This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
File: IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft (raw, json)
Hash identifier: wbL3Rw2XxHcIhP9Ctu1w+uWdxr5Z+B04LGhFkzpnLmo=
Subject key identifier: 52:AE:74:CF:23:07:1D:21:70:2E:66:80:FA:E0:39:BC:25:F4:61:E5
Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12
Certificate issuer: /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12
Certificate serial: 0705
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
Manifest number: 06FA
Signing time: Sat 10 Jan 2026 21:16:57 +0000
Manifest this update: Sat 10 Jan 2026 21:16:56 +0000
Manifest next update: Sat 17 Jan 2026 21:16:56 +0000
Files and hashes: 1: IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl (hash: MZg4JWHXnQhljaTMtBOa9691sUnfvOYY60VU6vNDFqM=)
2: 24F33D7877AF11EB8E972C66C4F9AE02.roa (hash: 4G6we2Th1FMc0knctpDnaHzpZ2DpvqNSVPvecBD6QV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl
rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 21:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914022F, serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12
Validity
Not Before: Jan 10 21:16:56 2026 GMT
Not After : Jan 17 21:16:56 2026 GMT
Subject: CN=6962c1c8-93d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:e3:d7:a2:cd:6b:4e:bf:7c:c9:7d:57:01:
ce:7b:a0:fb:72:94:d4:f1:3c:dc:d8:c6:af:c8:aa:
9c:13:ed:75:43:4e:33:a3:a7:14:fd:a4:80:c2:3b:
f7:ce:85:57:9e:72:02:4d:f9:20:be:1a:02:af:11:
a2:7e:2e:3e:54:f4:43:11:a5:5e:52:d0:02:3a:c9:
c9:7e:60:28:02:9a:65:e9:96:75:24:71:dc:ad:fc:
92:cd:7f:c3:50:55:32:c9:18:40:d0:72:ea:60:37:
c2:b1:08:45:1a:ce:b4:c9:a1:60:04:ba:56:d1:fc:
0a:2e:27:07:d7:c7:d1:0c:8e:4f:b3:7a:4d:43:d3:
ba:ff:1b:ea:e2:02:52:85:7d:76:b0:b7:e9:2d:33:
dc:3f:e0:94:c1:a2:89:73:f1:e5:06:17:ef:23:15:
ed:53:6a:60:14:9f:c3:bd:e3:11:a7:06:0b:af:b1:
5f:cd:65:3a:45:f0:e8:4d:f3:6c:8a:58:af:09:a1:
e0:4c:60:e7:be:28:9c:64:d4:bb:6c:25:cc:3b:84:
04:0f:80:b5:ec:c7:40:88:8e:b9:9f:11:83:b0:bf:
a4:e8:e5:4c:03:a6:03:5c:a7:4b:94:7c:55:c8:8a:
cd:16:a8:f6:c6:12:8f:93:5d:a8:14:ef:81:9f:ec:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AE:74:CF:23:07:1D:21:70:2E:66:80:FA:E0:39:BC:25:F4:61:E5
X509v3 Authority Key Identifier:
keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:65:a3:b2:aa:32:59:96:00:18:e6:3c:bc:07:10:6a:4e:8a:
aa:ba:06:a5:5a:30:79:77:2c:d0:ec:ea:5d:76:31:4b:44:5c:
74:2a:b5:1f:ac:6e:1c:fe:55:84:2d:6a:a3:91:61:5f:05:67:
ff:dc:58:c5:46:1d:c9:46:96:a9:d8:14:a2:4e:af:d2:5a:fc:
a1:67:a9:f1:df:73:bd:61:9b:a3:df:29:23:36:54:a1:91:eb:
3f:2e:7c:14:07:5f:72:bb:f6:78:72:1a:1f:2a:9b:38:6c:ee:
81:6b:78:62:28:ef:de:fd:31:0c:28:43:3e:ac:1e:42:fa:2d:
ed:d4:3e:74:98:2e:01:0d:2a:a5:ba:77:ea:da:d9:4f:89:ee:
3e:ff:13:b9:24:11:f2:82:9d:09:e0:20:ba:3e:c4:8a:05:ca:
4e:09:8a:4d:2a:fd:6e:aa:9d:fd:7f:72:76:a2:02:1a:a3:78:
73:dc:7e:91:0e:52:24:5c:ab:95:6c:e9:0a:61:32:e3:d0:5b:
83:e1:a0:59:df:a1:85:c5:14:c6:85:db:18:75:c5:ae:81:04:
7b:c9:6d:52:9a:7b:8f:9e:68:de:59:b4:79:21:64:74:cd:0a:
36:a7:a4:9b:75:f6:53:ca:82:46:92:45:31:88:9f:e1:1d:a1:
d9:80:cf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:21:31 2026 by rpki-client