This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
File: idaQRux8ca1__5jk_Zu5iB8pnIk.mft (raw, json)
Hash identifier: /t+8JAlJBNRVd2b2gmn6PPlJrkN24z4MDr9wwh7pX0M=
Subject key identifier: 40:13:84:56:BB:C9:F9:4A:14:DD:22:B2:4B:86:36:FA:E9:83:E7:67
Authority key identifier: 89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89
Certificate issuer: /CN=A914D648/serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
Manifest number: 06
Signing time: Mon 09 Feb 2026 08:15:54 +0000
Manifest this update: Mon 09 Feb 2026 08:15:53 +0000
Manifest next update: Mon 16 Feb 2026 08:15:53 +0000
Files and hashes: 1: idaQRux8ca1__5jk_Zu5iB8pnIk.crl (hash: twsJLDQfT9rpaKjih3zVQVdS0zFsc74xoOUVUXGhPeE=)
2: 4A5A1A32001211F1BC55B3C9406F56BC.roa (hash: c3V4d1AFObIqMsdVFrFDXoSnLgViV5fxMQTh3NziXWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl
rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Feb 2026 08:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D648, serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
Validity
Not Before: Feb 9 08:15:53 2026 GMT
Not After : Feb 16 08:15:53 2026 GMT
Subject: CN=698997ba-523a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:33:cb:7f:0c:3e:3b:b3:fc:41:75:2d:12:
42:0e:a4:00:f2:df:bd:bc:a8:12:e4:0f:42:b7:3a:
02:d6:56:24:9e:09:6a:73:1f:d4:09:14:43:f1:2c:
1f:79:b4:d4:db:40:68:50:76:94:1a:e5:c1:e1:17:
bd:26:26:d1:ab:fc:f7:36:2d:ab:21:94:26:47:06:
59:2b:4b:14:54:66:30:ce:f4:10:e6:20:e5:3f:4e:
dc:7a:f8:3e:89:2e:bc:1c:c2:51:5b:b0:bf:9d:e7:
96:84:2e:d2:1f:b0:72:1d:20:d1:ca:46:78:0c:d9:
24:4b:54:d0:13:24:e4:33:14:f2:db:6c:28:25:f1:
1f:78:6b:0d:16:a3:70:9c:41:bd:f0:2e:05:2f:e3:
5d:00:92:0f:a6:7c:2b:d1:c4:b4:50:6e:65:52:3d:
18:a0:66:1c:47:26:02:bd:12:94:65:6b:69:1e:6c:
db:f9:5f:a8:58:15:8b:30:c8:d7:78:fd:22:ce:ff:
80:08:bf:73:b5:30:ae:e5:ea:6d:84:9a:a5:9f:0c:
af:a3:e9:f7:21:4d:2d:2d:49:17:ff:ea:a0:ce:ea:
19:33:95:4e:2e:e2:e8:1f:70:11:65:6a:c0:89:54:
7c:db:ef:9d:fd:5b:13:10:56:3c:af:5e:bf:cd:62:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:13:84:56:BB:C9:F9:4A:14:DD:22:B2:4B:86:36:FA:E9:83:E7:67
X509v3 Authority Key Identifier:
keyid:89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e7:43:e8:99:2a:76:1b:a1:2a:e6:5f:1b:29:c9:65:ad:31:
16:f7:37:46:8f:27:e1:c6:27:21:f2:a8:a6:3f:3e:c7:ad:5b:
0b:29:d0:bb:d1:aa:e6:cb:b0:d2:16:fc:59:e9:db:04:20:a8:
e6:4d:a0:bd:ed:e1:8f:1d:e7:a2:58:70:60:2e:a2:75:e2:2a:
3a:50:73:ea:68:62:a5:94:60:87:88:01:ba:25:c1:66:50:fb:
03:86:f8:8a:cf:7e:4e:c0:a3:41:04:d9:93:98:7b:aa:55:1d:
30:d3:cc:e6:94:bb:54:11:3a:a0:21:e3:b2:8c:e0:4e:b0:e1:
5e:64:ec:c8:89:04:9b:27:1c:a6:2e:ed:61:5e:14:28:b7:9b:
04:67:76:9a:dd:b8:33:00:60:7c:f6:b5:e0:e9:c0:20:1b:2e:
d9:7f:09:5c:d0:b2:de:ab:d6:2a:a7:5a:11:63:01:98:2a:21:
6e:cc:24:8a:6f:84:6e:22:5f:a1:42:a0:d4:54:77:ef:8c:2e:
9c:de:a4:2b:d7:1c:20:7a:ab:bb:0b:e9:19:76:d6:25:a3:46:
0a:57:e2:40:6b:86:34:81:c3:35:ad:de:d1:08:ac:5e:63:7c:
e2:37:07:80:48:8d:d3:80:e2:24:39:52:8c:a3:23:0c:00:a3:
d5:ef:f8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 22:32:53 2026 by rpki-client