This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
File: lC8l1zULID6onvLRzBULBbF7K4c.mft (raw, json)
Hash identifier: K0lLGtQf64RIlowd6YEgMbW5C4w8i83ACE4FUv7VH6I=
Subject key identifier: EE:1C:66:E7:B4:2A:0E:8C:1D:EA:94:A1:77:B2:50:BA:63:B5:20:06
Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87
Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87
Certificate serial: 3528
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
Manifest number: 3512
Signing time: Sat 24 Jan 2026 15:11:19 +0000
Manifest this update: Sat 24 Jan 2026 15:11:18 +0000
Manifest next update: Sat 31 Jan 2026 15:11:18 +0000
Files and hashes: 1: lC8l1zULID6onvLRzBULBbF7K4c.crl (hash: z21fqmN1kia81JZ/LNL9W44CJ/P9yHNyR0N8hnnQsr4=)
2: C098D762675111E9A0C4BB36C4F9AE02.roa (hash: Q+UMsPeyfxUm55P4fMvGVYmfZGcp4BR3EDI4z+jAzdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl
rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13608 (0x3528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FB1D, serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87
Validity
Not Before: Jan 24 15:11:18 2026 GMT
Not After : Jan 31 15:11:18 2026 GMT
Subject: CN=6974e117-59ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:2e:04:f2:b6:a1:37:37:7b:46:79:08:83:
07:15:11:29:62:36:c8:24:bb:56:56:32:f3:2c:8d:
18:e4:c6:95:81:81:73:0e:d9:07:a5:55:19:ea:37:
dd:fc:f9:a2:d9:a9:56:e3:d6:8d:c5:cb:29:72:36:
00:89:f7:c5:49:ab:2e:21:b0:5a:68:af:82:0b:3e:
7f:59:03:c1:80:2c:b6:77:c5:70:de:63:cb:eb:93:
85:04:e0:be:aa:d5:19:8b:ed:43:df:91:51:8e:92:
22:94:08:b9:de:8a:ae:8a:72:98:1c:fd:78:8a:36:
0c:e4:ef:6f:0b:67:34:b8:1a:3e:97:5e:b0:66:48:
34:0a:c6:5d:aa:08:c8:b1:8a:6c:3c:0d:59:14:bb:
bb:28:b1:f5:32:b9:c7:fb:53:4d:04:8f:95:36:3b:
70:c9:ef:b7:89:1e:83:10:e6:7f:e1:41:64:89:52:
fa:1b:de:40:19:3a:1d:c8:22:fe:94:38:7e:af:d2:
a3:e8:26:c1:d8:18:21:42:c8:0e:1c:c1:2c:7e:23:
8d:9d:3a:95:65:29:c2:5e:cf:79:57:08:57:c0:6c:
47:40:c9:7d:ab:4d:71:c8:51:0e:54:0b:7c:a0:19:
0d:a3:57:41:5a:27:9b:9d:10:64:8a:79:c1:6e:2a:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:66:E7:B4:2A:0E:8C:1D:EA:94:A1:77:B2:50:BA:63:B5:20:06
X509v3 Authority Key Identifier:
keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3d:88:99:bd:52:12:54:da:be:dc:46:84:d2:0e:27:29:8d:
6c:59:9a:4b:32:1d:b8:46:a8:b3:0b:e2:77:95:4b:62:52:01:
af:55:a3:09:46:fe:8c:ae:46:ac:a2:41:e1:50:5c:c2:77:49:
40:43:ac:87:ea:2f:7c:fc:7f:be:83:76:73:20:a7:ea:06:bf:
a7:b4:42:f7:bd:64:37:8c:a3:77:65:bc:00:17:4e:16:0d:41:
e9:0b:8e:58:bf:fb:91:6e:24:a8:f3:b0:19:a8:20:a0:65:e8:
80:23:a2:58:13:1b:b7:07:fd:8f:1a:90:a2:76:21:b8:9f:a6:
d9:8f:5a:ab:a2:7b:d0:d2:ad:df:16:16:47:be:04:44:e7:36:
0e:b9:15:2e:11:4e:3d:80:02:06:f0:08:f4:03:bd:9d:ed:a5:
42:7f:64:b1:70:b7:ba:c3:a9:23:4d:77:e9:f7:b0:1e:75:6c:
5a:3a:29:fa:f5:e0:a8:05:b8:bf:bb:49:c4:10:b2:f6:f9:55:
72:df:1a:67:3e:85:ce:9a:37:98:7a:91:8e:f1:7c:ea:91:d2:
63:5a:d8:4b:d4:e9:41:e4:6c:12:68:5d:15:fc:24:c1:d6:6c:
1d:ea:33:00:04:75:ee:c9:f7:16:94:ed:be:6d:a9:0f:2c:e5:
27:9f:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:48:05 2026 by rpki-client