This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json)
Hash identifier: flobsDkP/7xnTl3q1Iq/yp8oKMNV75iPB64SMjsgphA=
Subject key identifier: 32:CF:E6:0E:3C:71:95:69:EB:9A:2E:B1:EE:3B:75:A4:2E:2C:4C:E1
Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD
Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
Manifest number: 01AC
Signing time: Sun 25 Jan 2026 02:32:33 +0000
Manifest this update: Sun 25 Jan 2026 02:32:33 +0000
Manifest next update: Sun 01 Feb 2026 02:32:33 +0000
Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: L36vi25SVMwsm49+yy1b4bSOtwtbnh4pN5/dUZYje00=)
2: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: olVXu+2blIiQ/nPaKs9oAvL7LtQPo2noHIFDjFZB8b8=)
3: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: /Y8xFoBMkV8uPy89Axb0Y8yaa9CAWLFHVU01k7AfOCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl
rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD
Validity
Not Before: Jan 25 02:32:33 2026 GMT
Not After : Feb 1 02:32:33 2026 GMT
Subject: CN=697580c1-f06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e4:4f:ea:d4:e4:5c:e1:8d:cc:ca:74:05:b6:
f5:4d:9d:54:b2:31:f5:a9:88:50:25:f4:91:aa:71:
62:5f:c4:c1:17:03:bf:41:5d:a1:de:c4:c7:db:bd:
cf:44:a1:9c:a5:f2:33:ef:b4:57:a8:79:0e:8e:41:
2b:67:df:49:16:c3:1c:a7:05:a0:f3:5d:19:fb:79:
1d:41:97:3b:db:34:70:e8:2d:bc:24:98:f9:42:a6:
26:fa:de:ce:24:5d:45:ac:bf:88:7a:1d:29:66:8a:
12:a2:b0:e4:34:86:c5:e4:50:2c:5f:83:0a:10:b1:
2f:e7:dc:14:8a:ff:2e:43:ad:7f:96:c7:b8:dd:f8:
f0:31:eb:89:25:ac:83:ac:96:26:a6:cb:9e:23:b3:
ec:8e:ca:33:69:cf:14:7c:03:e5:f2:10:37:1a:54:
47:c0:81:0e:4c:97:74:4d:da:2d:b2:4e:bb:69:66:
c6:1f:2b:a5:91:46:bb:cb:26:04:11:2c:53:1e:2c:
16:34:d3:7b:d0:b0:bd:61:25:c4:fd:8c:a1:e7:54:
c8:f1:4f:65:d0:eb:96:0f:ac:a6:9b:3b:17:35:ab:
c1:45:bf:2d:b5:69:42:b4:13:7f:7a:a6:54:fa:53:
25:d2:a5:41:0b:42:6e:63:3b:6d:94:79:b4:49:20:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CF:E6:0E:3C:71:95:69:EB:9A:2E:B1:EE:3B:75:A4:2E:2C:4C:E1
X509v3 Authority Key Identifier:
keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:53:eb:f3:c5:f8:0b:11:8a:bc:5a:63:4e:a5:1c:17:7f:5c:
86:34:9e:41:2e:c1:37:ae:f8:c3:e3:a9:98:cd:60:ce:5a:6b:
b1:e2:65:71:5b:6f:e4:57:f9:06:0a:a8:07:a3:0c:d6:54:6a:
6b:a9:56:be:06:94:6b:0b:92:c9:76:5b:d9:0f:0e:f7:a7:50:
d4:a2:e2:79:90:70:a3:f3:5b:a7:36:60:48:d7:35:10:9f:b0:
d6:ad:ca:95:f7:57:10:b8:50:2a:46:82:a4:a2:77:e9:ff:37:
3b:46:a5:3d:43:5c:1f:bf:07:62:92:90:07:d8:6d:a0:b5:01:
16:95:c2:8a:bf:28:65:a4:e4:d4:05:b6:4d:6f:a7:10:e4:51:
cc:64:70:23:f7:90:35:b5:65:20:b4:6c:1a:69:cb:f1:38:db:
ab:67:53:9f:35:6b:f9:4f:92:ff:66:b1:03:7d:5b:7e:82:49:
8e:11:ed:13:44:95:d6:88:be:3e:ba:9b:ca:79:4d:bd:06:27:
11:fb:05:bb:e9:7e:28:ab:48:bc:e5:2e:97:ad:76:7d:34:7f:
4b:7f:4e:d1:dd:5b:f6:64:2b:69:cb:de:c4:ff:13:11:5e:f0:
db:ec:5e:63:8d:87:e7:50:db:c8:91:62:87:a2:20:0e:33:72:
07:de:ec:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw
RDQ5MTJFREQwHhcNMjYwMTI1MDIzMjMzWhcNMjYwMjAxMDIzMjMzWjAYMRYwFAYD
VQQDDA02OTc1ODBjMS1mMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3uRP6tTkXOGNzMp0Bbb1TZ1UsjH1qYhQJfSRqnFiX8TBFwO/QV2h3sTH273P
RKGcpfIz77RXqHkOjkErZ99JFsMcpwWg810Z+3kdQZc72zRw6C28JJj5QqYm+t7O
JF1FrL+Ieh0pZooSorDkNIbF5FAsX4MKELEv59wUiv8uQ61/lse43fjwMeuJJayD
rJYmpsueI7Psjsozac8UfAPl8hA3GlRHwIEOTJd0Tdotsk67aWbGHyulkUa7yyYE
ESxTHiwWNNN70LC9YSXE/Yyh51TI8U9l0OuWD6ymmzsXNavBRb8ttWlCtBN/eqZU
+lMl0qVBC0JuYzttlHm0SSB1LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLP5g48
cZVp65ouse47daQuLEzhMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE
ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM
dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx
Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCAU+vzxfgLEYq8WmNOpRwXf1yGNJ5BLsE3rvjD46mYzWDOWmux4mVx
W2/kV/kGCqgHowzWVGprqVa+BpRrC5LJdlvZDw73p1DUouJ5kHCj81unNmBI1zUQ
n7DWrcqV91cQuFAqRoKkonfp/zc7RqU9Q1wfvwdikpAH2G2gtQEWlcKKvyhlpOTU
BbZNb6cQ5FHMZHAj95A1tWUgtGwaacvxONurZ1OfNWv5T5L/ZrEDfVt+gkmOEe0T
RJXWiL4+upvKeU29BicR+wW76X4oq0i85S6XrXZ9NH9Lf07R3Vv2ZCtpy97E/xMR
XvDb7F5jjYfnUNvIkWKHoiAOM3IH3uwU
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:16 2026 by rpki-client