This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft
File: iBzVaxmrfMJiYzdmnqtzClWnLLY.mft (raw, json)
Hash identifier: 91hkIB17F5yHysRYrv1VWEq8pJ5tAbn1FxQ5mnFzrUQ=
Subject key identifier: D7:0E:B7:20:6F:4F:C4:B4:60:DD:F6:69:E9:B4:41:4D:D4:9C:CA:B7
Authority key identifier: 88:1C:D5:6B:19:AB:7C:C2:62:63:37:66:9E:AB:73:0A:55:A7:2C:B6
Certificate issuer: /CN=A91ED9F9/serialNumber=881CD56B19AB7CC2626337669EAB730A55A72CB6
Certificate serial: 0173
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft
Manifest number: 016F
Signing time: Sun 25 Jan 2026 03:10:28 +0000
Manifest this update: Sun 25 Jan 2026 03:10:27 +0000
Manifest next update: Sun 01 Feb 2026 03:10:27 +0000
Files and hashes: 1: iBzVaxmrfMJiYzdmnqtzClWnLLY.crl (hash: 3og/PF0t3ARkoURwtBv1DLsTlJM5pu3ZLZu2igyMhB4=)
2: D714E00CB26F11EFB2BFFC58C4F9AE02.roa (hash: fbK8JApyPVI7CqfBV4idqbGNutPDQ+/1nnEJoajk5Ao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.crl
rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED9F9, serialNumber=881CD56B19AB7CC2626337669EAB730A55A72CB6
Validity
Not Before: Jan 25 03:10:27 2026 GMT
Not After : Feb 1 03:10:27 2026 GMT
Subject: CN=697589a4-1c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:37:b7:f0:a6:f6:15:73:95:62:c4:b9:5a:
99:7e:0c:ec:15:ff:c0:38:91:92:9f:d1:0a:2f:89:
b8:64:65:3e:47:c7:3e:76:d8:04:f9:4e:22:96:dc:
87:e3:a9:a8:46:9a:1c:a9:1e:2c:31:e4:a0:50:b3:
a1:64:76:b1:dc:d6:89:6c:69:25:d9:a0:bb:a2:36:
08:44:2e:2b:91:8e:71:8f:45:52:ec:6a:45:cb:96:
d0:f4:2e:d4:bb:49:d3:38:a9:ab:23:a1:eb:04:95:
9e:0f:67:87:36:a7:fb:be:c7:04:f9:99:01:19:72:
9e:99:e1:ee:74:b2:c9:71:38:3c:39:a2:b3:d7:c5:
e1:d3:6f:23:fa:a9:45:be:61:6d:86:0e:3b:da:8d:
fa:1c:50:fe:33:85:52:0b:88:76:e0:7c:3c:e8:a3:
a2:cc:b4:0a:31:46:c1:8d:12:8d:43:b9:34:b1:f5:
7f:41:72:f4:b4:67:15:37:3a:6d:58:4c:bf:79:30:
3c:ee:77:1d:8f:61:56:17:81:dd:59:9d:31:05:db:
94:5e:49:1b:86:d1:a5:c8:df:34:5d:18:aa:b4:67:
48:cf:bf:a0:6e:43:ce:31:2a:b4:88:c2:58:56:9b:
97:f4:00:cd:9a:e8:90:4a:c3:68:46:28:ee:07:df:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0E:B7:20:6F:4F:C4:B4:60:DD:F6:69:E9:B4:41:4D:D4:9C:CA:B7
X509v3 Authority Key Identifier:
keyid:88:1C:D5:6B:19:AB:7C:C2:62:63:37:66:9E:AB:73:0A:55:A7:2C:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:9e:0e:ec:d6:fe:6c:e3:8d:99:13:d0:7c:c8:80:68:5e:d8:
