This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json)
Hash identifier: AO0EDsfyDqFxoeo1xpvn4lj4kmFvdC0MXa1AAraK1I0=
Subject key identifier: 5A:CD:8C:E8:66:A1:9C:96:92:25:85:82:FE:42:62:1A:D2:B9:16:9A
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial: 088A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
Manifest number: 0863
Signing time: Tue 20 Jan 2026 15:46:08 +0000
Manifest this update: Tue 20 Jan 2026 15:46:08 +0000
Manifest next update: Tue 27 Jan 2026 15:46:08 +0000
Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: QFwdTypkoeLWNa7Xd4YjZSDDTpavrsy3AjZu8xq+/EI=)
2: 0CC38EEC80E711EBB8CFF825C4F9AE02.roa (hash: MfRtvCwn59famvfu05RMk6NPUwzQW1gti+aq8XhNzyk=)
3: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: tG1HGaU5DUimsEMDFRA50jlq68FCzHx0C3arFNqcuaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 15:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186 (0x88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Validity
Not Before: Jan 20 15:46:08 2026 GMT
Not After : Jan 27 15:46:08 2026 GMT
Subject: CN=696fa340-cfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:c4:b4:8d:1e:fc:2b:72:87:d6:25:e3:c3:
7f:60:de:35:0c:61:4f:e1:bf:32:98:05:ab:e0:56:
58:c3:33:ec:78:b4:c6:fe:04:0c:3a:2d:6a:99:28:
dc:2a:ee:00:99:99:1a:d4:85:27:19:60:85:f0:90:
b3:ac:07:2d:ef:31:01:ab:f2:52:c2:4b:d7:ee:c6:
d9:63:24:b8:b8:8f:06:96:e3:d0:fe:33:43:a9:83:
59:98:b8:2e:6b:23:85:06:f5:bb:c3:8d:af:25:79:
15:19:83:76:39:a7:b4:55:f3:40:7b:19:36:b5:89:
b5:fd:f7:bd:8f:7a:63:7a:30:3d:ef:87:71:a4:3f:
30:b6:32:48:de:76:41:f1:d1:ab:84:f7:a5:0c:30:
36:55:dd:b2:39:11:d1:e6:81:53:e2:91:61:73:55:
db:21:cc:79:eb:2a:67:d8:27:9e:e3:28:81:9e:ee:
af:eb:d4:b2:f5:f3:09:6b:34:ce:ca:ef:88:0e:d4:
5b:d7:c9:f4:60:e2:04:38:1a:ec:dc:b4:2b:0a:c6:
e1:a8:34:8b:5e:f5:d1:95:d4:80:03:9d:8c:47:97:
ac:cb:d6:04:54:55:27:b5:f3:3d:18:02:79:08:f8:
2d:3c:a1:ac:69:42:b7:a3:98:5d:2b:8d:6e:06:f9:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CD:8C:E8:66:A1:9C:96:92:25:85:82:FE:42:62:1A:D2:B9:16:9A
X509v3 Authority Key Identifier:
keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:91:ce:08:25:a0:35:45:14:25:57:44:d1:56:f2:6b:5b:3d:
69:b8:cc:20:4b:f6:51:b4:fc:86:23:f9:53:75:fc:07:10:db:
37:18:57:d8:ad:fc:57:a5:72:df:a3:f8:7f:a2:0b:2b:9a:35:
11:35:62:4c:2e:13:81:11:7d:28:76:e4:32:af:b5:63:2e:51:
e1:22:e6:3c:20:c0:b1:05:b6:f8:7f:88:1b:7a:17:61:3b:eb:
e1:a4:ee:cd:fb:89:15:1b:42:53:f7:7b:78:d0:32:f8:52:c0:
48:54:fa:13:bb:dd:45:c5:71:5b:88:7e:6a:1f:64:57:f1:49:
c6:e2:fe:59:bc:9e:ae:37:1c:08:b2:e4:2a:78:b0:8d:45:ee:
b8:3b:5a:f9:3e:a0:c0:22:ed:dc:4c:7b:b5:34:d3:a0:85:12:
cd:b5:94:d1:9e:a9:8e:1e:67:92:52:9f:e1:bc:c5:a0:b4:db:
04:08:7e:84:9b:5f:3f:42:34:01:e8:dd:4c:2a:64:14:80:4c:
e3:3f:0f:35:f4:f5:5f:53:dd:65:4d:a8:bc:b1:38:54:86:58:
81:a5:fd:90:d2:bd:be:8e:b6:2a:fa:dd:d1:36:8f:ae:89:10:
c1:8d:fd:ff:57:cc:6a:c4:a6:ff:93:de:87:8d:4b:f6:a4:78:
51:3b:2d:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyMDcxMTAvBgNVBAUTKDg5N0UwMkNDRDhFQjQwMzlBNzgzRDAyMzc5QzU1RkVF
OUYwQ0VFNTkwHhcNMjYwMTIwMTU0NjA4WhcNMjYwMTI3MTU0NjA4WjAYMRYwFAYD
VQQDDA02OTZmYTM0MC1jZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAygHEtI0e/Ctyh9Yl48N/YN41DGFP4b8ymAWr4FZYwzPseLTG/gQMOi1qmSjc
Ku4AmZka1IUnGWCF8JCzrAct7zEBq/JSwkvX7sbZYyS4uI8GluPQ/jNDqYNZmLgu
ayOFBvW7w42vJXkVGYN2Oae0VfNAexk2tYm1/fe9j3pjejA974dxpD8wtjJI3nZB
8dGrhPelDDA2Vd2yORHR5oFT4pFhc1XbIcx56ypn2Cee4yiBnu6v69Sy9fMJazTO
yu+IDtRb18n0YOIEOBrs3LQrCsbhqDSLXvXRldSAA52MR5esy9YEVFUntfM9GAJ5
CPgtPKGsaUK3o5hdK41uBvlcGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrNjOhm
oZyWkiWFgv5CYhrSuRaaMB8GA1UdIwQYMBaAFIl+AszY60A5p4PQI3nFX+6fDO5Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy84QzY4QjlBMjA5
ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFEbW5nOUFqZWNWZjdwOE03
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lYNEN6TmpyUURtbmc5QWplY1ZmN3A4TTdsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjIwNy84QzY4QjlBMjA5ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFE
bW5nOUFqZWNWZjdwOE03bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQALkc4IJaA1RRQlV0TRVvJrWz1puMwgS/ZRtPyGI/lTdfwHENs3GFfY
rfxXpXLfo/h/ogsrmjURNWJMLhOBEX0oduQyr7VjLlHhIuY8IMCxBbb4f4gbehdh
O+vhpO7N+4kVG0JT93t40DL4UsBIVPoTu91FxXFbiH5qH2RX8UnG4v5ZvJ6uNxwI
suQqeLCNRe64O1r5PqDAIu3cTHu1NNOghRLNtZTRnqmOHmeSUp/hvMWgtNsECH6E
m18/QjQB6N1MKmQUgEzjPw819PVfU91lTai8sThUhliBpf2Q0r2+jrYq+t3RNo+u
iRDBjf3/V8xqxKb/k96HjUv2pHhROy0S
-----END CERTIFICATE-----
Generated at Wed Jan 21 20:48:39 2026 by rpki-client