This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json)
Hash identifier: BjmnnTPISiR5AVAaXxBnm3ygSfn1trHLVfTjlBDKlS8=
Subject key identifier: 6C:8D:A3:65:6B:07:20:B6:D5:6F:24:61:AA:32:4D:4B:C4:8D:EE:1D
Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB
Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB
Certificate serial: 1974
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
Manifest number: 1968
Signing time: Sat 24 Jan 2026 16:11:34 +0000
Manifest this update: Sat 24 Jan 2026 16:11:33 +0000
Manifest next update: Sat 31 Jan 2026 16:11:33 +0000
Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: TpKvo7dT8QBOS8oYRermuMg2h1j6LP1Ypa09IjqSB04=)
2: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: x3Si4KMD2wvo6rCmh6bPANGnveohQUAF1yIi2AXTiDA=)
3: D421D958881611E78B9B0850C4F9AE02.roa (hash: jwMU1HqTvqxMmK/7tE3BOcmdI4jJyKnBQ4irQO6dgGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl
rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6516 (0x1974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB
Validity
Not Before: Jan 24 16:11:33 2026 GMT
Not After : Jan 31 16:11:33 2026 GMT
Subject: CN=6974ef36-8d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:d1:f7:06:e7:c6:bf:61:0c:9c:0d:cd:2d:
3e:ba:4f:5e:bb:b6:5d:ef:1f:7b:c2:50:b4:7f:a6:
d9:7c:53:9b:8e:92:5e:6f:39:6b:6f:ba:90:8b:a8:
f5:99:91:52:b0:4f:dd:34:7a:de:4b:3b:f5:53:7b:
57:d3:61:d1:4e:6a:de:b2:97:ae:ec:be:ad:3c:02:
86:5b:3e:01:66:95:76:64:df:30:9e:2d:e8:59:4d:
b7:82:ea:34:f3:a3:28:e8:ee:84:2c:04:89:0d:dc:
55:22:2a:ad:9e:68:3d:7c:ca:c9:b9:8d:8f:05:c2:
9c:5e:a9:3a:18:69:1f:c0:d1:0a:c4:3d:b4:9e:4d:
f9:47:e3:a5:60:a0:8a:28:da:09:da:c7:1a:5f:e7:
56:23:fa:5e:c0:6f:cc:fa:00:11:33:a3:c4:b9:38:
aa:30:43:a6:ce:84:43:9b:87:61:8e:50:aa:a1:33:
14:ba:42:17:af:93:bb:c9:3d:16:59:a8:ce:2b:e1:
ab:4e:73:9d:bd:bb:69:6f:64:ec:14:5c:76:6b:22:
d7:17:df:89:d8:97:44:37:7d:c3:90:96:2d:88:66:
18:75:ca:a7:35:ac:11:f7:2d:4f:ff:9d:92:b8:a9:
70:6a:cf:f7:c0:32:6a:56:0e:84:6a:fb:41:44:e1:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8D:A3:65:6B:07:20:B6:D5:6F:24:61:AA:32:4D:4B:C4:8D:EE:1D
X509v3 Authority Key Identifier:
keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:79:52:78:03:54:e8:ef:09:cc:4b:08:99:f4:85:51:32:83:
6a:d1:58:85:65:86:9c:4e:cf:9a:59:82:c3:cb:54:a6:2b:2a:
88:3b:11:98:9f:d9:06:94:09:b7:5c:a2:f9:04:be:88:0c:6e:
e0:ee:09:f6:90:37:ee:82:3f:22:1d:e8:38:be:0e:6f:56:9e:
3e:50:ff:d3:c3:87:0d:34:e5:af:89:b8:1d:75:ed:fd:7c:63:
fb:0a:55:f1:27:57:fc:11:ae:c8:76:5d:f7:b0:03:96:7d:b1:
bb:7f:43:ed:e3:8f:db:07:98:af:23:3f:05:9d:37:43:51:b4:
ce:98:c2:48:a4:f0:bd:37:e4:ea:e8:8d:e4:eb:5d:c4:c5:89:
30:01:f3:59:5a:7b:1f:63:43:bf:bf:62:dc:87:e5:4d:f8:17:
3c:10:55:aa:38:c7:bd:7c:58:78:d5:49:e9:32:c3:5d:fa:e2:
83:8d:2d:de:00:ef:1f:e0:73:83:7c:ba:55:a3:58:e4:ca:a3:
11:b5:6a:3c:bd:59:fc:ea:84:45:b4:ae:49:97:16:6b:0f:a0:
01:eb:0e:61:bf:e9:4f:ce:a7:9b:7a:99:46:46:d6:01:1e:9d:
80:9d:e7:02:7f:9c:49:41:25:15:ed:97:b2:b3:4f:1d:3d:38:
37:04:08:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:16:57 2026 by rpki-client