This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
File: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json)
Hash identifier: qyHhqs9N0il9zlSuKMoIDHAeLkKFcsh5GHQpggImAAQ=
Subject key identifier: 70:DD:52:C3:1A:DB:26:41:38:82:2E:48:26:1A:D2:A3:10:D9:DB:7E
Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
Certificate issuer: /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Certificate serial: 081E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
Manifest number: 0816
Signing time: Sat 24 Jan 2026 20:22:34 +0000
Manifest this update: Sat 24 Jan 2026 20:22:34 +0000
Manifest next update: Sat 31 Jan 2026 20:22:34 +0000
Files and hashes: 1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: lD8r3oQP5cNz4KVwGDD+U184nnjhYptlc9uofqG+1Fs=)
2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: pUsMoQNYddbaBRncCe385CofEgc91nu8PjnLEgH0J9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:22:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Validity
Not Before: Jan 24 20:22:34 2026 GMT
Not After : Jan 31 20:22:34 2026 GMT
Subject: CN=69752a0a-9e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:d8:c8:c8:67:70:f3:ac:85:6e:f9:18:c9:
62:66:54:76:4b:9e:4d:e2:02:97:8e:ae:47:63:53:
79:ed:6c:ef:89:13:c0:75:99:d2:cc:1c:b9:dc:41:
77:5c:8c:ca:4c:3a:a9:8b:3b:5d:d2:ce:37:3c:94:
55:8f:8d:6a:bb:12:2d:f5:82:19:fa:b8:18:f5:ad:
92:05:bb:db:0c:2b:56:dc:21:24:76:7b:9d:2d:99:
1c:ff:e6:4a:30:da:e6:8d:44:15:58:aa:2e:84:b0:
b1:63:49:1f:92:64:67:b5:1e:8a:29:69:d4:5d:86:
c9:45:0c:74:9e:7c:89:c4:e8:5e:c8:7e:f8:d3:27:
6b:7d:66:56:83:a2:08:1b:7c:b4:7d:44:2a:fa:08:
d5:02:c6:75:f1:2d:be:87:59:30:2c:33:97:c1:fe:
6c:4d:bd:8d:05:6b:aa:f6:4a:3f:8d:cf:02:7f:5c:
dd:b2:f5:54:36:07:96:47:e1:ae:8d:03:21:a7:94:
f8:ad:83:38:56:6b:60:31:e8:09:66:e1:71:9c:e2:
18:82:b6:11:43:2c:8c:42:e1:31:ce:c3:16:54:15:
a2:b0:7e:b3:54:5c:13:b1:30:9c:19:3b:4b:26:3c:
ab:d2:71:58:ae:94:50:93:b9:ac:d6:43:60:42:ea:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DD:52:C3:1A:DB:26:41:38:82:2E:48:26:1A:D2:A3:10:D9:DB:7E
X509v3 Authority Key Identifier:
keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:82:de:70:5b:51:f4:75:f6:df:54:e0:3c:e6:3e:73:5a:27:
8b:a8:dd:21:b6:b9:be:e4:ec:9b:b3:ea:97:a4:59:7a:10:d9:
df:36:b3:7c:21:e5:af:ad:d0:5f:fa:5a:4e:c5:2d:6d:22:2c:
2e:b3:ee:b2:d5:38:0a:96:bb:60:cf:bf:f4:5b:ec:53:6c:78:
01:c1:56:9d:c8:79:db:6c:57:2d:ab:be:b9:8b:67:d0:ff:74:
2f:b1:82:dd:54:09:22:04:2f:e7:51:9b:da:ac:9a:a5:48:b6:
2b:c7:1c:87:03:b6:73:29:57:65:4c:a2:a1:ee:52:5f:24:8d:
89:67:97:b4:86:18:6a:b1:a0:08:c7:bb:2e:3f:e8:4b:92:44:
ff:17:45:29:7e:c0:a3:6b:22:c9:6b:7f:d1:50:09:cb:c7:68:
55:23:af:59:4f:14:5d:e7:ee:9d:06:59:fd:d5:30:7f:df:93:
79:1e:b9:5d:9c:03:f8:fd:89:dc:ec:eb:84:3c:95:b9:02:45:
65:73:63:cd:46:6d:e8:70:9d:b7:42:ea:2a:b3:22:58:0a:00:
ce:dd:5e:e5:ee:1a:a7:30:7c:b5:cc:2c:9a:bb:bd:9e:6a:e5:
c4:9e:c0:62:3d:5b:4a:8d:15:c4:20:4a:9b:a0:d2:fa:77:d2:
da:9d:d3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:45:50 2026 by rpki-client