This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json)
Hash identifier: EBqiMYqC/JnSaidkheUtfZBhbYaONkEV0Cw2TJe/aAo=
Subject key identifier: FF:8F:3D:8E:8A:74:15:4C:FE:CE:D9:BB:EF:A0:34:E2:9F:49:23:91
Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Certificate serial: 0A61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
Manifest number: 0A55
Signing time: Sat 10 Jan 2026 19:07:41 +0000
Manifest this update: Sat 10 Jan 2026 19:07:40 +0000
Manifest next update: Sat 17 Jan 2026 19:07:40 +0000
Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: GEFOiYl2UyVq25jgRV2ZgvDD/J5Q5zk/ADpe9+cJRmY=)
2: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: ZCM+V6Y56yepaeegUajjp4xOF8Q6SeyZY2EvL4X5a+Y=)
3: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: qSGZ+j4RvXroFxByBDcPf9/bS2chAaWe7JM19f3ZPpw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 19:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2657 (0xa61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Validity
Not Before: Jan 10 19:07:40 2026 GMT
Not After : Jan 17 19:07:40 2026 GMT
Subject: CN=6962a37d-19bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:67:31:04:d9:a1:ef:ca:ae:d3:cd:ee:4d:
b6:2a:9f:b7:5d:be:03:e1:de:76:12:99:02:b5:82:
9c:48:d6:93:6f:47:9f:1e:13:7d:f3:56:67:8d:5e:
ae:51:6c:8a:39:59:52:4c:aa:5e:65:1f:6f:6d:d7:
0b:a1:0a:16:74:71:5f:a2:c4:ee:4e:ce:6d:a6:df:
82:ab:43:f2:66:eb:96:47:93:be:66:30:c9:fc:48:
5e:a4:4a:47:a5:35:13:33:92:a9:45:80:2f:35:7b:
87:1d:14:37:00:7a:75:e5:8b:33:99:5f:f3:a3:43:
23:87:c2:ee:a5:ed:19:3c:ae:36:a2:cb:6e:e4:77:
77:b4:ff:45:a7:61:0c:e7:18:3e:ed:10:f8:1b:3b:
87:d9:19:b1:50:a4:40:10:16:91:e3:33:b8:5f:14:
c8:a7:ab:3b:f7:02:b0:c6:ae:10:fc:f4:d8:9c:4c:
32:3d:a1:e3:59:4a:f9:0b:e2:c1:4e:b5:5e:ac:3c:
1b:9c:ff:7b:39:c2:44:8d:b7:dd:93:09:23:5e:cc:
93:94:e1:fe:f2:d9:32:63:15:84:da:f8:8b:b5:03:
ae:e0:68:60:c6:12:f2:2f:69:67:43:7c:34:7b:e8:
9a:ea:49:e3:14:06:90:aa:2b:8b:3a:25:57:3e:d8:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8F:3D:8E:8A:74:15:4C:FE:CE:D9:BB:EF:A0:34:E2:9F:49:23:91
X509v3 Authority Key Identifier:
keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:9f:d7:c0:cb:6f:69:69:8c:27:1a:10:d9:47:90:bc:73:95:
ea:5d:7d:4d:20:b9:d7:59:f4:4c:b3:fc:4b:86:74:4a:5b:90:
ea:2a:13:cd:d1:4e:e5:0f:ca:dd:1b:8a:4d:c4:66:17:74:a5:
b7:fc:be:73:fa:3e:2e:44:ba:73:80:26:09:1c:2b:7a:00:53:
68:a8:45:77:56:f7:ac:e3:76:ed:2a:26:78:62:28:86:78:3a:
0a:8c:c9:19:6f:a9:5b:cb:9b:8f:a1:bb:81:8b:57:96:fc:11:
fe:12:9e:6b:98:bc:fa:84:91:01:46:6b:05:bb:95:6e:16:82:
36:19:95:f1:70:9a:83:d7:91:32:d0:8e:ba:bd:19:da:ef:a8:
d6:05:17:de:d3:1a:83:b1:4a:f9:a0:3c:53:58:72:ec:6d:0e:
40:7f:dd:97:b6:ae:e1:ce:45:54:2e:bc:7a:fd:0d:18:bb:6a:
f3:ff:ed:05:d8:c3:d0:cd:8f:5c:62:29:c8:5a:f4:e3:d3:8f:
42:ec:2b:85:31:e2:53:b7:3c:67:19:db:c1:0d:31:cc:11:7e:
64:5c:ea:8c:43:a5:c0:4a:d6:7a:03:a3:d5:b8:8b:4a:ee:b0:
1d:dc:91:cd:01:91:02:45:dc:bf:67:42:df:a8:4f:95:af:77:
d5:27:58:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:28:03 2026 by rpki-client