This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
File: lDrZvGF3q4wvjoExwUpUZexClU8.mft (raw, json)
Hash identifier: AA6Ty1x25LAAtLFhpIlOroZXcOm4mS3FeN+hhmTsqMk=
Subject key identifier: 6A:0C:71:C3:B6:75:73:97:34:16:64:7F:05:B4:4F:AE:4A:16:0C:C8
Authority key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
Certificate issuer: /CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Certificate serial: 01B1
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
Manifest number: 01AC
Signing time: Sat 24 Jan 2026 18:13:07 +0000
Manifest this update: Sat 24 Jan 2026 18:13:06 +0000
Manifest next update: Sat 31 Jan 2026 18:13:06 +0000
Files and hashes: 1: lDrZvGF3q4wvjoExwUpUZexClU8.crl (hash: MgrQICGHRb6VYwQsLQYWE0xbo/DBTto82SUQV6mrCK8=)
2: 203DB338782111EEAFDDBD86C4F9AE02.roa (hash: ykJXAmgC9kF9NQ7NL49IYzkwdwdEbjDilRroROFuhv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl
rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158568, serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Validity
Not Before: Jan 24 18:13:06 2026 GMT
Not After : Jan 31 18:13:06 2026 GMT
Subject: CN=69750bb3-4952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ff:e0:1a:98:c9:e2:13:05:0b:f0:4d:b5:7c:
06:5d:b2:ed:2a:d0:3f:ee:89:35:6e:40:46:b6:ac:
57:b0:e3:d9:08:f2:ff:db:8b:7f:80:7c:97:3c:06:
52:92:06:04:26:fe:73:23:94:ce:39:10:bd:a1:b3:
e7:d8:d5:80:c0:c3:86:b1:59:9b:06:3b:46:f6:a1:
5e:56:8d:64:f1:41:88:f4:cd:a3:c6:79:68:8c:83:
77:3b:c5:a0:e5:9f:08:2f:5d:16:7a:8d:b8:2d:51:
32:57:4f:5f:06:e4:53:a5:b3:6a:14:a3:87:e3:ad:
9b:85:fd:74:5d:af:56:64:06:c0:f9:98:f5:50:5f:
6a:5b:c9:d3:2a:6f:e2:af:81:e9:0c:a6:24:0c:9c:
26:e4:cc:da:fc:6d:0c:9a:72:19:38:b5:38:16:e1:
63:33:6e:e3:27:47:48:e5:6d:ce:e6:d1:37:3d:a1:
d5:c2:98:37:6f:1a:7a:85:f2:df:ea:f9:b5:64:4f:
ea:93:b3:b3:66:1a:c2:a5:b9:87:3b:41:d1:f2:03:
04:13:de:9f:56:c4:51:ee:ee:44:e3:d7:4a:fa:6f:
bd:42:2a:6b:96:ff:3b:a0:ca:53:bc:fa:e9:ba:2a:
dd:fe:9a:e2:c7:e3:22:f4:49:a8:0d:40:f4:71:d2:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0C:71:C3:B6:75:73:97:34:16:64:7F:05:B4:4F:AE:4A:16:0C:C8
X509v3 Authority Key Identifier:
keyid:94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:bf:6f:1f:8a:ae:63:ba:04:1b:46:31:be:0b:a7:a3:18:c6:
09:4d:c1:9c:09:60:d6:e3:28:87:a8:e7:96:4f:d5:fe:6a:67:
0d:8a:ba:b3:c2:36:56:3d:9b:c5:17:4e:92:8d:36:8c:27:8b:
c1:56:da:e5:fb:9e:d8:0b:18:3c:6f:a4:79:65:56:91:66:dc:
92:f8:f4:26:3f:0f:f9:e8:d3:ec:42:0a:7b:da:2f:5f:60:42:
4f:6f:3f:52:ec:c2:c2:c3:5e:62:9d:12:9c:11:a3:e6:fa:fd:
e0:bc:bc:e1:60:21:bd:ae:cc:60:c5:6d:ce:86:52:d3:96:9a:
05:33:44:85:e1:48:94:78:a6:02:0f:16:c3:0b:50:66:48:b6:
2d:51:b2:58:a8:f0:6a:2f:dc:16:80:37:92:30:c2:ca:8c:73:
7c:18:1f:74:51:55:5d:22:8a:35:7f:a2:99:47:8e:c2:91:de:
3a:46:ff:90:25:27:d1:f1:1b:e6:b9:11:4a:a7:c8:36:f8:24:
00:90:5b:41:7b:c0:cb:6c:27:53:69:4b:8a:8a:b0:1d:b4:c6:
d5:40:0b:02:42:bb:eb:22:ad:e9:19:72:43:fe:0b:29:e4:1c:
63:65:54:08:75:ef:39:ed:20:32:6c:ec:39:77:ef:72:a3:70:
18:45:23:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:18 2026 by rpki-client