This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
File: iDcigo7Pno3d_SRvPGeOnwUV-dI.mft (raw, json)
Hash identifier: fxB1CHmQEQwkdN5Z9Sw2XQajeR3lK385kgahECKanfQ=
Subject key identifier: 83:3E:04:21:08:02:D3:3A:49:C9:E3:DF:37:6A:F1:8E:E5:D0:A9:CE
Authority key identifier: 88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2
Certificate issuer: /CN=A91F4130/serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
Manifest number: 22
Signing time: Sat 17 Jan 2026 06:44:23 +0000
Manifest this update: Sat 17 Jan 2026 06:44:23 +0000
Manifest next update: Sat 24 Jan 2026 06:44:23 +0000
Files and hashes: 1: iDcigo7Pno3d_SRvPGeOnwUV-dI.crl (hash: +OAwK3pmTGMWPWyLRxpb3xBfhdOeJ3vBUvG/XgJQ0Nw=)
2: B27ED5E6C11311F089B2CF23C4F9AE02.roa (hash: 7fhu/OYQrcFPMsnlICq0uC4gks0i2x0hGeXI57B2Rwc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.crl
rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4130, serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2
Validity
Not Before: Jan 17 06:44:23 2026 GMT
Not After : Jan 24 06:44:23 2026 GMT
Subject: CN=696b2fc7-d821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:0e:e6:96:8b:ba:36:97:93:0e:0a:75:e3:
19:7d:67:8f:47:b2:9e:dd:26:ee:76:8c:dd:9e:de:
5a:40:59:3c:2f:79:42:3e:da:2b:79:60:3d:ba:61:
14:17:ee:b7:24:d0:52:06:0e:a9:0b:7e:f1:5e:5b:
be:f0:6d:74:32:95:8b:a7:8f:f5:29:7e:40:41:3b:
56:61:07:e8:84:f8:4d:15:00:2a:96:cd:d9:b6:2d:
f4:b0:43:8d:cc:7e:b7:8e:74:21:27:ce:07:2b:f4:
ad:1e:87:6b:1b:90:2e:22:a9:5a:e2:0e:32:7d:66:
dc:d2:74:70:55:ad:b1:51:74:3c:7e:eb:0a:36:25:
88:cf:3b:18:29:18:56:c8:b9:b7:a4:8a:93:ed:d7:
9b:31:3a:df:e5:ac:6f:b6:68:95:73:75:7f:6a:d8:
c5:f7:03:b2:e6:14:fc:d8:42:96:99:cc:69:fa:95:
31:a7:49:c6:99:3a:f0:37:fc:31:73:34:6b:76:89:
57:9b:99:ed:63:73:5e:5f:56:d0:a0:f9:61:38:db:
ed:8f:36:86:fd:32:37:08:22:f9:64:78:6b:ae:4d:
f5:dc:03:3c:c3:0e:3c:09:e3:42:8a:ca:57:4e:cf:
30:df:fb:75:8a:01:ec:d3:ff:df:11:97:db:b3:f5:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3E:04:21:08:02:D3:3A:49:C9:E3:DF:37:6A:F1:8E:E5:D0:A9:CE
X509v3 Authority Key Identifier:
keyid:88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:be:2c:c0:95:dd:e7:14:6d:21:39:2e:64:b6:79:af:86:60:
b8:f1:1d:2f:c8:cf:90:22:5c:b3:9a:2a:b8:7e:e1:36:4c:1e:
4a:3e:79:6b:5d:15:46:ed:4a:52:fc:7c:e7:4b:ae:ec:71:3a:
84:cb:1e:cf:65:e5:79:71:f3:65:92:9c:af:59:70:a7:4b:4d:
c6:ca:ef:28:7b:82:73:94:36:85:e6:7d:2b:7b:99:b6:f0:d8:
79:7d:61:dc:44:c2:05:17:48:ba:55:a7:46:88:10:4b:f6:98:
68:87:fd:46:03:2c:d0:9f:c1:47:20:12:46:fd:ec:c7:11:cd:
c1:e3:37:de:e0:0d:bd:67:10:36:26:2e:21:22:a4:2c:1c:ab:
b3:71:28:6b:8e:36:13:7f:a9:76:ad:a9:37:2b:a9:db:64:fb:
c0:32:a2:0e:5a:25:d9:8e:80:3a:f5:5d:8e:ec:43:1a:99:c2:
c7:20:46:1a:26:ab:ad:75:09:97:06:2a:83:97:32:ab:27:d3:
5d:ab:18:98:a5:1a:50:71:55:e3:cb:77:2e:b4:41:b0:87:9f:
92:cd:5b:8d:b6:9d:fc:b8:86:76:57:c6:2f:e6:f2:85:0b:03:
fc:68:97:f0:b6:8d:fc:e4:2f:c3:14:3e:66:88:d7:23:28:c6:
f8:b5:ec:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:15 2026 by rpki-client