This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft
File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json)
Hash identifier: 8L5fFJCcVStivN2VKZSBNuboA9NguJYciD0b5nNjahA=
Subject key identifier: 9C:FF:F8:C4:8B:E4:2E:9E:BE:19:89:8A:8F:03:F7:67:52:DB:8C:42
Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43
Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343
Certificate serial: 352C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft
Manifest number: 4844
Signing time: Sat 24 Jan 2026 14:20:40 +0000
Manifest this update: Sat 24 Jan 2026 14:20:40 +0000
Manifest next update: Sat 31 Jan 2026 14:20:40 +0000
Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: 15nuL2x+TgiLKwa88xoTjTmIWhfT6Eb2mrQig4Xk0Tg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13612 (0x352c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343
Validity
Not Before: Jan 24 14:20:40 2026 GMT
Not After : Jan 31 14:20:40 2026 GMT
Subject: CN=6974d538-8ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:96:db:cf:1b:31:7e:e0:0f:f8:7b:26:17:
d4:2d:a4:a8:fc:07:81:4e:06:b2:15:a2:37:ee:4c:
4d:77:e8:51:2c:23:6e:5c:36:48:68:6e:c6:98:3e:
9d:e8:dd:66:b7:ac:e9:00:67:cd:c9:7d:e7:8c:71:
3e:15:e4:8b:d3:28:30:42:a7:a3:c2:40:c8:2a:f3:
5d:9b:00:8d:e3:df:a5:ce:fa:6f:7d:b7:b5:a6:98:
fe:f4:3d:bd:f6:2b:a8:b1:a9:7d:2c:e2:2a:36:c8:
38:a9:fb:0f:d9:cf:3e:1c:b2:d9:c8:fb:ee:c3:21:
fb:55:9a:91:b8:1e:7d:bf:cd:9a:af:8f:55:8d:a0:
0b:96:3d:b6:17:cc:4b:0e:9f:49:53:88:da:ec:0b:
0d:69:ef:e4:56:6a:4e:b6:64:de:15:0a:41:db:0b:
5f:89:10:f5:1f:cb:30:7a:5f:80:14:c2:f7:4a:59:
0e:72:98:2e:11:cb:24:33:3c:4d:a1:c3:1f:c5:bf:
9a:12:cf:45:50:27:16:00:2c:6a:d2:42:c2:d5:0a:
7c:08:6a:0f:1e:0c:a5:e4:fd:e9:2f:d8:c0:4a:e7:
c1:ec:f6:1d:e7:8f:e0:61:93:d4:55:e4:69:79:af:
3b:37:b6:f7:ba:19:ab:50:2b:ac:11:a7:31:a9:a2:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FF:F8:C4:8B:E4:2E:9E:BE:19:89:8A:8F:03:F7:67:52:DB:8C:42
X509v3 Authority Key Identifier:
keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:86:99:1f:13:91:b2:ea:d4:53:31:72:fa:40:0b:85:ad:2d:
ac:fb:65:6d:e5:b2:70:f6:7c:2b:13:cd:1a:40:8a:e7:13:68:
35:56:fc:64:c2:ae:8a:0b:30:ef:e7:f5:72:98:c6:42:62:e9:
1c:e0:54:68:d8:8d:d7:3d:7d:fc:46:7e:18:3c:24:de:2a:7d:
50:81:0d:ae:52:40:17:29:88:db:c0:10:58:65:b4:31:05:39:
9c:4d:66:75:d8:85:2f:e2:a6:13:1e:e2:08:5b:26:cc:31:12:
eb:bb:ee:cf:ae:e6:35:a1:d7:ca:1a:71:f0:64:eb:a9:cc:c0:
67:1a:53:00:a3:e9:57:8f:71:66:56:b6:68:90:d4:9e:fa:8e:
2c:58:9d:be:4b:45:55:f9:05:ff:8e:74:5b:a4:e4:9b:f0:d1:
71:d1:7c:93:5c:5f:5c:4c:e4:17:6d:ed:6a:41:89:6b:95:af:
bd:21:a2:1f:f9:2f:94:81:e0:45:e7:cb:ee:83:9c:f1:1b:f0:
22:52:57:50:16:1f:ea:e3:f1:dd:7f:7b:23:12:c6:ce:6b:99:
43:69:e1:d6:d0:3d:c6:47:b8:c9:d6:10:30:54:9e:c3:0a:2f:
e0:28:da:d6:4f:0a:2c:e6:c2:31:2f:82:9a:e7:7b:97:be:7c:
47:b6:48:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:09:33 2026 by rpki-client