This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
File: A43gleg_bKbmOl8jbnsi8v-ZG74.mft (raw, json)
Hash identifier: ceFkUXlHWFi1amiyefME0dbc2Hleot+tnti4hBRXVzA=
Subject key identifier: D7:E3:EC:3F:88:73:F5:F9:A6:5D:DC:04:4F:F9:FB:29:80:F9:02:6F
Authority key identifier: 03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE
Certificate issuer: /CN=A913384E/serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
Certificate serial: 06CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
Manifest number: 06C3
Signing time: Sat 24 Jan 2026 21:33:27 +0000
Manifest this update: Sat 24 Jan 2026 21:33:26 +0000
Manifest next update: Sat 31 Jan 2026 21:33:26 +0000
Files and hashes: 1: A43gleg_bKbmOl8jbnsi8v-ZG74.crl (hash: oGq5MGjn1/JwFRpEIAe4wCzPvrPmKerkseugZy91hOc=)
2: FCB378AC8EF411EBAE4DC623C4F9AE02.roa (hash: NEghmZK6SR0tR3ZI4129y+/95/Ec7cMoQlur8P+TYRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl
rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1741 (0x6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913384E, serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
Validity
Not Before: Jan 24 21:33:26 2026 GMT
Not After : Jan 31 21:33:26 2026 GMT
Subject: CN=69753aa7-b46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:65:46:6c:8b:6a:c0:92:d1:e6:96:a7:08:
20:dc:99:28:84:bf:9f:81:ac:78:63:c6:3d:8d:0f:
02:18:16:d6:72:74:71:1e:17:fc:e7:f4:7b:a8:ea:
4a:0e:73:97:5d:b1:dd:b6:97:8d:b7:bf:12:92:ac:
ca:56:26:a9:14:38:58:53:82:31:88:f5:ea:db:ee:
62:e7:e1:64:9f:ff:bf:7e:5f:c3:72:2d:61:7d:9b:
35:b5:ff:d4:02:71:ef:1b:2c:5f:e2:3e:26:f5:ae:
b7:19:52:9a:96:ac:fd:26:91:28:97:8c:0a:3f:c7:
84:0e:42:a7:1d:ae:aa:1a:52:f3:7e:0d:e7:e7:8b:
31:42:ac:e6:54:08:ff:62:84:2e:c2:42:9c:fd:c8:
40:44:a6:dc:15:b7:ee:f3:cb:08:b0:f7:0b:3f:d3:
b5:5d:0c:4e:71:93:1f:dd:63:b7:f4:01:f1:c1:37:
a7:ee:93:76:e9:f2:17:c5:8a:62:49:1a:50:7d:15:
2f:4d:d6:06:6f:cd:9d:2e:5e:e4:81:7b:d9:d9:8f:
67:6c:62:e9:42:d1:e4:34:8e:c0:d1:2c:01:47:53:
27:aa:16:19:a9:a1:07:69:bc:56:96:55:6b:a5:a0:
11:15:28:bd:0e:83:fc:ca:9b:8c:b3:a1:83:7d:3f:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E3:EC:3F:88:73:F5:F9:A6:5D:DC:04:4F:F9:FB:29:80:F9:02:6F
X509v3 Authority Key Identifier:
keyid:03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:06:9d:d6:6e:a9:6a:7a:7e:1f:62:86:a5:6c:bf:d0:7c:4f:
81:2c:4e:c3:db:26:ce:45:4b:04:36:e4:be:b1:71:1b:be:dd:
5f:c7:ce:8d:0e:30:68:82:00:90:e2:83:27:16:a5:36:8c:09:
fb:3d:dc:7a:1f:8f:79:58:be:06:e2:a2:ac:a8:65:bd:54:8f:
95:87:f1:9b:24:38:1d:3f:a4:63:0b:8d:e6:f0:87:fc:86:d4:
f4:5c:a3:43:16:d2:4b:8a:c3:16:18:bf:8c:15:21:be:13:3e:
cd:23:5b:f1:2c:bf:22:0b:d3:5c:42:e0:5a:c4:78:dc:1b:65:
90:2c:a1:7d:c7:84:96:07:88:d5:0f:ff:be:0f:bd:de:29:bb:
34:1e:76:33:ef:6f:13:12:ba:d4:6d:a2:f3:3a:5e:82:e5:46:
eb:0b:4a:1e:b0:f7:7b:b7:95:87:b2:7a:fa:5c:66:23:3a:fc:
bd:37:9b:9c:32:fe:8e:59:1e:80:77:65:62:b0:9b:7b:aa:22:
c4:07:29:9a:25:37:d4:a8:2f:8f:46:8c:ea:6a:42:c8:ee:ca:
06:5d:fc:44:8d:11:ec:03:72:15:7e:dc:96:58:73:78:a3:f0:
68:d1:ca:05:a5:bc:ab:3c:94:c3:03:21:d9:7b:87:b6:30:48:
1e:cc:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:41:17 2026 by rpki-client