This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
File: irlFgrAuqoOihfHJH8hZoOLBE1M.mft (raw, json)
Hash identifier: LTJNa07UGxwKoyREArx1l/dRXgeXVwS93kfhpJvswKo=
Subject key identifier: 18:B7:23:EB:4B:56:78:0F:E6:B1:72:C6:96:45:43:66:A0:80:17:98
Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53
Certificate issuer: /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
Manifest number: 9B
Signing time: Tue 23 Dec 2025 05:21:02 +0000
Manifest this update: Tue 23 Dec 2025 05:21:01 +0000
Manifest next update: Tue 30 Dec 2025 05:21:01 +0000
Files and hashes: 1: irlFgrAuqoOihfHJH8hZoOLBE1M.crl (hash: Wctc9xAIuZiPdv5Mxx6K32aWBnLAYHJhGesE4lBjlUo=)
2: 0431DDEEF8E611EFB9269C71C4F9AE02.roa (hash: onFwvD3ByPLzXVJ67F8/gNczv45XsvNKrHEcWpbgNvk=)
3: 347B37060B7011F0BED04B49C4F9AE02.roa (hash: pQpuCZn5VYJdmwXjLqjs5m3xSfcDbn3JK2oThkiWP20=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl
rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911049F, serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
Validity
Not Before: Dec 23 05:21:01 2025 GMT
Not After : Dec 30 05:21:01 2025 GMT
Subject: CN=694a26be-84ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:46:9e:d9:7c:8a:c7:4d:ec:cc:cb:3e:06:
88:1c:64:97:5b:3e:ef:93:29:e5:0f:ea:3c:28:a9:
c7:af:09:cd:fd:7f:56:4a:48:06:0c:3c:af:e2:e8:
13:b3:71:72:b3:17:7b:e6:37:75:05:d5:b5:15:cc:
a2:fd:ce:07:6b:8c:ec:ce:10:47:73:bd:a9:c5:5b:
97:20:95:10:fb:0a:2f:d8:a4:2f:c6:38:d1:bb:74:
4d:cd:9f:0d:2e:a8:63:86:0a:95:4b:17:5a:9b:57:
d8:ed:d3:69:11:2c:1f:f5:bf:36:97:26:68:32:cd:
77:cd:7a:c1:14:a1:cf:fb:42:47:43:0b:63:f1:dc:
38:3e:4d:67:dc:16:73:22:b2:aa:c2:f9:eb:50:64:
f4:8f:97:ff:ee:5c:3f:a8:67:40:6d:a3:4a:24:cd:
be:97:62:dd:f8:7f:53:e6:7a:dd:29:00:7c:77:90:
19:c9:02:3a:6a:db:65:7d:dd:3d:48:46:d7:04:c7:
ce:cc:7d:84:81:60:11:fc:ed:f7:41:ec:f2:ba:d7:
bd:10:10:54:ef:7a:80:29:de:aa:16:22:13:40:6c:
4e:41:13:45:48:5d:ba:de:44:d7:2e:4a:ea:8f:00:
e9:ac:ae:3d:62:c7:70:b6:76:dc:34:c0:4f:08:5c:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B7:23:EB:4B:56:78:0F:E6:B1:72:C6:96:45:43:66:A0:80:17:98
X509v3 Authority Key Identifier:
keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:eb:96:f6:12:28:45:01:cc:e9:bd:9b:41:31:f9:26:cb:7b:
57:67:49:4d:d0:06:b1:7a:92:b7:04:ea:a4:b5:8a:e3:36:dc:
fd:cf:89:fe:56:1b:63:a5:0e:9e:4e:bf:df:36:e3:02:f4:5f:
7a:44:77:b2:a2:c4:50:6c:62:f9:d3:9e:40:ea:74:0e:aa:b8:
2e:b3:15:0f:26:d2:9d:af:d1:c6:da:4b:ab:61:ef:80:24:37:
2a:b0:f2:2f:81:69:c9:b1:13:08:0a:b5:e1:5a:e1:b7:2e:4e:
d4:bf:91:8b:0e:29:a9:33:c5:10:bd:71:43:fe:55:66:85:b5:
f7:35:74:0a:ef:73:a4:ae:87:69:ca:42:6c:ec:fe:77:a9:b0:
63:14:86:03:95:4f:fc:38:ec:a3:39:57:d6:72:3c:4f:75:38:
4a:03:38:15:79:6f:9c:aa:16:fb:5d:f8:66:96:9c:bc:94:e2:
9f:9c:fe:7f:e6:b0:d9:47:c4:4a:b9:53:f8:a2:f6:c6:7e:34:
0f:56:79:4d:d0:6e:df:c3:57:db:a2:8d:a4:fa:74:59:90:80:
13:4b:02:f2:00:8d:d1:1a:ba:56:25:28:64:19:1d:ed:b8:23:
76:56:84:1f:b2:73:b1:a4:af:6b:9a:f0:6c:89:36:3a:e0:1c:
e0:78:2c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:39:32 2025 by rpki-client