This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json)
Hash identifier: hw3HrGemCAHlUzYBnVNPXm3p7iWAZs/64kM89nf3QMA=
Subject key identifier: 32:2A:5E:0A:6D:F6:3A:20:05:43:A8:14:0C:D0:DA:94:B8:4B:4F:19
Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Certificate serial: 087F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
Manifest number: 086B
Signing time: Tue 06 Jan 2026 20:04:43 +0000
Manifest this update: Tue 06 Jan 2026 20:04:42 +0000
Manifest next update: Tue 13 Jan 2026 20:04:42 +0000
Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: Hs0yUJ7lWRfZcVYPrmAmztLkIRU/ejUYV1Lh07E+2+c=)
2: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: H1FuH2ZNH03uYQtNzb3TWzIjcp7o0St6uGtbs7VdGro=)
3: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: tSePHI7aLjEFlYS6xw+YOLrRBy4JYZe6TL89trJbrgc=)
4: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: DOctWr/OPgqaZuQo/Vg8BKPX28KWmuANahI8jBAfLDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Jan 2026 20:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Validity
Not Before: Jan 6 20:04:42 2026 GMT
Not After : Jan 13 20:04:42 2026 GMT
Subject: CN=695d6adb-734f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:fd:fe:25:42:bc:ea:80:81:fc:31:2f:38:
18:83:f4:c2:da:45:b6:16:41:c9:a9:12:f0:54:43:
fb:e0:c2:1b:31:5b:49:c0:30:28:33:54:7b:b9:d6:
e5:85:c5:43:9c:1c:df:33:77:62:fa:a9:91:f2:ae:
dd:9d:aa:d2:9e:83:a3:80:35:49:6e:aa:5f:64:3b:
8e:88:98:3b:8a:86:dd:d1:c5:1f:b7:50:f0:d9:05:
3c:92:88:44:87:84:07:7b:0f:66:12:76:c0:b7:52:
a1:69:4a:09:92:88:11:79:37:e5:80:5f:ca:de:4b:
35:21:d2:3e:8f:aa:4b:e8:8b:e8:64:f1:7b:dd:c3:
a8:82:08:11:95:1c:7b:34:80:14:b5:91:81:42:96:
ff:63:77:2d:de:41:ae:3d:9e:ec:32:8a:66:1b:f1:
1e:0b:d2:e9:b6:f9:91:ba:08:06:e9:76:54:4f:4f:
d0:5a:e0:e2:a6:db:e9:1d:ec:3f:d2:2d:8b:56:f0:
b2:2f:65:cc:ab:66:2f:90:eb:2e:50:6e:a1:60:f5:
1f:2f:c0:48:71:7b:86:e4:4d:6c:9a:2e:d0:92:89:
13:41:0d:18:b3:fb:76:26:b7:4b:2c:12:1e:3b:6b:
7b:93:79:9a:ff:a2:08:b1:16:07:e0:36:2c:0c:d0:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2A:5E:0A:6D:F6:3A:20:05:43:A8:14:0C:D0:DA:94:B8:4B:4F:19
X509v3 Authority Key Identifier:
keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:b2:60:46:69:a3:0d:00:c5:72:09:29:ad:4b:2a:1e:27:a8:
af:4d:20:b5:ce:17:df:82:8b:80:ec:0a:bb:6b:1c:af:f2:a3:
7f:18:48:c5:7c:a4:63:b7:52:af:1e:81:d2:c8:e3:d4:32:1b:
cc:05:a4:99:f7:84:1c:de:17:d9:d4:f2:3f:a4:7b:19:55:58:
dc:a0:2a:9b:4d:63:91:51:d1:26:41:cc:27:42:7b:52:8b:4a:
db:cd:9f:35:fb:18:ff:15:65:a6:85:1f:68:d3:69:22:5e:e1:
35:86:56:29:c8:6d:09:6e:29:cc:d7:e7:3e:88:2a:c8:40:f6:
12:5d:07:9f:b8:0e:7c:40:41:1e:58:46:c8:4c:8f:70:82:1a:
59:6b:06:bc:e5:50:81:b7:09:50:33:5f:56:b4:aa:8e:dc:8d:
0f:42:1d:54:c5:83:34:c5:96:af:f4:67:ba:36:4d:3d:3d:f9:
19:ff:79:81:65:18:55:b2:45:ec:cf:08:9c:47:24:a5:46:ae:
41:ae:c1:9f:2a:a2:13:78:aa:9b:51:56:b8:d4:a6:26:3a:63:
25:9c:32:dd:cf:55:91:78:69:4b:dd:19:6e:2a:4f:aa:0b:2f:
96:34:22:32:6c:58:a6:62:75:ec:5d:d3:ed:d6:e7:79:1d:a3:
ef:dd:4e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 22:13:19 2026 by rpki-client