This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json)
Hash identifier: 3ifCxJmqq0VDKlHKE2MU9N46CnbR3c56NLCc0+ruY9o=
Subject key identifier: 13:4C:FC:92:14:39:C4:69:DA:F7:48:F9:DE:41:8D:90:F1:F9:19:9B
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial: 025A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
Manifest number: 0229
Signing time: Tue 03 Feb 2026 02:19:12 +0000
Manifest this update: Tue 03 Feb 2026 02:19:11 +0000
Manifest next update: Tue 10 Feb 2026 02:19:11 +0000
Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: mVVrtJpJNUfqp1EF7Fwz3d/ieOVnawDhMfY02Ly1joU=)
2: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: 6GO7eV9ptg4bEhjgmfPj3OiDNEEWB+tcYPU19G/hzs4=)
3: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: jgvNZRe9TtRr8CjiSGyPeDv21uzfhNhZZ8tu5qtOBO0=)
4: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: 8RemKyfJQtXvAOB/Ei52MDI9KMaFn3vaXMJC+OL2BTo=)
5: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: xJf9OjyZ9tl22O94Y+hCu+z+3Ka7jvHkbMt39lHsOuw=)
6: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: /H0+uJjrBUM5k1a0PlilTjkv6OXrTMlJFAf/4vjgSHc=)
7: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: 1iYx6AnDG5k3WAo1cEbcn3Zch3QKy9Aj+tVhGhOpm2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Feb 2026 02:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Validity
Not Before: Feb 3 02:19:11 2026 GMT
Not After : Feb 10 02:19:11 2026 GMT
Subject: CN=69815b20-4556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f9:b0:07:6d:de:50:56:e2:f3:d3:7d:58:b4:
5b:f9:3e:e0:b6:5d:30:dd:c6:07:35:53:bd:b0:1a:
58:26:81:2d:40:23:87:41:36:57:5d:b7:ce:48:8f:
bc:dd:73:0d:3c:c3:b1:84:0a:f2:11:03:60:36:56:
73:0d:24:e1:5b:fd:ab:f2:f6:bb:fc:a2:c6:1b:dc:
96:3c:14:8b:9c:be:20:0c:c0:91:96:84:97:cd:70:
13:aa:72:91:66:53:3f:2e:fe:67:7e:8d:1e:ea:b1:
5b:ae:f2:e4:7a:f3:28:d6:8d:f3:66:43:0b:31:26:
92:bd:ae:9b:63:b0:76:08:d8:48:0f:fd:08:f5:7c:
7b:ef:85:5a:61:30:ec:f4:50:86:a2:73:2d:1c:96:
33:46:61:0b:5c:5e:e1:7b:0c:6e:90:09:91:6b:7b:
c6:d3:33:1c:b3:d9:13:c1:be:2e:5c:6d:66:67:ad:
1e:0a:7f:92:92:e2:83:33:42:f2:a5:30:96:86:98:
b9:86:13:36:11:89:cb:d1:b7:ce:31:02:69:05:8c:
0b:f9:ba:c7:ce:31:64:19:41:20:3c:9b:e7:5f:b1:
07:0c:93:85:df:90:a1:d2:dc:5d:de:a7:3c:05:f2:
63:1a:dd:0d:99:4d:6a:53:c6:d3:da:dc:6e:f5:11:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4C:FC:92:14:39:C4:69:DA:F7:48:F9:DE:41:8D:90:F1:F9:19:9B
X509v3 Authority Key Identifier:
keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:44:35:b3:3a:ea:f8:a6:c3:b8:83:de:ba:0a:a2:6a:ed:3d:
31:00:a6:7a:1d:8a:22:f3:cb:73:00:d6:7d:41:3b:e6:ed:cf:
08:b5:cb:66:92:51:b6:98:b8:9b:c5:56:c1:08:94:d4:c6:7a:
6c:27:a0:32:24:7a:c7:78:99:c3:f2:57:e5:66:5c:65:b0:8f:
29:83:24:7c:4e:84:2d:ff:9b:a2:7a:35:53:b5:70:c1:6c:bf:
04:01:61:31:b9:09:c6:36:2d:9c:4f:93:16:15:49:08:41:a2:
84:97:49:e4:07:36:b9:4c:a5:34:75:0f:4c:be:7f:0c:f8:7b:
8a:0c:a5:d6:7e:ea:56:a4:a3:6d:93:99:53:fb:c6:88:e1:83:
a6:bd:80:99:d3:e0:15:ec:e1:fe:df:a9:0a:de:ba:51:6c:79:
71:15:31:4e:43:cd:dc:42:f7:c7:e6:43:b9:d2:13:d9:e8:cd:
c4:a1:b0:22:6f:c0:68:ad:4f:70:f5:47:47:97:96:8b:96:3b:
07:d0:bb:e5:83:61:c2:19:04:36:a3:b5:7a:bb:12:3a:f4:6c:
e7:0e:bf:12:bd:ce:27:4b:75:07:8b:84:e2:31:27:c5:ac:94:
c0:f1:06:5e:77:1f:be:4d:9f:b5:74:cf:da:0e:d2:c7:1c:c9:
aa:0e:e8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 15:18:50 2026 by rpki-client