This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json)
Hash identifier: xWpIQ1/vXc8GiHUMTStl6yVQeO2bzF9owaWZf2YfH+E=
Subject key identifier: 96:A6:3A:9C:70:DB:DB:64:21:CE:57:07:ED:06:49:21:67:9C:30:62
Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Certificate serial: 0881
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
Manifest number: 086D
Signing time: Sat 10 Jan 2026 20:02:05 +0000
Manifest this update: Sat 10 Jan 2026 20:02:05 +0000
Manifest next update: Sat 17 Jan 2026 20:02:05 +0000
Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: xCHtZ2oJ4ZFCJCM/2aQLyAdetTyR6sEykjRKqwwgIy8=)
2: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: tSePHI7aLjEFlYS6xw+YOLrRBy4JYZe6TL89trJbrgc=)
3: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: DOctWr/OPgqaZuQo/Vg8BKPX28KWmuANahI8jBAfLDc=)
4: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: H1FuH2ZNH03uYQtNzb3TWzIjcp7o0St6uGtbs7VdGro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 20:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177 (0x881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Validity
Not Before: Jan 10 20:02:05 2026 GMT
Not After : Jan 17 20:02:05 2026 GMT
Subject: CN=6962b03d-72aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bc:bb:71:54:4e:9d:09:2c:e5:2d:1a:04:7c:
5b:a3:6b:73:c6:3b:d0:5a:67:28:44:a7:58:29:16:
60:fa:fa:27:19:76:4e:28:18:b6:d7:18:8a:c7:9d:
1b:3d:c0:19:ab:6d:40:de:b7:b9:a2:91:6b:3f:de:
c4:15:41:9b:b3:0b:90:a0:84:c0:db:00:a9:fa:ac:
b1:12:7c:07:0f:ee:d3:af:93:dc:5f:5d:94:c9:87:
c9:f4:79:71:c9:ef:9b:65:55:56:d1:7b:a4:50:cc:
25:de:f1:42:ae:04:3e:00:aa:f4:8c:8f:cd:08:71:
2b:74:18:9b:44:dc:37:99:3d:0d:a9:ea:84:66:0b:
6f:05:c6:b1:01:a4:86:d6:62:95:91:96:f4:25:0e:
21:e6:a2:81:86:b8:8b:1b:f0:e1:a4:5f:8d:b9:78:
cd:9e:1c:bf:11:69:30:0c:ab:19:fb:82:c3:dd:6e:
5d:74:d2:9f:08:16:c8:74:51:de:15:7b:15:2b:4e:
88:21:12:73:39:a9:dc:d5:b8:e4:1a:3a:23:f0:22:
5f:72:94:9f:c8:9d:40:4e:27:41:5e:53:72:f0:e1:
d2:78:67:99:77:61:2c:e6:49:af:4e:ff:80:4a:4c:
ee:e4:ba:0f:a8:d2:2b:69:8a:30:60:a9:91:87:41:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A6:3A:9C:70:DB:DB:64:21:CE:57:07:ED:06:49:21:67:9C:30:62
X509v3 Authority Key Identifier:
keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:ed:82:b4:e7:8a:b0:e1:ee:8e:3a:4e:75:43:55:61:cc:61:
bc:63:66:4c:d7:a2:9a:f5:6c:75:fe:c7:0e:9a:1c:3d:51:16:
81:31:40:5e:41:5b:0d:bc:bc:d0:7c:c3:f7:71:5b:11:74:45:
ea:ff:aa:be:c7:3b:62:08:18:76:1e:9b:e8:87:8c:f8:c3:72:
01:7f:e2:5f:5c:46:f3:85:79:4f:b2:db:ac:08:27:e9:18:32:
71:c0:20:d7:a2:bd:d9:07:a2:37:ef:9a:43:64:8a:85:12:de:
83:7e:28:e9:67:48:19:b6:2d:c7:64:e5:b3:d3:d5:9b:c7:70:
03:11:b9:78:3a:e3:97:ee:2b:4a:1f:93:d8:15:2c:75:4e:04:
e5:55:d3:0a:4b:d2:a6:8d:25:f1:cd:33:7b:6f:37:a0:ab:cb:
a1:16:37:83:6f:0c:1a:07:f0:43:6c:d9:c1:18:12:0e:14:1b:
e7:14:1c:b4:57:c5:dd:ee:64:52:df:5b:04:11:4c:8b:57:7c:
a4:df:c0:ed:f8:31:6e:17:fe:5f:89:c2:90:f4:95:e7:cb:33:
63:89:bd:e8:e2:fb:68:51:5e:90:8f:a9:bc:d1:aa:01:d9:1b:
7a:0d:30:8c:79:6b:fc:3d:2b:bc:d1:b0:81:e3:f6:08:9e:e5:
6d:26:38:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:28:40 2026 by rpki-client