90:da:fe:0d:
86:36:43:7b:26:05:02:d3:d9:6e:83:8d:a8:df:1c:a4:36:80:
7a:9b:c2:f8:dc:5c:f6:d2:7d:ce:15:ea:7f:7e:41:18:9f:d8:
88:cd:cd:17:81:46:d8:d6:1d:e1:e0:45:fa:c0:4e:45:13:8a:
0f:cc:2c:6e:ff:a5:e9:a0:79:b8:11:02:62:24:00:65:78:fe:
f2:70:be:ee:d0:bc:cd:59:df:f3:d1:61:72:5e:e8:4f:2d:79:
e2:9b:f6:8b:a4:d6:30:18:d1:e4:6b:30:37:db:68:5f:ae:f2:
44:f5:1f:7d:01:08:8d:45:29:d4:9b:f6:b5:f0:84:d4:47:ec:
40:2e:e4:2a:ee:e4:48:66:90:3a:7e:88:80:a8:b5:e5:40:41:
36:39:40:17:1c:62:01:b7:8d:be:fa:5d:a2:2d:75:be:59:cc:
55:98:c2:51:35:10:06:12:b0:b0:ac:f3:79:d3:14:26:32:bb:
ac:76:01:6c:b7:34:8d:ea:4e:cc:2e:31:94:d5:47:b2:e1:a7:
64:67:08:03:eb:77:f9:c4:22:f9:a5:d2:d4:c0:2f:f3:4a:ef:
8c:d4:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:36:00 2026 by rpki-client