This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json)
Hash identifier: QIxQK4+/WUmrOc5kb59TAqh5FOAhqAzXOG0e2/eojAY=
Subject key identifier: 41:A6:32:FD:C3:86:A3:0B:B5:D9:F9:CE:60:00:BF:89:AF:49:6A:FC
Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95
Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195
Certificate serial: 0A01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
Manifest number: 09F2
Signing time: Sat 24 Jan 2026 19:20:51 +0000
Manifest this update: Sat 24 Jan 2026 19:20:51 +0000
Manifest next update: Sat 31 Jan 2026 19:20:51 +0000
Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: qO0dW+WGKLKfJt+PPKarunJ5HgAEKjpiGPKx9YVekQU=)
2: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: 8JSwEQed2eJqn9OytcIj9IctVhOahjE7HP6K7LQO8mE=)
3: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: rFSplheoWDm+5MPYS0jTevwHFfJ593Fp0RQ1ghGpvEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl
rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2561 (0xa01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195
Validity
Not Before: Jan 24 19:20:51 2026 GMT
Not After : Jan 31 19:20:51 2026 GMT
Subject: CN=69751b93-48cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:95:34:97:8b:53:d1:3e:1b:a1:d0:b7:09:
9c:56:ed:bc:38:92:11:4d:10:5a:ec:58:bb:83:2e:
5c:1d:f3:8a:7b:73:1c:17:21:a4:70:9b:b0:30:a2:
da:64:39:e7:8a:a9:4e:67:4a:8d:2b:fd:3b:ee:23:
f8:ec:b5:e2:77:6b:7a:25:99:31:02:24:05:db:f3:
b7:7e:e3:a1:87:2c:7e:e8:df:3c:5e:75:96:b7:62:
96:bc:5e:6f:2c:29:dd:fd:5e:04:eb:3a:39:5c:1d:
3e:c5:23:e4:b9:be:2a:e0:00:59:42:63:e9:33:06:
e2:86:f9:c3:1e:ef:60:6f:68:1f:74:65:b0:74:ea:
41:8b:ad:5a:1f:c9:cc:dd:52:b3:ca:99:ca:75:f8:
45:d8:0a:87:39:e3:00:0a:a9:4b:90:28:45:c1:60:
65:f4:a8:4a:3c:49:25:c0:d3:6b:69:d3:aa:90:d1:
c7:67:d6:39:ba:8f:08:db:cd:98:58:51:cf:d6:58:
7b:c6:4b:40:92:4a:9b:4d:9d:ea:3f:f6:57:dc:df:
97:b7:49:13:c6:f5:73:ea:54:d3:2f:ca:83:d9:7e:
c3:18:03:9b:c4:0d:ce:53:8e:ce:11:ab:ff:1f:4d:
43:a0:a9:cb:41:c1:54:d4:0e:d5:49:3f:27:4e:65:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A6:32:FD:C3:86:A3:0B:B5:D9:F9:CE:60:00:BF:89:AF:49:6A:FC
X509v3 Authority Key Identifier:
keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:20:af:50:16:62:2a:b7:a6:12:3d:68:ff:2a:ff:03:27:8d:
30:86:e2:1b:0f:d8:8d:e1:23:df:2e:47:a7:3f:09:92:b7:a4:
04:21:08:83:cb:2c:ca:da:bf:50:aa:c6:c1:d7:17:6f:10:9a:
f5:db:62:99:ac:9f:31:45:9c:a7:da:03:ab:89:1a:ee:45:6f:
b5:54:2f:bb:02:ac:c8:c5:a7:cd:16:9c:af:72:ea:6e:b7:a8:
81:eb:c6:b6:47:a6:71:c4:9d:1f:22:72:c6:68:fc:bd:4f:f5:
2f:ac:c0:f5:35:11:46:fe:d6:dc:41:c2:ed:03:e9:cd:d9:d1:
69:f9:38:73:04:af:dc:28:34:f3:be:87:44:2a:47:31:33:16:
77:7e:89:84:b7:15:f4:21:c8:7e:e1:9b:9d:47:5b:3b:8f:2f:
10:d6:e7:4a:9c:4f:cb:60:51:b8:22:8c:f9:1e:3e:15:67:d7:
5b:a0:6b:09:30:61:dd:69:4a:ec:4f:cb:43:48:69:cb:ba:44:
35:26:b0:3d:e8:2d:07:5a:cd:d2:a8:2a:24:34:8c:5b:88:ad:
eb:8c:a7:d3:e5:ff:d8:14:93:58:a6:32:7e:89:d4:1d:7f:23:
e7:ff:fe:e6:48:21:a5:33:d6:d6:4f:0e:ee:28:8b:5e:39:16:
af:1b:48:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:19:55 2026 by rpki-client