This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json)
Hash identifier: v2deJO+FrHjztSwdRjHPevrfS8K56TDbsPJLyjQI3p0=
Subject key identifier: 84:85:D4:4E:D7:72:D4:F8:CA:1A:8A:13:BE:BF:3E:95:A4:31:5F:5A
Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Certificate serial: 0C2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
Manifest number: 0C1A
Signing time: Sat 24 Jan 2026 18:21:56 +0000
Manifest this update: Sat 24 Jan 2026 18:21:56 +0000
Manifest next update: Sat 31 Jan 2026 18:21:56 +0000
Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: T67voG4I5ou9LI2J24YMqXRJCmwIeTAOx2TBHhhIUE0=)
2: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: 1JZC+YNgjMx+K+MDr445Xif/I5gERZj+9WpcW7BqlVs=)
3: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: N0WCtgkaNZeOTo3I3oEHp89wJvvLye1ENYthm+qu0UA=)
4: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: E8AriLCWZxuvCsqIouWQqeJv8TlOzugnbqYiiRVnwpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3119 (0xc2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Validity
Not Before: Jan 24 18:21:56 2026 GMT
Not After : Jan 31 18:21:56 2026 GMT
Subject: CN=69750dc4-42ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:9a:2f:e8:c5:72:ca:33:8a:25:74:fc:bb:
e4:67:28:2a:68:ab:09:de:41:ad:ca:dd:6c:93:91:
c6:b7:c2:6e:f6:f3:32:b6:0b:11:fd:61:a4:6c:4b:
0a:91:0c:49:cd:d9:24:34:0a:18:76:b3:77:84:f7:
07:c7:d7:e8:c1:4f:5d:d1:ca:01:6b:d7:a5:17:3d:
8d:6d:31:22:ec:26:74:10:63:27:6c:c8:46:ca:14:
16:35:18:63:30:3e:99:ec:5f:f3:ba:24:f4:dd:4c:
ee:60:c8:67:82:1b:6b:c2:9a:ac:82:a8:e3:4a:1c:
9e:98:cf:30:b1:26:71:3d:40:20:33:0e:91:d9:8e:
7b:68:2c:03:04:a1:8a:11:b3:27:26:05:9f:37:a9:
87:11:d8:95:23:16:7d:bc:87:13:39:5c:79:dc:15:
06:7e:fb:3d:42:84:39:d0:d4:2e:7d:a4:86:e4:ae:
d6:87:b5:59:73:9f:ac:c1:2b:f0:b0:e7:2d:7d:e4:
a8:b9:99:41:fc:dc:84:81:d8:db:66:41:46:fd:bf:
a6:42:d1:63:78:b5:04:03:cb:ad:d8:05:78:e8:ae:
21:13:96:3b:83:0e:f8:7a:ad:fc:96:3a:e0:f1:3c:
1b:0b:f1:b6:ad:49:b3:b7:25:79:b0:f6:53:6c:96:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:85:D4:4E:D7:72:D4:F8:CA:1A:8A:13:BE:BF:3E:95:A4:31:5F:5A
X509v3 Authority Key Identifier:
keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:36:d2:0b:2b:9d:9c:ad:b8:4a:cf:3c:3b:0f:89:e7:14:e3:
ad:96:30:e2:4f:bd:ae:96:78:35:b2:b6:7a:75:16:a2:21:07:
df:6e:da:3a:64:21:8f:1f:4c:98:d8:4c:6b:63:f5:dd:60:6d:
56:60:a4:56:b2:6d:70:91:21:36:44:8b:03:a0:cb:9b:01:3c:
7b:0f:32:82:eb:99:94:b3:30:d2:85:56:ce:bd:3b:e1:bc:51:
d9:e8:bd:aa:99:01:0b:d2:12:85:18:d7:ac:7e:91:0e:21:26:
09:82:c5:c8:51:31:28:b3:10:ed:90:d4:35:9e:dd:5d:41:8f:
83:38:f5:de:20:0f:58:58:68:80:59:b2:ed:5a:1e:38:70:be:
df:49:09:46:6e:b5:27:4c:06:3a:31:66:13:df:fc:87:cb:a0:
90:57:41:0e:97:24:73:bb:81:ab:50:49:6f:70:d6:26:a1:fa:
8c:11:bb:90:2c:ee:ba:04:b0:eb:b4:d2:89:5c:48:00:86:4e:
90:99:f1:40:54:a5:2b:3e:0f:a2:da:98:78:82:dc:7b:84:89:
0b:da:04:ba:6a:c9:e2:6b:35:de:68:48:ad:00:a7:47:49:ee:
a1:de:2f:e0:53:e0:d6:77:5e:8b:0a:4f:7b:a8:e9:d5:fe:86:
09:93:ac:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:15:06 2026 by rpki-client