This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft
File: iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft (raw, json)
Hash identifier: QUzlP2bAuAzr01VMGuglFviAWu3DApY9ZiS07XV+tjk=
Subject key identifier: F9:23:47:65:E4:DD:13:22:33:F7:FB:63:D3:ED:AE:75:BE:CE:0C:CE
Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D
Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft
Manifest number: 0186
Signing time: Sun 25 Jan 2026 03:04:32 +0000
Manifest this update: Sun 25 Jan 2026 03:04:32 +0000
Manifest next update: Sun 01 Feb 2026 03:04:32 +0000
Files and hashes: 1: iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl (hash: zJbLapTteivPasfDAl2gbT5ZuBDN/zVjqjgh0akgd50=)
2: F406C3F26AE311EF82D7860FC4F9AE02.roa (hash: ZQWo48C7yzw/1I2LDOFu7JRAx11o90Djj0idU4v5M8Q=)
3: D7FEF354562111EFA7B3F00AC4F9AE02.roa (hash: AmzfYDthHf9vNP4TrHHBYhJ0mbUtvWtqarSZwS5Zcek=)
4: 87662556555511EF88D9F680C4F9AE02.roa (hash: g2923tdMPEYDpjyOhYs0ACxlY+kdr/u3SXBH1nQAhTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl
rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:04:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D
Validity
Not Before: Jan 25 03:04:32 2026 GMT
Not After : Feb 1 03:04:32 2026 GMT
Subject: CN=69758840-8d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:07:30:47:52:c6:73:ec:f5:5d:dc:d1:e4:
91:f1:05:8a:19:be:ef:70:62:dd:6e:96:ee:bf:33:
94:65:5b:47:5d:5a:29:2c:62:d6:be:ac:42:02:6b:
4b:9b:1b:d3:66:5d:8d:83:8b:ac:2d:36:6d:6e:7b:
09:e7:52:50:15:a4:7e:ec:99:db:ac:ef:3f:c1:6e:
4b:d3:51:42:4d:e8:f1:91:26:e8:26:0c:3f:9f:b0:
84:41:af:4e:b1:e6:63:65:94:17:6a:e7:33:a5:32:
bd:c9:e1:fd:d7:a2:6d:73:b9:6d:37:79:2d:f2:fd:
b8:7c:c8:8c:a9:1d:34:1d:ef:83:99:ee:48:5b:3e:
d7:fc:e0:ea:7c:21:01:0c:3e:5a:40:c6:23:5b:57:
ce:3c:d8:02:7e:bf:99:18:31:69:53:64:24:9e:ea:
45:03:cd:a7:73:3c:04:9e:35:79:e6:bc:e4:a9:95:
7f:e4:ca:38:38:a8:e7:fe:d4:fe:71:40:13:97:32:
31:0f:48:d7:ef:7c:4e:4d:ea:a1:49:d9:dd:95:23:
44:c7:0b:03:f6:47:1f:8a:9a:b2:5f:31:c3:66:b2:
c9:15:08:b5:c3:e1:03:08:09:aa:e4:51:a4:b9:9b:
5e:ae:49:d7:1b:a0:97:f4:27:51:be:33:9b:88:f9:
bf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:23:47:65:E4:DD:13:22:33:F7:FB:63:D3:ED:AE:75:BE:CE:0C:CE
X509v3 Authority Key Identifier:
keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:9d:7c:09:a5:76:48:90:e0:50:f2:be:31:80:c0:7e:c6:9a:
fb:b1:e8:81:06:83:1b:c4:ed:8e:e0:d9:a5:85:17:ca:e7:94:
70:d3:b0:a4:94:70:d6:4c:56:db:57:72:9a:b9:1c:14:b0:b9:
d6:f6:ae:06:88:a5:56:a1:91:75:2c:af:7c:ef:bf:0f:84:11:
bd:87:1e:ca:2a:f1:04:5f:54:a8:fb:81:fb:f2:3f:f1:8d:88:
fc:a6:69:61:4a:c4:5e:b5:b9:c5:eb:6c:0a:34:17:76:d7:c9:
67:0d:2e:4e:e6:c2:be:26:87:5b:35:a7:21:b5:8e:84:5b:2d:
47:b3:96:36:0c:77:f5:52:1a:81:e0:bd:7b:e4:ff:a6:0f:13:
d9:17:e9:df:1d:d9:73:09:78:60:a6:42:28:7b:11:16:99:09:
4c:d6:9e:7c:b5:b8:04:fa:28:33:41:ee:04:92:13:2e:c2:fe:
ec:13:52:ef:7c:c0:9a:20:fc:cd:af:37:49:17:f3:98:4f:98:
57:2c:1a:f0:98:30:d1:37:5f:7d:ed:f9:9f:8a:b2:cf:5b:63:
39:b7:9b:be:e9:1d:4e:96:bf:4d:af:c2:f7:1d:d5:81:4d:ff:
6d:52:dd:9e:ad:af:57:b0:11:cb:85:6f:68:af:ee:85:fa:56:
a0:4f:4a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:11:54 2026 by rpki-client