This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json)
Hash identifier: uRmyNeevaI5HT51J4M5TdUgDM/fKw07BUkMpg7rbNbI=
Subject key identifier: FB:19:80:E6:8D:8D:D6:A6:42:10:BC:43:1F:63:D5:08:B2:B2:DD:1A
Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB
Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB
Certificate serial: 196E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
Manifest number: 1962
Signing time: Mon 12 Jan 2026 16:12:14 +0000
Manifest this update: Mon 12 Jan 2026 16:12:13 +0000
Manifest next update: Mon 19 Jan 2026 16:12:13 +0000
Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: anfRP2FhODiMmES7VkGxygPDxk1cJCmbeL9Fn5aUd0M=)
2: D421D958881611E78B9B0850C4F9AE02.roa (hash: jwMU1HqTvqxMmK/7tE3BOcmdI4jJyKnBQ4irQO6dgGw=)
3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: x3Si4KMD2wvo6rCmh6bPANGnveohQUAF1yIi2AXTiDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl
rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 16:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6510 (0x196e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB
Validity
Not Before: Jan 12 16:12:13 2026 GMT
Not After : Jan 19 16:12:13 2026 GMT
Subject: CN=69651d5d-be27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:96:e0:a1:95:4c:5a:c7:eb:a9:b0:4d:52:
45:e7:40:9c:47:7f:07:e0:40:ae:16:98:4b:a1:d2:
e7:d8:b2:dd:28:31:91:da:54:ab:76:58:55:c9:a1:
b6:b1:6c:68:92:13:95:d3:fa:70:4a:c1:ee:bf:af:
0f:41:aa:e6:81:a6:96:ec:45:67:e1:f1:4c:58:19:
25:73:b0:63:cb:9e:d8:bf:be:03:98:97:11:6f:89:
af:75:72:46:c4:e6:df:3d:4e:79:0f:35:6b:28:f8:
d2:f7:f8:92:84:b2:b9:50:9e:3f:05:2c:0f:56:60:
bc:eb:d5:2e:81:89:8e:10:8c:02:28:1a:4e:55:c6:
80:92:f9:5a:9b:cb:98:48:97:b0:81:88:ad:66:39:
c8:98:c0:cf:6c:15:5d:03:84:db:1d:b4:f9:79:2a:
7d:1e:7e:a1:59:de:97:be:76:47:3a:00:53:61:ed:
85:3c:83:e2:26:30:92:5e:b2:58:e1:b9:59:90:e4:
24:37:5d:9c:2d:85:8b:e5:c5:d2:2a:cc:dd:df:6f:
0b:33:4b:65:0b:9d:3b:34:b7:3a:d8:73:8f:83:c3:
43:55:33:f4:fd:9d:80:d5:8d:0a:6e:35:c1:89:b3:
16:2a:fb:7c:d7:63:4f:58:05:e7:21:e3:81:da:3b:
f8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:19:80:E6:8D:8D:D6:A6:42:10:BC:43:1F:63:D5:08:B2:B2:DD:1A
X509v3 Authority Key Identifier:
keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:b7:ba:78:9b:aa:03:1e:6b:09:04:4e:2e:81:c6:54:fe:e9:
96:c1:fc:45:57:0d:09:b9:b9:60:fb:66:6b:3a:77:ca:6a:90:
2d:a3:ca:3b:78:63:5b:6a:b8:d7:2c:38:73:b0:4d:a6:08:b2:
ea:74:83:18:24:3e:be:8c:fc:6b:e1:a2:31:31:7f:9f:c9:87:
58:26:72:36:dd:18:b7:fd:2a:17:06:dc:e2:a2:e8:e2:cb:10:
76:00:bf:3b:82:84:e1:40:14:ed:62:18:d3:09:00:5c:80:fd:
d9:58:d0:c0:8d:57:4b:92:9d:d6:e6:2e:f6:bd:90:55:9d:dd:
ae:26:d2:4c:d6:a7:74:a1:d6:d8:cf:48:43:10:f7:18:f8:fc:
da:ef:00:a0:24:67:e2:ce:c0:0b:1e:7d:35:4a:5c:77:5e:19:
d9:9e:3a:93:c9:3b:3a:7a:33:31:67:b2:b1:e1:a9:9c:b3:a3:
7a:71:f1:64:6c:e0:b9:24:2e:e2:e0:00:63:3d:cd:f0:d5:0c:
8d:91:78:a5:ae:87:d7:5e:aa:9a:31:de:0b:3c:69:2f:dd:b4:
b9:8b:09:50:b1:f2:ad:83:38:73:0e:7c:d8:f0:ce:c0:fc:f8:
a3:1d:b7:82:3c:11:2d:7f:21:f0:86:0e:ea:a9:c8:68:70:7f:
96:d7:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:49:57 2026 by rpki-client