This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
File: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json)
Hash identifier: +02k8kFRlgTfh1yRO3gHwak6ZCo77+iUHRaaMK+Fa6M=
Subject key identifier: 0D:81:95:9F:50:DE:0A:65:FD:3E:E9:43:63:22:C0:84:2B:B6:1B:1F
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
Manifest number: 0105
Signing time: Sun 25 Jan 2026 04:24:27 +0000
Manifest this update: Sun 25 Jan 2026 04:24:26 +0000
Manifest next update: Sun 01 Feb 2026 04:24:26 +0000
Files and hashes: 1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: 5T+UUf219ecfZynYxK4ExP8RW/O2mR0NmrOUuPENWgs=)
2: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: VfnSvDUvHKrYhNHc7vXNPSVppqVaI6SmYJprBmoGKlM=)
3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: /deQI9TcHTHxlvzCNYanJbYW7e/aSJZiDaf6RgvHT6g=)
4: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: WBiQbxmKfw0D0XJ4l3vBPQQR/fNPllSnLo2npN/9Q8w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Validity
Not Before: Jan 25 04:24:26 2026 GMT
Not After : Feb 1 04:24:26 2026 GMT
Subject: CN=69759afb-0d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:ad:e5:22:39:54:d9:e7:43:04:7c:2f:8d:
0f:2c:e9:07:b7:0f:06:e2:d0:68:91:86:5f:a4:c6:
2a:51:49:8b:5f:37:77:a9:62:90:99:f9:5f:d7:e2:
e5:91:65:19:d5:c5:43:9e:79:f3:f7:26:02:af:63:
3d:f4:70:4d:7e:bd:25:5c:89:aa:e1:9e:3f:68:af:
45:a1:8a:31:ec:bb:fc:f8:25:31:7d:c1:0f:29:88:
61:1a:31:e2:78:9d:ad:d1:4f:e0:ec:87:90:65:2e:
5c:54:ed:23:9d:bf:b7:8d:5c:11:da:1c:16:52:cd:
d4:51:c0:0a:0d:15:bb:60:4b:06:e6:4e:aa:49:11:
58:31:90:a8:7d:1c:dd:1b:b6:98:3d:d3:bd:1e:7f:
3c:35:b5:e1:52:62:0f:bd:bf:27:a4:73:02:13:0d:
73:ec:32:1c:94:b0:98:41:7a:a2:7b:a5:06:99:33:
34:1f:f2:07:f2:67:1b:f7:0d:fd:69:f9:b9:0c:6b:
89:c6:1a:20:5d:31:e4:6d:46:e9:c5:78:b5:48:4d:
c9:72:da:85:e7:fa:4f:2d:26:0f:24:c6:8d:28:3c:
dd:32:9f:b4:99:4f:84:2c:ef:e6:9a:5d:8b:2e:40:
9a:fb:6d:93:e7:cf:f1:1b:71:61:12:1c:6b:b6:a6:
7c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:81:95:9F:50:DE:0A:65:FD:3E:E9:43:63:22:C0:84:2B:B6:1B:1F
X509v3 Authority Key Identifier:
keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:46:ed:a3:a0:88:9d:f8:39:a8:f8:e9:f2:41:17:56:49:92:
c8:b4:74:37:76:27:0a:81:51:7d:f1:0f:f1:8d:c8:30:9c:2a:
ea:08:e2:f2:a5:40:71:dd:e2:67:1a:0c:b5:bd:80:05:8c:5e:
27:f3:41:33:9a:4f:36:87:7d:90:d2:fd:b6:c0:81:cf:a2:28:
ac:42:3b:76:25:58:98:47:28:a1:5a:65:68:ae:1e:ac:97:b0:
d4:04:76:a0:7d:74:d1:86:84:fa:63:fe:b2:8d:ce:fe:c3:e4:
b3:2f:3d:d8:6a:27:97:3b:4d:87:6b:e3:34:e9:ef:f0:8f:97:
e4:49:2e:83:5f:04:26:74:40:9a:1a:6c:99:f5:69:47:a5:fb:
05:07:62:d6:76:01:49:36:49:6f:b6:87:b8:b2:e6:4b:d2:4d:
fe:10:b5:66:e0:d6:5e:f7:53:3d:dd:de:84:9d:7c:e0:31:87:
24:8d:5f:da:be:e0:ed:ce:3b:3b:69:08:01:13:c5:a0:34:85:
b9:7c:e5:1d:b9:74:fe:c9:00:1b:89:ea:d0:a3:a6:39:13:62:
d3:43:f5:5b:14:b0:31:e7:20:f0:04:17:d9:d1:03:55:d9:77:
05:38:09:db:00:0d:f2:af:9e:a7:42:44:6f:d9:1c:e6:79:bd:
44:86:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:07:09 2026 by rpki-client