This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
File: iEiqzfKVEwPnCY9BnYygBCKJDGk.mft (raw, json)
Hash identifier: VmMUOrL3EcxizRk28mku3ehvg8iwIbrVymMalAIgL3k=
Subject key identifier: 8F:CA:2D:C1:D1:4A:E1:3A:CD:A1:C4:CD:97:D9:2B:9E:67:D4:35:53
Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69
Certificate issuer: /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
Manifest number: ED
Signing time: Fri 23 Jan 2026 04:37:07 +0000
Manifest this update: Fri 23 Jan 2026 04:37:06 +0000
Manifest next update: Fri 30 Jan 2026 04:37:06 +0000
Files and hashes: 1: iEiqzfKVEwPnCY9BnYygBCKJDGk.crl (hash: atzAps74AMZLVGrwTy7imFIjcFCPi0zV51qhA7xQvL8=)
2: 029310329B1911EFA0BD6470C4F9AE02.roa (hash: ipUtH6de1n3QDXNmS4idd62IMEQfE9S8Kl6BBzpD9nQ=)
3: 07BAAB7C9B1611EFB5C28465C4F9AE02.roa (hash: ofbztl5uVlglZWvlUxP/w/vzUs13H0jw290VgxrDPX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl
rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8047, serialNumber=8848AACDF2951303E7098F419D8CA00422890C69
Validity
Not Before: Jan 23 04:37:06 2026 GMT
Not After : Jan 30 04:37:06 2026 GMT
Subject: CN=6972faf3-4550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:51:45:08:fc:a5:58:70:7b:39:50:e1:db:3f:
3f:74:2a:fd:c1:f9:c9:38:5f:4c:b0:7e:2f:00:7e:
80:b3:cf:63:57:ea:73:3b:ac:d6:a9:ee:96:48:48:
31:5b:da:22:46:af:2d:7f:20:54:a6:24:62:4c:fc:
8b:5d:59:fe:76:e1:cd:2a:4f:2a:23:fc:43:10:2c:
8d:8e:e7:24:9f:0b:e0:af:ea:cd:a3:e4:6e:ba:4d:
9c:71:b3:4b:75:87:d7:3e:4a:f8:dc:3f:32:be:8c:
db:6b:e4:19:b3:b0:5b:2b:c2:19:d7:40:cc:31:e3:
7d:52:55:c7:62:15:bc:35:4f:fd:8d:fd:39:68:1f:
25:c1:00:c0:30:8e:1b:8a:90:f2:05:96:16:58:23:
82:89:33:2b:f0:86:b9:56:97:e3:3b:fe:a8:ba:75:
2c:d0:b7:98:e5:06:b7:6b:30:5a:23:12:03:18:33:
b8:c9:e7:e0:02:92:2f:23:fc:bb:24:49:b8:d6:71:
be:58:b9:4a:fb:05:0b:b4:6f:3f:c8:ab:30:7f:c2:
77:5d:d3:99:2e:d8:73:c4:55:78:c7:5e:4e:bb:b8:
51:a0:9b:44:72:ff:0d:b0:d5:2a:22:af:70:8f:08:
af:2f:4d:d6:e8:d0:0a:72:98:37:ca:ac:0b:fc:79:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CA:2D:C1:D1:4A:E1:3A:CD:A1:C4:CD:97:D9:2B:9E:67:D4:35:53
X509v3 Authority Key Identifier:
keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:50:90:aa:ab:1e:e6:e8:e8:62:88:2a:38:60:bd:db:07:31:
a2:cb:56:37:fc:b1:c1:82:15:e4:c0:b4:41:7c:e2:2c:37:c2:
ec:a6:2b:39:1a:e0:fd:35:b2:e1:30:79:90:42:e0:b1:a8:30:
5d:8b:ff:75:2c:72:39:71:0c:7b:32:7c:bd:99:23:4a:4f:8e:
c7:ed:51:48:4c:01:5b:15:9b:58:35:fc:23:89:2f:87:0f:f1:
a3:eb:a8:04:34:91:a7:12:b8:93:71:33:8d:f4:d9:5b:b5:bb:
36:ab:52:19:24:c2:5b:18:c3:f5:68:cf:7c:3b:59:bb:45:87:
f0:b7:8c:9e:75:e6:c9:c8:74:f7:24:03:8c:93:f3:23:44:0b:
b4:b1:86:32:b2:98:56:2c:26:6a:5a:3c:1a:a1:9e:01:82:54:
86:3d:f2:f9:fb:0d:4f:1d:ff:26:cd:c0:c0:82:ad:25:2d:2d:
ea:e9:4d:97:73:da:aa:0f:63:90:08:a1:58:40:ef:de:78:e5:
f4:b4:ea:41:d6:1b:86:07:e5:82:a0:db:cd:dc:99:f6:b1:1b:
95:94:62:27:4b:0d:ff:53:21:04:a4:9a:8b:03:4a:f2:81:9d:
2a:7d:fb:3e:06:74:76:33:76:b4:73:1c:e0:cd:38:8f:cb:1b:
91:3c:41:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:27 2026 by rpki-client