This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json)
Hash identifier: ZBjD6yIGeWkyKuFbphjCsyhnXS9hdZ2E5n4BpAacexU=
Subject key identifier: 04:73:30:D7:63:5B:8E:F6:84:8B:7B:DD:FF:7E:DE:79:26:99:C4:56
Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63
Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
Certificate serial: 025D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
Manifest number: 024F
Signing time: Sun 25 Jan 2026 01:03:15 +0000
Manifest this update: Sun 25 Jan 2026 01:03:14 +0000
Manifest next update: Sun 01 Feb 2026 01:03:14 +0000
Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: WVSEKPzEWNFZ/f2Mqr1W2cYcEO2KH6Efq3RPZ8Rx9CM=)
2: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Ecx2uEYsiUTMI1pp2hzwrKj0DYLLvVQ4KuzNnfcJWcM=)
3: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: vCKD+CzoArcalyziR+d7Ov1DlN61zdE8Qt99sD5HF3I=)
4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Z3Pgsl7gnEpPUpQRogkAmZeZ95NlxutDljfa11ERFDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl
rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
Validity
Not Before: Jan 25 01:03:14 2026 GMT
Not After : Feb 1 01:03:14 2026 GMT
Subject: CN=69756bd2-d8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:a4:f9:d7:92:63:78:0d:59:48:ff:fa:0c:
36:82:fc:35:75:7b:2b:5b:f0:73:de:e2:e9:13:ba:
23:57:32:f8:08:47:3c:06:a3:43:77:bf:90:05:a4:
a1:7a:96:ac:d0:91:9c:10:9b:e4:f7:dc:f1:9b:0c:
8d:43:52:ae:55:ba:32:8d:95:2f:1b:83:d7:a4:df:
b7:8a:1c:65:a3:d8:6b:cf:fb:61:d7:1f:8e:d1:1d:
51:77:fc:6c:24:7c:ce:9b:e5:55:29:d0:63:56:a1:
a3:76:96:c1:ba:57:02:2b:e0:45:f1:c7:4a:23:3b:
44:5f:05:4b:6f:1a:5a:2a:47:ee:21:96:94:25:d1:
2a:e4:61:0d:79:72:4c:a5:e7:e9:0d:c4:d5:36:3e:
7f:bc:7d:e0:00:e3:93:3e:38:99:8d:f5:eb:81:cd:
e8:75:12:af:86:b9:96:36:a4:93:3a:bb:76:e7:0d:
08:45:4d:1d:64:e2:a1:08:73:8a:af:b1:e0:b6:17:
12:d3:2c:23:a7:15:aa:23:73:8c:a7:2a:4b:a9:cd:
40:65:df:21:ab:99:5a:c7:b7:7c:94:ea:9c:6c:cf:
c1:3c:c7:15:e7:0d:eb:b9:6c:2c:3c:e0:d9:a8:36:
fd:86:6f:dc:70:4e:d8:b9:b9:ee:4c:0f:b0:67:e8:
fd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:73:30:D7:63:5B:8E:F6:84:8B:7B:DD:FF:7E:DE:79:26:99:C4:56
X509v3 Authority Key Identifier:
keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:03:00:68:cc:45:7f:b4:a9:36:5a:14:79:83:f3:19:b9:b5:
1c:07:32:64:c2:95:c0:9d:ba:81:18:a6:ef:6a:ce:0d:70:c9:
a7:e8:ff:92:e0:34:a5:6e:77:62:39:9a:6b:3a:9d:5f:4d:f9:
fb:64:9e:31:1b:ab:24:01:bd:e8:47:84:2e:50:c5:be:33:50:
34:fd:5f:f8:5d:83:ec:a3:8a:be:64:8a:2e:d7:49:1c:8b:f7:
8a:80:4f:9d:66:fc:ae:92:24:54:16:92:f2:4e:74:80:0c:4f:
2c:29:08:ef:5f:fe:bd:51:dc:d0:4e:b8:2b:8d:0d:9a:52:cb:
f9:99:2c:d2:1c:6b:91:b1:dd:6c:9f:89:ab:04:3e:00:d7:3a:
86:1d:38:6b:55:d7:68:b6:cb:e7:0d:cf:dd:22:dc:85:1d:9c:
7b:28:1e:a5:c8:45:7c:22:84:35:1f:3e:82:65:e7:72:fd:a7:
c9:5a:f4:ad:9e:6a:b1:d8:74:76:57:e5:dd:dd:f2:4e:03:e8:
b7:c1:27:59:ca:3f:9d:f8:59:6d:7b:a6:98:04:43:6b:4b:a9:
21:21:21:0f:0e:f4:f8:75:86:51:c1:9e:a9:d5:23:b5:5c:07:
32:fa:33:f9:f7:d8:80:0c:17:c7:0f:cd:2f:06:1c:1b:6c:e8:
52:2a:e9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:23 2026 by rpki-client