This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json)
Hash identifier: ReKrNlzuP518O2+uWVYRowPcKKC7LQ1pEJPmO3YZ8O8=
Subject key identifier: AF:D6:D6:92:26:06:20:32:36:AA:FA:17:3D:2A:7B:EC:96:8B:99:45
Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Certificate serial: 0A68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
Manifest number: 0A5C
Signing time: Sat 24 Jan 2026 19:07:14 +0000
Manifest this update: Sat 24 Jan 2026 19:07:14 +0000
Manifest next update: Sat 31 Jan 2026 19:07:14 +0000
Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: AU+Nb51GrvFIYm0dkcOt0KR+pg0VmXPK1YyVeOVPSVk=)
2: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: ZCM+V6Y56yepaeegUajjp4xOF8Q6SeyZY2EvL4X5a+Y=)
3: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: qSGZ+j4RvXroFxByBDcPf9/bS2chAaWe7JM19f3ZPpw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2664 (0xa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Validity
Not Before: Jan 24 19:07:14 2026 GMT
Not After : Jan 31 19:07:14 2026 GMT
Subject: CN=69751862-15ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:4c:84:96:1d:34:d2:31:a5:11:16:03:25:
0e:09:64:d9:8c:e1:15:d4:22:9a:b2:b8:d3:0b:42:
a6:6a:9d:39:e0:e3:79:91:45:45:21:8a:2a:9c:3a:
cf:fa:cf:f8:bd:47:7e:31:25:8c:86:72:65:6e:1f:
39:77:fe:73:30:da:7f:46:76:27:9f:e1:7d:84:16:
13:4b:c6:2b:47:6a:7c:51:5b:31:35:60:38:59:8a:
74:3f:d6:eb:95:b3:0f:ff:1d:f1:fe:29:06:f1:fb:
5f:c9:a9:ea:6f:01:93:6e:29:0d:e4:d7:5f:85:b9:
71:80:e3:ff:c0:d9:fb:b9:42:b0:53:43:e9:70:9a:
7b:9b:e9:af:f1:e4:8d:0f:ff:ad:bc:e3:f0:05:09:
94:99:d6:c1:1a:da:8c:05:60:39:2a:6e:5a:6a:27:
7f:1f:ba:d1:a6:ef:c8:64:d8:5d:75:5d:e2:14:90:
c2:e8:77:4e:d8:33:1e:56:29:3c:b2:ca:c8:5b:a5:
35:8a:27:6e:24:fa:67:77:a2:dc:7d:41:69:38:37:
b0:7b:b8:e0:3e:37:6b:64:35:7f:3c:dc:f1:1f:cd:
50:df:ce:27:31:a6:0e:bc:db:b3:50:72:07:b3:6e:
49:bb:8f:1d:78:c4:32:32:96:91:29:d4:ab:6a:31:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D6:D6:92:26:06:20:32:36:AA:FA:17:3D:2A:7B:EC:96:8B:99:45
X509v3 Authority Key Identifier:
keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:c1:0f:d2:4a:a5:29:78:53:b6:65:21:0d:4a:5b:f4:e5:79:
c5:fa:53:0e:91:fc:24:fc:4c:81:cf:c4:73:ee:0f:04:76:4c:
f9:04:30:c0:46:f8:36:73:d6:fe:e4:c1:2d:0a:3f:1b:af:c2:
ee:1b:2b:10:72:17:fe:a4:18:e1:67:9f:58:8d:14:b4:27:75:
94:38:9e:14:bb:a8:d7:55:d0:65:0c:76:f1:84:17:ef:53:2a:
58:13:45:50:dc:b4:df:e0:4a:91:2e:17:af:ad:33:c9:8e:84:
da:d2:fd:1f:c3:68:4f:05:72:26:96:ef:bf:ce:53:9a:35:24:
1c:38:f3:15:05:48:bd:da:19:bf:f6:6e:c6:90:19:52:a0:f0:
54:2e:0a:4f:5e:ef:d5:f8:bf:cf:e4:af:3f:ab:e9:9a:81:0e:
9a:df:be:0c:88:1e:e7:92:0c:74:06:ae:b0:8e:68:8b:52:47:
04:6a:55:bf:d0:5b:b8:cd:91:9f:19:d0:6b:71:5e:65:64:ec:
4e:92:c4:bc:08:89:2c:17:11:f0:c5:c0:db:2d:96:3d:67:7f:
3f:82:21:d7:90:33:74:22:d8:b7:68:0c:04:0d:72:4d:27:3a:
ca:be:dd:b9:9e:f0:76:a6:d2:9b:9c:b0:0d:c9:2f:f1:f5:83:
56:26:c9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:14:46 2026 by rpki-client