This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
File: 4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json)
Hash identifier: jK8HSF4ZAN5NDh0YQvSQdfx3eZDkH6Ers42PoW5DOeA=
Subject key identifier: BE:A3:4A:DE:25:72:94:4D:2A:A5:FD:A2:E8:D4:02:29:ED:40:02:A8
Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Certificate serial: 0239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
Manifest number: 022D
Signing time: Sun 25 Jan 2026 01:22:09 +0000
Manifest this update: Sun 25 Jan 2026 01:22:09 +0000
Manifest next update: Sun 01 Feb 2026 01:22:09 +0000
Files and hashes: 1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: GxjiSTTRhVE0RAIi27ykBVrEd20Oh6YsFUHK7DC0XNY=)
2: 0BBC997C5DB911F0A54D4C6FC4F9AE02.roa (hash: g6pquqeh1IhUuquygrP9Vdo65/Zud1vKIjoHKRNQNOA=)
3: 0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (hash: YIHS3PAvaz4V4QmFJCk8b1AkmK5GNgS8/DelBF3BA28=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl
rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Validity
Not Before: Jan 25 01:22:09 2026 GMT
Not After : Feb 1 01:22:09 2026 GMT
Subject: CN=69757041-e2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:74:0e:a1:84:3d:21:f8:13:60:e1:9f:6c:
77:46:64:94:36:6c:61:eb:7c:f5:78:5a:d5:d6:df:
20:b8:e1:0a:2d:b3:36:5f:9c:91:65:f8:51:4a:61:
8b:b1:cb:fa:7a:7a:80:4b:d8:18:5b:83:b1:14:b7:
04:45:38:1f:aa:57:11:93:da:96:7d:ec:47:00:4a:
78:6a:2f:76:54:ce:47:74:d4:16:00:4e:a4:ff:32:
55:5e:75:2f:a9:4e:1a:0c:b6:54:03:44:e8:80:6c:
24:25:3a:f0:71:4c:24:24:51:7d:0b:14:d8:8d:74:
f8:67:50:25:75:49:61:0a:9c:63:b5:39:0a:e2:83:
a2:6c:b1:96:76:00:1c:a4:53:3d:ba:dc:65:46:0e:
7c:a6:69:b2:20:48:a5:70:90:fb:34:7e:be:55:ef:
b3:0a:55:b7:92:06:34:3f:3a:a5:29:57:87:f6:bf:
09:7a:fa:aa:cc:84:94:4d:38:9b:e8:0c:fd:c0:94:
60:29:a4:43:9e:93:a1:85:06:23:bb:d5:e2:af:28:
b5:18:9f:e2:74:4e:8f:d2:6c:8a:50:82:04:a3:c5:
09:e7:ee:29:2c:e4:16:c8:5a:69:44:8b:c9:2c:74:
30:6c:8a:1d:37:a9:80:c6:69:1b:ec:bc:cb:85:07:
89:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A3:4A:DE:25:72:94:4D:2A:A5:FD:A2:E8:D4:02:29:ED:40:02:A8
X509v3 Authority Key Identifier:
keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:17:03:9c:ba:cc:82:a4:63:4e:73:a3:56:5a:27:fe:2f:e3:
3e:f0:95:30:7c:68:aa:39:bd:c5:58:89:d5:50:c1:3a:c1:42:
4c:f6:25:12:15:24:89:eb:6a:e9:b7:80:14:ed:bb:b8:8c:ba:
d2:74:61:9d:47:f0:0d:c6:e0:70:68:25:d0:84:5f:79:a4:1e:
a9:71:06:6d:87:e8:c6:b5:d9:70:61:33:a0:a8:8e:e3:98:b8:
f2:73:b2:b0:fb:3b:52:07:7a:55:ba:b0:bb:59:01:9a:cd:ce:
b3:6a:69:c1:2f:6d:e2:43:31:63:4d:93:ae:53:70:72:d9:5b:
9c:01:af:e1:44:aa:7b:13:c7:95:7e:62:b1:47:18:98:e5:ca:
e6:a3:c1:b5:d8:1a:dd:cd:e2:25:dd:5e:80:2c:6c:12:41:f1:
e3:38:50:5b:f7:35:1b:e9:0d:99:fd:f9:ef:f5:67:3e:ff:44:
b7:f2:9e:3c:df:8a:38:07:e8:10:37:2e:c1:cd:79:b5:e0:96:
c4:cf:a2:d8:d9:4a:5e:aa:c3:b9:5e:18:09:66:c0:41:4b:32:
92:5b:ff:8e:8c:57:18:2d:f8:bb:e8:49:ea:b2:8d:ab:b6:4b:
64:9f:0e:0f:55:92:23:4d:af:28:8e:d1:13:45:58:4f:5c:37:
c0:1f:48:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUIzMTAxMTAvBgNVBAUTKEUzMTY2Nzk2MDQ4MENGMDdFM0MyMkQ3OTBERTRFMjAx
RUY3MDQwREIwHhcNMjYwMTI1MDEyMjA5WhcNMjYwMjAxMDEyMjA5WjAYMRYwFAYD
VQQDDA02OTc1NzA0MS1lMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtq50DqGEPSH4E2Dhn2x3RmSUNmxh63z1eFrV1t8guOEKLbM2X5yRZfhRSmGL
scv6enqAS9gYW4OxFLcERTgfqlcRk9qWfexHAEp4ai92VM5HdNQWAE6k/zJVXnUv
qU4aDLZUA0TogGwkJTrwcUwkJFF9CxTYjXT4Z1AldUlhCpxjtTkK4oOibLGWdgAc
pFM9utxlRg58pmmyIEilcJD7NH6+Ve+zClW3kgY0PzqlKVeH9r8JevqqzISUTTib
6Az9wJRgKaRDnpOhhQYju9Xiryi1GJ/idE6P0myKUIIEo8UJ5+4pLOQWyFppRIvJ
LHQwbIodN6mAxmkb7LzLhQeJvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6jSt4l
cpRNKqX9oujUAintQAKoMB8GA1UdIwQYMBaAFOMWZ5YEgM8H48IteQ3k4gHvcEDb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjMxMC8zRUJEMTdDMkFE
MTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3Zmp3aTE1RGVUaUFlOXdR
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjMxMC8zRUJEMTdDMkFEMTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3
Zmp3aTE1RGVUaUFlOXdRTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnFwOcusyCpGNOc6NWWif+L+M+8JUwfGiqOb3FWInVUME6wUJM9iUS
FSSJ62rpt4AU7bu4jLrSdGGdR/ANxuBwaCXQhF95pB6pcQZth+jGtdlwYTOgqI7j
mLjyc7Kw+ztSB3pVurC7WQGazc6zamnBL23iQzFjTZOuU3By2VucAa/hRKp7E8eV
fmKxRxiY5crmo8G12BrdzeIl3V6ALGwSQfHjOFBb9zUb6Q2Z/fnv9Wc+/0S38p48
34o4B+gQNy7BzXm14JbEz6LY2UpeqsO5XhgJZsBBSzKSW/+OjFcYLfi76Enqso2r
tktknw4PVZIjTa8ojtETRVhPXDfAH0iQ
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:21 2026 by rpki-client