This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
File: Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json)
Hash identifier: OtNo4b3QL4+lchR3AuwIIQiB9sDncKfk4HfmA/JBxtw=
Subject key identifier: 03:DE:42:2D:CB:B2:52:53:75:8C:4A:F2:C4:C6:AD:9E:CC:11:AF:83
Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
Certificate issuer: /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
Manifest number: 0106
Signing time: Sun 25 Jan 2026 04:19:32 +0000
Manifest this update: Sun 25 Jan 2026 04:19:32 +0000
Manifest next update: Sun 01 Feb 2026 04:19:32 +0000
Files and hashes: 1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: JbJD7DY97BLluvBnmtlOgth0YeudALLGqqzegCv78Lc=)
2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 1z2L3hbnupa67ptFJmJyr3scDytw356F08ze+2XPBpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl
rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9B89, serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651
Validity
Not Before: Jan 25 04:19:32 2026 GMT
Not After : Feb 1 04:19:32 2026 GMT
Subject: CN=697599d4-7135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:07:2e:53:bc:2b:d5:66:57:12:1e:db:8b:
04:27:1f:a4:7c:7c:13:05:48:77:f0:d9:2c:59:a9:
c3:54:90:51:7c:cb:78:11:da:75:58:17:9f:1e:a7:
9a:0b:41:45:3d:fe:a4:a2:91:3d:6e:3a:05:06:81:
39:e5:e1:40:a4:cf:9f:47:b4:9d:88:06:70:3a:41:
4c:81:2d:08:21:ab:b0:31:85:34:85:4d:e9:41:97:
67:83:34:fe:5c:89:0d:f2:df:c4:7d:77:cb:a9:89:
b2:c1:cb:7f:0b:ab:c1:17:5e:ff:2d:3f:be:19:9a:
dc:97:57:72:75:a4:fb:39:0e:3d:41:ed:a1:47:2b:
9c:3f:60:b8:d7:3d:47:9a:89:b0:c1:01:03:15:49:
bb:ea:d8:25:12:6d:70:6d:67:e7:39:8d:48:04:64:
a8:60:3c:57:a5:b4:0b:8d:d5:bc:0f:54:79:e5:8e:
c8:50:a8:55:de:ea:09:5b:e5:93:1e:cd:89:f2:6f:
73:18:78:67:d0:7a:82:d7:eb:e3:0d:84:43:c5:fb:
b6:ee:ec:51:78:ef:92:86:52:b9:19:b8:d5:ab:2f:
9d:a0:58:86:60:2f:53:1e:32:c1:34:d8:97:6a:1a:
c8:1d:88:6e:03:10:c6:7f:e1:bb:3d:93:ee:ca:41:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DE:42:2D:CB:B2:52:53:75:8C:4A:F2:C4:C6:AD:9E:CC:11:AF:83
X509v3 Authority Key Identifier:
keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3d:08:e8:f3:9c:54:a8:73:5f:d7:d3:01:ca:4d:6b:f2:e2:
e4:1a:91:ca:b0:32:55:02:04:55:03:7c:d6:a1:96:bc:8d:81:
39:29:97:d8:8d:dc:99:36:eb:29:53:4b:f4:b2:a5:a0:8f:f1:
6b:61:f5:a8:a9:96:63:d7:48:8d:ad:7f:a3:3d:ce:5d:d9:29:
81:4b:7c:01:59:23:bf:f2:fe:6b:8f:7b:70:46:c6:71:63:23:
31:38:95:41:14:2a:22:6f:b9:9d:b6:05:94:5d:47:2f:39:fc:
92:92:47:84:f9:c9:68:5d:d7:30:f9:f8:09:0e:f4:1f:4f:12:
2a:a5:6b:9a:c9:1a:16:7c:09:de:39:bd:2a:58:f1:d1:99:94:
f6:02:85:e9:2d:a7:12:6f:26:80:08:67:e3:e6:15:a3:10:14:
b8:74:2f:78:18:99:1e:22:12:36:25:9b:57:5a:d5:00:d7:0a:
18:35:18:30:70:0f:33:96:9b:f0:9c:ab:0c:73:5d:01:63:1e:
8a:bd:91:35:8f:18:24:c8:92:fc:9b:2d:f5:e7:cc:98:0e:4d:
86:63:b4:05:95:e5:c2:88:54:97:25:80:0f:60:35:40:19:a8:
10:49:7d:09:3a:0c:b5:67:0f:35:72:f7:be:3c:41:aa:38:db:
c8:a9:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:31:23 2026 by rpki-client