This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json)
Hash identifier: 1aeekGBy5pM9Y74C9pk8fLTOf99rfnklMC+96YvPF8Q=
Subject key identifier: AE:E7:CA:83:F8:B3:A6:6F:36:64:AC:B6:D6:03:F7:C3:F2:98:59:48
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial: 03CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
Manifest number: 03BB
Signing time: Sat 24 Jan 2026 23:50:22 +0000
Manifest this update: Sat 24 Jan 2026 23:50:22 +0000
Manifest next update: Sat 31 Jan 2026 23:50:22 +0000
Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: z3tHPyEhiFIrBezlGP35JAjJJ1jO42CT/fDCmsxthhc=)
2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=)
3: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=)
4: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=)
5: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=)
6: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973 (0x3cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005
Validity
Not Before: Jan 24 23:50:22 2026 GMT
Not After : Jan 31 23:50:22 2026 GMT
Subject: CN=69755abe-4d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:da:39:f2:e7:23:60:43:10:60:51:49:3a:
89:27:0b:1c:2b:cd:41:54:36:72:7f:d2:7a:b8:34:
76:2c:2b:9e:91:04:64:68:0f:0b:58:de:85:5d:2c:
e9:5b:49:f8:bd:38:0d:c1:e5:d4:9b:b4:28:4c:fa:
6f:a5:de:65:a4:20:14:af:05:39:b5:43:dd:33:04:
73:0d:29:89:5d:6a:8c:66:b6:1c:99:f6:d1:56:76:
49:db:ed:56:35:f2:e3:58:62:da:73:02:01:62:ff:
b5:90:fa:bf:7d:c7:9a:5a:2b:c7:2c:57:3e:d0:20:
ce:7b:15:f4:ef:27:60:c1:37:df:71:1b:d0:17:3c:
a9:57:7a:34:44:a9:32:3b:10:f1:2a:2f:96:e2:11:
c8:d2:3a:25:ca:7c:ea:d6:7c:ac:7f:1b:ef:29:20:
0d:cf:f6:ed:b3:52:57:3c:a4:98:58:5b:46:c8:c0:
29:27:2d:9a:70:70:18:f7:59:f2:a1:b5:7d:d9:45:
b9:54:f5:50:57:52:1c:28:22:26:ea:52:13:2a:1c:
c0:ec:1d:a7:db:8a:8a:87:5e:f5:32:c4:0b:6f:cf:
da:a2:01:80:d2:0f:36:fe:0b:9b:fc:4c:00:6b:97:
13:ae:3a:61:fc:f9:f8:59:e4:d4:52:36:21:6c:d0:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E7:CA:83:F8:B3:A6:6F:36:64:AC:B6:D6:03:F7:C3:F2:98:59:48
X509v3 Authority Key Identifier:
keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:0c:06:62:ab:d4:f3:17:e6:e3:e8:98:5c:7b:57:ca:47:9c:
89:6d:3b:52:56:1f:df:b8:c7:b5:41:cd:47:35:07:0b:fb:12:
d6:a7:a2:7a:45:c8:c7:88:3b:9a:2e:12:91:c0:ea:2b:e4:76:
64:be:ea:1f:d7:78:51:4a:10:1a:09:fc:a6:03:68:54:bb:ad:
1c:73:68:e7:58:f9:43:9d:b4:47:c8:af:21:94:2b:ae:cd:94:
2c:8f:e1:99:b4:c0:e9:dc:63:17:9b:b7:fc:e9:ef:63:94:fd:
f4:23:b0:a8:a4:fc:11:b4:5f:36:0b:9d:3c:4f:ce:41:f3:cc:
19:59:29:cb:c2:74:82:05:d4:62:52:68:28:a8:dd:74:a7:98:
db:33:ef:41:0a:71:cc:c0:c4:bc:c9:07:91:1c:86:76:99:6f:
a1:67:e3:45:69:09:cd:78:9e:9f:e7:df:dd:f3:dd:9d:15:6b:
47:9c:a1:11:22:29:4d:5a:d0:61:2c:c7:0b:ab:54:16:d9:d2:
fe:6d:15:4f:61:49:c5:2b:14:da:5a:41:04:07:05:48:ea:94:
b5:38:c4:9e:37:00:74:fa:8e:f0:6d:e4:0b:ce:49:69:d0:2d:
35:a1:c0:5b:3a:9e:ab:48:3f:8d:49:31:46:be:21:dc:b3:7c:
96:05:96:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:34:27 2026 by rpki-client