This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File: iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier: FBS6BQ2yv7//nRmT1jhLxEuRaWg7OzQ9K8saTE047K0=
Subject key identifier: 1F:43:35:D1:20:22:66:3A:E6:96:79:19:1D:F5:43:5A:65:7F:18:64
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial: 03B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number: 03AE
Signing time: Tue 03 Feb 2026 00:10:03 +0000
Manifest this update: Tue 03 Feb 2026 00:10:02 +0000
Manifest next update: Tue 10 Feb 2026 00:10:02 +0000
Files and hashes: 1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: 6dVZy5Y1cmyLlCpBqe3/IyzWsbagCOTqQUF3PYMeJEI=)
2: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: daMU3ImqJzsIleot5aS0XfHVIYpdh2rNrlvSYi4RSDw=)
3: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: 4UMRc+U+QvsxtO1R2mqRXzqp5X2s02DN1FDAeR0/6VE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Feb 2026 00:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951 (0x3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Validity
Not Before: Feb 3 00:10:02 2026 GMT
Not After : Feb 10 00:10:02 2026 GMT
Subject: CN=69813cdb-6b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:5b:b3:3c:9b:04:9d:af:6f:cb:d7:c6:00:
4b:70:fe:81:dc:98:64:01:b0:57:35:d6:67:7a:1e:
a6:7c:b3:5a:69:72:4d:3d:37:ad:0d:cf:d5:4b:df:
48:45:59:32:d6:d5:df:43:8f:24:9f:99:15:e3:90:
19:5d:05:5f:39:49:36:77:06:2f:68:39:b8:9e:6c:
fa:be:5c:10:4b:42:6a:27:23:d3:02:81:b0:6e:28:
de:fe:1a:23:e2:47:9d:76:3e:92:b4:75:f1:ce:e0:
8a:06:61:51:c9:14:72:78:18:0d:f7:f1:cf:b7:1e:
70:f7:d5:ab:fa:94:b8:a4:1b:a0:d6:fe:0b:34:ac:
cd:5b:03:d1:c6:d9:9b:aa:a6:60:bd:44:f3:ba:5f:
af:fd:49:65:cb:d8:91:f9:e0:c3:f4:57:5b:9b:b0:
b9:de:b8:08:6f:b7:72:5e:27:1d:28:77:29:2b:8b:
62:05:aa:27:be:60:45:e3:8d:ba:d7:cb:ec:c7:53:
e2:1e:0a:91:3b:ce:d5:dc:38:8d:86:17:51:f0:1b:
4a:9a:ac:52:c0:89:1e:40:40:13:dc:2b:5f:1c:ee:
de:0a:55:dc:bd:ad:ac:41:05:db:8d:03:c6:e6:75:
1e:6e:ae:85:c0:bf:77:0f:fe:4f:a5:3a:55:59:ad:
fa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:43:35:D1:20:22:66:3A:E6:96:79:19:1D:F5:43:5A:65:7F:18:64
X509v3 Authority Key Identifier:
keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:9b:fe:0a:80:9c:be:73:15:01:32:85:b5:29:94:ed:9c:71:
ba:b9:39:9e:a3:d7:e1:0d:ed:1e:13:d7:36:13:4e:b7:71:9e:
c0:a4:36:ce:9f:40:1a:af:dc:02:55:3c:66:44:16:bb:12:2b:
56:e2:1a:85:0c:2d:4e:8b:8a:65:8d:be:f2:5c:bc:96:65:07:
43:a1:85:d1:ff:d6:74:a4:5b:82:15:7a:a1:45:2e:88:db:e8:
bc:72:64:32:4f:21:5e:1b:15:f1:80:ca:23:be:51:66:98:76:
5f:e2:1f:e5:9a:3b:98:f4:3d:bf:24:b6:0e:f8:ca:11:b1:a1:
01:62:df:9e:23:83:60:d6:9d:25:17:c5:96:3b:e8:39:39:a3:
5b:e2:d0:84:c4:c0:b0:67:29:8e:99:87:75:3a:f3:4e:e0:7a:
d2:df:91:d8:a6:b2:d8:73:76:4e:19:31:13:f3:1e:d8:9f:3e:
8a:29:ce:1b:9b:28:55:e2:2f:f9:94:d3:2c:30:c7:62:6b:4f:
dd:08:90:f2:c6:74:93:e7:2a:4f:43:9f:bd:3f:e5:cc:f4:ae:
6e:81:42:71:a0:11:3b:ab:14:33:b0:de:d9:ed:52:e0:cf:44:
b9:b5:7a:74:b0:50:bb:27:2e:8e:2e:7f:91:7c:83:36:e8:98:
b8:76:fe:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4
NzM0MkI3MjkwHhcNMjYwMjAzMDAxMDAyWhcNMjYwMjEwMDAxMDAyWjAYMRYwFAYD
VQQDDA02OTgxM2NkYi02YjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAitRbszybBJ2vb8vXxgBLcP6B3JhkAbBXNdZneh6mfLNaaXJNPTetDc/VS99I
RVky1tXfQ48kn5kV45AZXQVfOUk2dwYvaDm4nmz6vlwQS0JqJyPTAoGwbije/hoj
4keddj6StHXxzuCKBmFRyRRyeBgN9/HPtx5w99Wr+pS4pBug1v4LNKzNWwPRxtmb
qqZgvUTzul+v/Ully9iR+eDD9Fdbm7C53rgIb7dyXicdKHcpK4tiBaonvmBF4426
18vsx1PiHgqRO87V3DiNhhdR8BtKmqxSwIkeQEAT3CtfHO7eClXcva2sQQXbjQPG
5nUebq6FwL93D/5PpTpVWa36hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9DNdEg
ImY65pZ5GR31Q1plfxhkMB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2
MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0
eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTM1RS9GQTkyNzc4MkM2MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVN
VlY4cjlIc1ZIZS1ITkN0eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBom/4KgJy+cxUBMoW1KZTtnHG6uTmeo9fhDe0eE9c2E063cZ7ApDbO
n0Aar9wCVTxmRBa7EitW4hqFDC1Oi4pljb7yXLyWZQdDoYXR/9Z0pFuCFXqhRS6I
2+i8cmQyTyFeGxXxgMojvlFmmHZf4h/lmjuY9D2/JLYO+MoRsaEBYt+eI4Ng1p0l
F8WWO+g5OaNb4tCExMCwZymOmYd1OvNO4HrS35HYprLYc3ZOGTET8x7Ynz6KKc4b
myhV4i/5lNMsMMdia0/dCJDyxnST5ypPQ5+9P+XM9K5ugUJxoBE7qxQzsN7Z7VLg
z0S5tXp0sFC7Jy6OLn+RfIM26Ji4dv4u
-----END CERTIFICATE-----
Generated at Wed Feb 4 15:12:36 2026 by rpki-client