This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
File: 4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json)
Hash identifier: Fl1ZgdPnvfl32lj1zqqU7+BIpDz4KyWwAC2aPd9tYME=
Subject key identifier: B4:1D:91:5F:BB:30:96:11:42:C2:58:5A:B1:41:3C:4A:CF:E6:A2:31
Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8
Certificate issuer: /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
Certificate serial: 1F59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
Manifest number: 1F52
Signing time: Sat 24 Jan 2026 15:50:08 +0000
Manifest this update: Sat 24 Jan 2026 15:50:07 +0000
Manifest next update: Sat 31 Jan 2026 15:50:07 +0000
Files and hashes: 1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: UiEyVGheRBdwnV94k4tso3HNzZtUmMmgt7bGg5vqDz8=)
2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: jUBoH/NsE+2KO1Z4hcom5Ddnhv0XpfeG1RJbEdRDm9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl
rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8025 (0x1f59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
Validity
Not Before: Jan 24 15:50:07 2026 GMT
Not After : Jan 31 15:50:07 2026 GMT
Subject: CN=6974ea30-1e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:28:83:1f:81:2f:bc:fa:2f:34:07:cb:56:
33:17:90:04:23:09:a3:8f:90:5e:1e:31:3e:67:b4:
a6:d2:23:0d:35:74:34:48:8d:56:1a:c6:17:18:b4:
d4:e5:9b:6a:35:a8:37:d6:19:2f:3e:3b:6f:a0:cd:
64:7a:3f:4f:31:a1:be:03:14:0d:ee:42:62:cb:ad:
50:2a:9e:bd:92:68:02:50:be:5a:50:3e:74:a3:05:
c4:1a:fe:db:3e:c3:14:d6:9e:01:3e:f9:76:3e:d9:
0a:40:3a:1e:19:04:04:e3:72:ee:f0:46:0b:9b:74:
f5:f0:a0:ad:6b:6d:ef:8c:a3:ee:1b:18:f5:88:a7:
06:07:f1:c9:f8:da:94:f7:3a:21:58:73:c3:e4:f3:
dd:72:d3:6e:67:52:e1:e0:77:d9:73:42:8e:ae:81:
9a:dc:f4:8c:7d:6f:ed:b8:32:e7:d8:b5:5a:25:d2:
a7:6a:70:1c:0f:52:76:08:07:1c:ca:6a:b3:91:5f:
d4:ea:0e:fc:e7:42:ad:e7:f9:ba:ad:bf:c8:b0:8b:
37:12:ea:60:fd:4e:58:f5:49:fd:73:6c:4f:df:1a:
8f:43:50:1c:78:b2:50:29:8a:98:47:ac:cc:37:05:
b2:df:1d:52:82:12:d1:6f:55:18:a6:f5:99:63:3c:
77:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1D:91:5F:BB:30:96:11:42:C2:58:5A:B1:41:3C:4A:CF:E6:A2:31
X509v3 Authority Key Identifier:
keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a5:57:ed:13:b5:60:0e:dc:4a:87:65:29:c1:f7:ab:0a:3f:
6a:6c:e5:69:f8:7c:17:cf:fd:29:15:4c:17:a8:e3:1e:fc:f9:
7c:d5:e7:62:57:8d:01:58:2b:46:80:ae:cc:bf:e9:97:85:a9:
ee:21:e3:01:72:90:5c:00:74:a0:4d:d1:64:f7:6c:6c:49:5b:
32:af:5c:c7:92:12:ce:d1:be:9b:48:5a:75:ed:77:1a:73:d4:
26:60:17:a4:4c:21:f1:e8:91:61:34:29:4b:ef:9a:66:be:d7:
19:10:27:a4:5a:fd:10:0f:23:63:4e:a1:6a:e7:98:5e:61:33:
95:55:9c:30:2e:20:74:c6:da:4e:5a:32:64:e1:f1:e1:08:b6:
e1:ad:5b:7b:08:d7:cc:87:81:79:1d:51:11:5a:bc:d3:12:05:
a5:9c:65:15:79:df:4f:8c:e1:e9:47:64:2b:fb:9a:ee:43:4a:
b9:80:41:2c:50:85:9f:99:0a:f6:2e:1f:93:4a:28:0d:b8:d8:
a5:4d:15:f8:9e:cc:db:fe:dd:49:8d:5a:02:b4:4d:51:81:6b:
9a:83:c1:25:0b:b6:a2:12:1f:d1:a1:38:4c:0f:34:95:d3:90:
2c:86:75:23:4b:27:85:c9:a8:b1:97:2d:70:a3:aa:b8:32:2e:
29:df:74:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:09 2026 by rpki-client