This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
File: iOe1QfQimNbptRZdllJGzBzB9aI.mft (raw, json)
Hash identifier: ++zOT9KCTFM1DU2flQVoITzzx/ulU4N8thqIe+0LX3o=
Subject key identifier: FF:E1:77:43:BF:38:77:0F:CC:17:57:66:6F:F1:3A:D3:6D:11:58:B3
Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Certificate issuer: /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Certificate serial: 0FDB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
Manifest number: 0FA0
Signing time: Sat 24 Jan 2026 17:15:20 +0000
Manifest this update: Sat 24 Jan 2026 17:15:20 +0000
Manifest next update: Sat 31 Jan 2026 17:15:20 +0000
Files and hashes: 1: iOe1QfQimNbptRZdllJGzBzB9aI.crl (hash: 2jqAO8pjQbsy9aQI2NmQIs3APIIOTDAen2rpKc7v7UA=)
2: 13C1EDA8767911EE9A957930C4F9AE02.roa (hash: rMgdKojSnMQn5zP9ArOeE344pCaixcohoQsewhOoy54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4059 (0xfdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9D0F, serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Validity
Not Before: Jan 24 17:15:20 2026 GMT
Not After : Jan 31 17:15:20 2026 GMT
Subject: CN=6974fe28-6d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:bb:74:b2:a9:c0:8c:ea:7d:d8:7c:c8:e4:
ce:58:2e:12:76:1d:5f:92:80:46:c2:9b:28:d1:ed:
bb:f2:5d:67:76:77:b1:66:60:20:67:81:57:91:09:
2f:41:4a:61:f1:ab:56:dd:79:13:20:48:ae:fc:b0:
90:d6:42:dc:06:ad:f9:82:41:ad:d6:da:ec:5f:0b:
d2:8e:f7:84:c7:84:31:51:5c:8f:3d:ee:76:73:44:
56:a8:b0:3e:8d:81:51:f4:08:fe:b8:7e:78:3b:fe:
5b:a3:7d:84:ef:8b:6a:20:67:e2:ad:b0:ee:10:47:
06:77:7a:a8:6e:2c:d2:7a:1b:07:81:3c:5c:71:4c:
a8:14:f0:53:0f:b7:be:06:d0:95:86:99:d6:81:d4:
ec:34:2b:fc:c9:f6:70:c7:01:55:9c:b8:a8:87:c4:
42:e0:f1:73:8e:06:12:88:07:81:1e:aa:a1:07:20:
c7:99:94:67:5d:de:65:fd:e2:fc:f1:bc:bb:0f:9c:
af:df:93:de:6d:bb:1e:9d:6b:5f:b4:83:c2:33:a7:
66:1e:c7:be:f8:07:34:93:77:3b:ce:4e:1b:58:21:
a3:62:97:98:6a:3d:bd:ad:87:e9:cd:0e:ff:89:d8:
8c:c7:e4:d3:61:37:50:9a:a8:94:29:8f:45:51:71:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E1:77:43:BF:38:77:0F:CC:17:57:66:6F:F1:3A:D3:6D:11:58:B3
X509v3 Authority Key Identifier:
keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f3:80:34:31:49:69:28:4f:b4:a8:65:ce:cf:c5:e3:73:3a:
10:f9:a1:ae:90:6c:70:0a:4b:43:df:3a:a9:c8:3c:a5:b3:a1:
ac:3c:0b:d3:d6:81:30:6f:bb:76:44:89:0c:e6:4e:33:6b:68:
fd:86:2c:01:b9:c1:e3:2c:b6:62:78:19:ca:2b:8a:04:03:00:
29:69:89:07:6c:98:b3:9b:dc:ec:27:15:a1:73:de:fa:a0:5a:
a5:06:c0:0f:82:11:39:32:00:37:73:48:5e:2a:8d:67:61:fe:
1d:36:79:3b:f1:a0:fc:12:1b:6a:ba:30:d7:bd:c1:e2:29:af:
42:67:63:3d:48:81:80:3e:77:c5:ec:ce:f6:be:a8:87:ed:15:
56:cc:45:76:61:de:e6:76:9f:5a:fb:4c:40:cb:1e:80:ce:82:
1b:90:2e:fc:ea:eb:2d:4b:10:33:ba:1b:81:98:ed:ca:b2:cb:
38:9f:78:af:40:ea:80:2a:da:9c:ee:f3:1a:53:36:9d:b8:c6:
ed:94:35:6c:e2:83:8b:42:96:41:b6:c4:c1:1c:9b:78:d9:57:
b2:5c:1a:5a:8e:a6:a6:78:e8:58:ae:f2:cf:9f:05:97:20:74:
0f:c8:2e:23:38:e1:63:22:21:6b:44:6d:ce:24:e4:05:d7:68:
9f:cd:3d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:11 2026 by rpki-client