This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json)
Hash identifier: UXu62ulqQkT/UGgN65jVVSeTSI+mNa6niasRfbynr/E=
Subject key identifier: 4B:DC:6C:3F:F1:B7:21:AD:49:12:B1:EC:14:BF:DD:E1:B6:05:A2:B1
Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Certificate serial: 16F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
Manifest number: 16DA
Signing time: Mon 26 Jan 2026 16:24:21 +0000
Manifest this update: Mon 26 Jan 2026 16:24:20 +0000
Manifest next update: Mon 02 Feb 2026 16:24:20 +0000
Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: aTjtqy7/jkhqvc3WF2VL5KnJ7a37BVAoD/t91P928TI=)
2: E259315C57CA11EA8D931284C4F9AE02.roa (hash: Oe0ZhNHc+oTi0v0pEyomCNHZHmLGtOgid/cHD2LWfB4=)
3: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: iK4wxE4X5dwuMQMPvFE//EwoDLAL1trl9tc0x5zzbqc=)
4: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: gYVrbtrIqWm9akFMSRfLyBApZQdsKZ/TGrfXdq2YQZg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 16:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5873 (0x16f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Validity
Not Before: Jan 26 16:24:20 2026 GMT
Not After : Feb 2 16:24:20 2026 GMT
Subject: CN=69779535-26d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:9c:29:d0:4b:f4:c8:bf:41:f7:67:d8:d2:
90:71:4a:1c:1f:8d:f6:05:bb:95:cc:22:fb:23:26:
2a:90:ee:93:3e:c5:14:c7:69:02:68:80:85:57:af:
a1:eb:62:85:f7:b8:b8:25:86:06:0e:a3:16:f8:eb:
2a:30:f2:61:d5:0d:ed:8e:8c:58:24:eb:96:11:62:
ff:41:47:fa:8f:82:31:9d:2a:cc:64:b8:29:75:99:
6e:c8:23:a8:4c:6a:1d:7d:35:5a:af:be:97:7c:2a:
54:69:a4:c7:6c:72:b4:2a:ea:54:db:25:9f:53:80:
14:ec:f2:a8:04:9b:40:bb:6e:4e:32:f4:06:01:5e:
e2:62:84:d3:30:94:93:da:45:09:40:c0:ea:ee:37:
10:33:fd:a9:51:f6:86:bd:d8:ff:68:ef:1d:65:6a:
6f:5d:a5:25:7c:b2:8f:e3:83:05:6f:c7:7e:4a:06:
db:2f:7c:f9:82:ef:a2:48:24:77:e0:26:14:a9:7d:
a5:82:da:66:7f:34:17:fd:e5:ad:3d:c0:03:3f:a4:
82:2e:48:b0:84:d7:52:2b:68:90:7a:aa:e7:78:d4:
b2:05:07:57:42:0e:42:87:13:77:77:79:da:30:78:
d9:8b:17:74:30:df:d3:91:4f:3d:ac:bb:16:2f:67:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DC:6C:3F:F1:B7:21:AD:49:12:B1:EC:14:BF:DD:E1:B6:05:A2:B1
X509v3 Authority Key Identifier:
keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:3a:b6:34:79:e1:13:9e:c1:ab:2e:8b:91:f5:f3:00:ca:68:
92:7e:ee:2e:52:2b:52:49:5d:a1:82:0a:3c:0d:e5:d8:11:09:
32:ba:be:57:d8:b9:e3:38:b3:2f:27:21:d6:5d:32:ff:5b:7f:
12:71:65:5d:48:05:ca:2e:f5:c3:bf:59:bc:7e:9f:0f:d6:71:
a7:99:eb:52:a6:95:1d:e0:91:16:43:d5:10:1a:60:95:4c:d3:
ad:df:ac:1a:de:5f:02:97:49:bc:a2:4b:ad:83:d0:cc:fe:cc:
d5:72:27:7c:ec:66:3e:62:fa:7d:42:d8:ca:d4:35:95:bd:89:
7a:8e:d5:21:88:3d:d1:01:a9:6e:6d:aa:e9:20:b5:7e:ca:d5:
f8:33:f2:16:d6:d3:5c:03:9a:14:57:92:4f:5a:7b:09:93:58:
56:dc:be:73:99:d3:c8:ab:ee:67:ae:f5:c2:f7:10:d9:b2:78:
35:19:e7:7c:e3:92:f8:c3:4b:7b:87:3b:37:84:5b:3e:60:13:
5f:5d:9e:d9:4e:ca:7d:ab:31:d2:cd:d5:13:d8:80:c8:03:ab:
dd:a9:60:0f:bd:b8:c2:5f:b4:3a:ab:89:77:1e:f3:32:48:14:
78:e1:e2:17:49:94:0d:aa:3b:cb:2b:58:5f:de:04:20:ab:66:
23:2b:40:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:45:35 2026 by rpki-client