This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
File: IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json)
Hash identifier: dvHVD3saQZx+gvzI4096GA7P0NjzkGM4ct5s7DHAiZE=
Subject key identifier: 95:94:63:FF:20:9E:5E:DA:68:BF:DC:54:BC:90:C7:FA:70:A2:EB:EB
Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Certificate serial: 07CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
Manifest number: 07C1
Signing time: Sat 24 Jan 2026 20:41:50 +0000
Manifest this update: Sat 24 Jan 2026 20:41:50 +0000
Manifest next update: Sat 31 Jan 2026 20:41:50 +0000
Files and hashes: 1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: gs++sfieIbOEofWrElZwy34jVlZh9/Zn7CQQjt2H9GY=)
2: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: BlNMvykSVEqNeWKjQSI6MISWgcMVQUYKsr+oWp8+db0=)
3: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: CNZBv4FK9ZWvTtzm+cWIR1zfUXJg63OkryMkTZVFNpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996 (0x7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Validity
Not Before: Jan 24 20:41:50 2026 GMT
Not After : Jan 31 20:41:50 2026 GMT
Subject: CN=69752e8e-fa84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:31:5b:79:82:bc:0b:f1:71:cf:d9:ee:fd:
14:68:fa:43:4b:62:aa:52:df:3f:9c:c0:da:51:6b:
53:10:52:79:d2:41:d9:90:d6:08:35:80:11:a7:ac:
c1:23:e9:fe:b5:16:0a:7b:3c:ae:50:f3:f4:01:9e:
93:8c:60:66:18:0c:05:96:83:7c:10:d7:ed:18:c8:
02:ca:e6:d4:ad:61:6b:45:0f:de:ae:3d:22:bc:c2:
1e:27:28:a0:3b:f2:ae:64:85:2b:fa:0e:ad:b4:c8:
97:3a:d4:85:81:22:6d:01:b5:dc:63:f3:90:89:54:
d4:f9:e0:d7:c0:16:f7:70:5f:87:d3:d1:d8:84:cc:
d8:0e:19:4a:a5:74:2b:fd:86:90:0f:15:7a:8e:4e:
89:1b:9c:22:78:47:87:97:33:f8:87:e4:c2:86:7e:
c5:0e:f4:76:83:d7:af:27:54:3b:d1:ce:20:20:1e:
07:4d:ac:e0:58:43:47:5a:d8:f3:9b:24:c0:80:30:
08:c2:af:76:27:c1:4a:32:2a:ec:1a:ac:4e:91:bd:
a8:cd:31:33:43:d3:36:82:2e:ea:11:39:ad:78:b1:
2f:13:b8:66:5b:b2:db:d1:e8:d4:82:76:c5:68:c4:
12:a6:5a:b0:f8:e4:01:39:03:87:45:c6:58:98:d5:
94:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:94:63:FF:20:9E:5E:DA:68:BF:DC:54:BC:90:C7:FA:70:A2:EB:EB
X509v3 Authority Key Identifier:
keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5e:0b:a1:30:bf:48:ca:70:98:15:7e:b8:79:29:55:e0:6d:
ee:5a:f0:15:d0:53:e2:65:d9:53:6a:b6:51:e6:3b:62:09:96:
8e:fa:9d:46:e2:74:65:f3:a5:37:6b:a7:28:57:31:e8:6f:c4:
a4:b3:58:45:b5:8e:4e:0d:33:d7:ec:df:af:be:d7:1d:63:29:
3e:46:22:4d:66:ea:87:3f:3a:97:c4:89:43:df:f1:af:b8:ad:
d6:7c:03:6f:ef:e1:93:6a:14:1e:b0:b7:e4:7f:cf:85:70:45:
94:75:e0:e7:52:e4:8b:18:85:47:5b:99:7d:a8:40:89:42:1c:
11:d8:72:4c:ba:20:f1:71:0f:7f:2b:ba:32:70:f1:13:1d:e7:
59:a6:79:0f:5a:2f:8a:e1:b7:c5:2f:af:1a:38:56:fe:65:b2:
98:cc:ad:a3:ff:b0:8e:c8:38:3d:e5:80:ec:3c:6e:8a:88:99:
f2:c2:f5:66:f5:76:21:96:7d:88:7e:10:79:7a:28:1c:2c:ee:
55:ca:4d:30:5a:65:3c:26:9a:fa:b5:11:4a:0c:ad:cd:da:93:
2d:31:06:19:fb:99:51:11:68:7d:45:8c:4c:f6:56:b8:de:12:
9a:9b:f2:40:59:56:3e:6b:b4:18:5a:84:c8:74:c7:d2:42:f8:
fc:22:3d:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY2NUExMTAvBgNVBAUTKDIyNDA3NzBFMTUxQzc0MUE4NERFOTRFMjhDNzUyMDAy
QjgzOUZCRUQwHhcNMjYwMTI0MjA0MTUwWhcNMjYwMTMxMjA0MTUwWjAYMRYwFAYD
VQQDDA02OTc1MmU4ZS1mYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtAkxW3mCvAvxcc/Z7v0UaPpDS2KqUt8/nMDaUWtTEFJ50kHZkNYINYARp6zB
I+n+tRYKezyuUPP0AZ6TjGBmGAwFloN8ENftGMgCyubUrWFrRQ/erj0ivMIeJyig
O/KuZIUr+g6ttMiXOtSFgSJtAbXcY/OQiVTU+eDXwBb3cF+H09HYhMzYDhlKpXQr
/YaQDxV6jk6JG5wieEeHlzP4h+TChn7FDvR2g9evJ1Q70c4gIB4HTazgWENHWtjz
myTAgDAIwq92J8FKMirsGqxOkb2ozTEzQ9M2gi7qETmteLEvE7hmW7Lb0ejUgnbF
aMQSplqw+OQBOQOHRcZYmNWURwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWUY/8g
nl7aaL/cVLyQx/pwouvrMB8GA1UdIwQYMBaAFCJAdw4VHHQahN6U4ox1IAK4Ofvt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjY1QS9DOEZBRDEzODI5
MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RCcUUzcFRpakhVZ0FyZzUt
LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lrQjNEaFVjZEJxRTNwVGlqSFVnQXJnNS0tMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NjY1QS9DOEZBRDEzODI5MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RC
cUUzcFRpakhVZ0FyZzUtLTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQChXguhML9IynCYFX64eSlV4G3uWvAV0FPiZdlTarZR5jtiCZaO+p1G
4nRl86U3a6coVzHob8Sks1hFtY5ODTPX7N+vvtcdYyk+RiJNZuqHPzqXxIlD3/Gv
uK3WfANv7+GTahQesLfkf8+FcEWUdeDnUuSLGIVHW5l9qECJQhwR2HJMuiDxcQ9/
K7oycPETHedZpnkPWi+K4bfFL68aOFb+ZbKYzK2j/7COyDg95YDsPG6KiJnywvVm
9XYhln2IfhB5eigcLO5Vyk0wWmU8Jpr6tRFKDK3N2pMtMQYZ+5lREWh9RYxM9la4
3hKam/JAWVY+a7QYWoTIdMfSQvj8Ij2k
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:48 2026 by rpki-client