This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json)
Hash identifier: vb5uOc3HZsW8lqbj96v4OOjiu4L4QgUMbSowCdCFxfc=
Subject key identifier: 4A:D0:C8:FC:E3:BF:DC:ED:6F:42:7B:E7:8C:9A:E4:B7:A2:7F:FA:11
Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
Manifest number: 0247
Signing time: Sun 25 Jan 2026 01:08:05 +0000
Manifest this update: Sun 25 Jan 2026 01:08:04 +0000
Manifest next update: Sun 01 Feb 2026 01:08:04 +0000
Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: Uc/dJkgJS4pjQNyOu5tdME1X93ZBamz0b14OwitbD3E=)
2: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: SRGoWxChP7e+9DgNFVadV9cBgB/2tWGPBAWl8n31NII=)
3: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: 9OZz5jF3wKw1CoZp9fYy/VeudY7hWDh1XxJPduifOg0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl
rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Validity
Not Before: Jan 25 01:08:04 2026 GMT
Not After : Feb 1 01:08:04 2026 GMT
Subject: CN=69756cf4-d944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d9:37:8e:d6:b5:ac:94:e6:96:54:1a:61:f3:
ad:81:3b:80:12:52:52:02:46:75:fa:fd:8d:69:a4:
66:29:46:c2:43:f9:dc:34:f0:ef:f5:61:c0:ea:5f:
b4:ff:e4:54:64:8f:88:5b:98:a0:9e:e5:d4:2a:53:
9f:d2:eb:cc:27:c0:cf:a6:c3:4e:96:8a:e2:cf:7a:
b7:26:85:2a:b5:fa:3a:fb:d7:d5:19:6e:a8:3e:06:
dc:67:a9:07:00:5a:2d:88:bf:a7:20:fe:f7:d5:d5:
7f:41:0d:2a:86:88:f1:94:ea:7e:2c:d6:92:62:17:
0f:d7:6a:e7:0d:4d:18:9a:97:08:a2:7b:be:68:6a:
5d:8f:57:85:9b:c2:a0:12:6a:1b:f2:41:45:91:40:
70:87:b9:2b:04:e9:34:07:5e:ef:c7:26:94:22:e5:
58:78:5c:e1:96:06:bf:f0:c6:bc:3b:da:e2:e8:4f:
21:7b:f5:13:60:f4:e8:45:77:8c:ba:25:65:6d:af:
ac:c6:16:e5:43:f9:c2:59:4f:47:b9:c0:fb:ca:9e:
43:55:67:a5:7c:bd:7c:e1:42:eb:df:11:1e:a8:73:
e6:08:8e:c4:e3:ed:52:ac:82:1e:57:70:c0:81:2c:
2c:d9:ad:0e:db:c2:35:d0:0b:e4:96:6c:bc:e6:4d:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D0:C8:FC:E3:BF:DC:ED:6F:42:7B:E7:8C:9A:E4:B7:A2:7F:FA:11
X509v3 Authority Key Identifier:
keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f4:0b:85:bf:6d:d8:4b:23:2c:b3:c4:48:2a:01:b1:12:31:
cf:27:54:e4:f3:b2:4b:02:65:a7:ad:db:ac:4c:ea:60:8c:b0:
fd:79:5a:7b:9e:4d:ca:7d:7c:68:72:fb:49:8f:d2:65:5b:05:
27:d0:29:0f:f3:b8:58:52:83:5b:41:37:7f:da:49:76:78:a3:
83:72:8f:bd:c6:df:17:61:6a:88:91:3a:9c:4a:76:9e:d6:6c:
a7:2b:f5:1b:a9:b9:c0:f2:10:ce:f9:e7:11:78:bf:48:c0:f4:
37:fc:95:33:a9:50:8e:cb:97:fb:01:55:04:c1:f9:bd:64:39:
d9:68:54:3e:ee:ab:24:0f:d7:2e:b0:aa:fe:cf:3d:4c:87:68:
94:4c:82:93:af:34:a7:28:a7:00:5d:4d:cd:04:22:b6:f8:c7:
e9:5d:d0:e3:c2:9b:03:12:1c:70:61:83:fb:40:58:d2:41:91:
63:f6:07:cf:b7:73:9a:06:de:de:e9:98:0e:82:d8:f3:60:98:
5d:18:e8:e0:13:60:b9:46:a0:ee:d5:d2:32:d6:23:bf:a6:de:
74:91:bc:38:1a:2b:1f:ca:bb:d3:4a:7c:e4:f0:bb:45:f8:24:
cb:16:1a:57:2e:da:0c:cb:99:70:a6:57:09:1a:1d:32:4b:70:
41:74:6f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:28:25 2026 by rpki-client