a3:f3:a7:8d:95:1e:31:61:dc:3e:95:d0:30:5c:33:c4:9f:35:
44:33:12:17:e9:30:e2:e5:60:2a:56:f4:19:e9:e0:ed:a3:36:
89:b6:91:ef:8d:08:1c:1d:17:80:9e:04:06:6e:b5:e2:5f:dc:
bd:b8:23:55:ca:05:20:62:2f:9c:50:c1:c6:8b:d1:29:41:b4:
7e:b5:46:06:6b:ee:da:b6:ec:07:df:5b:06:dd:3f:81:15:3f:
f0:49:8c:9a:22:65:12:54:e4:57:c9:72:f0:a1:26:2e:64:c0:
b3:27:6f:ba:73:28:ca:fe:36:4b:e3:0d:fc:34:29:c4:e1:9c:
9e:7d:13:1e:35:6e:ed:a5:62:77:e1:4b:40:b3:30:ec:98:0f:
15:b1:20:f7:14:a9:63:e5:26:b9:5e:3f:0c:4d:eb:98:c9:43:
d6:0e:02:06:6a:37:d2:a7:ed:9c:a1:1b:d8:7d:aa:f9:80:c5:
69:e4:81:1a:4b:db:7d:db:c3:5c:7f:c5:64:32:40:8c:45:cc:
92:9c:ec:aa:67:b2:d2:14:08:aa:9d:68:fc:33:b5:5f:6b:2a:
20:62:b9:20:0a:27:92:55:a3:20:14:b9:99:76:c8:d3:df:ac:
19:47:bd:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ5RjkxMTAvBgNVBAUTKDg4MUNENTZCMTlBQjdDQzI2MjYzMzc2NjlFQUI3MzBB
NTVBNzJDQjYwHhcNMjYwMTI1MDMxMDI3WhcNMjYwMjAxMDMxMDI3WjAYMRYwFAYD
VQQDDA02OTc1ODlhNC0xYzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzGc3t/Cm9hVzlWLEuVqZfgzsFf/AOJGSn9EKL4m4ZGU+R8c+dtgE+U4iltyH
46moRpocqR4sMeSgULOhZHax3NaJbGkl2aC7ojYIRC4rkY5xj0VS7GpFy5bQ9C7U
u0nTOKmrI6HrBJWeD2eHNqf7vscE+ZkBGXKemeHudLLJcTg8OaKz18Xh028j+qlF
vmFthg472o36HFD+M4VSC4h24Hw86KOizLQKMUbBjRKNQ7k0sfV/QXL0tGcVNzpt
WEy/eTA87ncdj2FWF4HdWZ0xBduUXkkbhtGlyN80XRiqtGdIz7+gbkPOMSq0iMJY
VpuX9ADNmuiQSsNoRijuB9/3SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcOtyBv
T8S0YN32aem0QU3UnMq3MB8GA1UdIwQYMBaAFIgc1WsZq3zCYmM3Zp6rcwpVpyy2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS81RjM3OURCMEM5
NTIxMUVFQjdBRERENEVDNEY5QUUwMi9pQnpWYXhtcmZNSmlZemRtbnF0ekNsV25M
TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lCelZheG1yZk1KaVl6ZG1ucXR6Q2xXbkxMWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDlGOS81RjM3OURCMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9pQnpWYXhtcmZN
SmlZemRtbnF0ekNsV25MTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRng7s1v5s442ZE9B8yIBoXtij86eNlR4xYdw+ldAwXDPEnzVEMxIX
6TDi5WAqVvQZ6eDtozaJtpHvjQgcHReAngQGbrXiX9y9uCNVygUgYi+cUMHGi9Ep
QbR+tUYGa+7atuwH31sG3T+BFT/wSYyaImUSVORXyXLwoSYuZMCzJ2+6cyjK/jZL
4w38NCnE4ZyefRMeNW7tpWJ34UtAszDsmA8VsSD3FKlj5Sa5Xj8MTeuYyUPWDgIG
ajfSp+2coRvYfar5gMVp5IEaS9t928Ncf8VkMkCMRcySnOyqZ7LSFAiqnWj8M7Vf
ayogYrkgCieSVaMgFLmZdsjT36wZR71s
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:35:53 2026 by rpki-client