This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json)
Hash identifier: TWGDNcJ81rO5P4I/zVs/wxZkJGk9UsycRTJM9J24VAo=
Subject key identifier: FA:90:A7:22:1B:16:5A:76:CD:BB:A2:B1:E1:0A:14:D9:F0:18:0D:C3
Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Certificate serial: 0CE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
Manifest number: 0CCD
Signing time: Sat 24 Jan 2026 17:58:15 +0000
Manifest this update: Sat 24 Jan 2026 17:58:14 +0000
Manifest next update: Sat 31 Jan 2026 17:58:14 +0000
Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: GucS6b4F85xHSFoNHvs1z0Mto4zhqefhOsuCgaLy1Vs=)
2: B430443A324211EFB14FB614C4F9AE02.roa (hash: mSmKdhP1dOumHc/59nE808KhJQxB4mVR7KUP5N0koRQ=)
3: FB170730324211EFA9B5F949C4F9AE02.roa (hash: yYm1dMIQ816DxBHWaOlKO9yBaX3TNCa5zS93/rSk5Bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:58:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3303 (0xce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Validity
Not Before: Jan 24 17:58:14 2026 GMT
Not After : Jan 31 17:58:14 2026 GMT
Subject: CN=69750837-6907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:b8:ae:92:31:ef:9a:87:d5:e6:ca:d6:16:
80:59:9f:5c:af:e4:18:7b:f4:43:17:3b:23:00:e8:
3e:0f:bd:e1:17:1a:24:43:4d:ea:be:3b:ee:16:4a:
07:56:1f:d7:14:12:ac:83:eb:a6:01:8a:95:dd:f0:
19:3d:27:4a:08:7e:85:68:5e:54:14:0e:de:75:6e:
2c:47:c6:d9:c3:e2:d1:54:70:d8:fb:44:b8:ab:4b:
9f:a6:93:20:30:aa:ba:44:4b:d1:03:21:01:e1:52:
46:6f:48:39:60:8f:84:e5:30:84:e1:ac:33:e8:e7:
d0:2d:11:32:f6:44:22:88:c9:11:40:e3:68:d6:c9:
aa:18:d8:5a:e7:5c:4d:93:50:25:bb:6a:90:ae:ef:
f4:62:66:fa:e6:1d:53:d0:ba:1e:e8:16:2c:1e:96:
78:68:5f:93:97:d0:e6:ba:59:9b:99:a1:4e:d9:31:
34:a6:16:f0:bd:dc:a2:e8:d8:0a:be:60:6c:b5:a0:
f9:ab:d2:07:87:cb:2b:9b:96:15:f4:69:5a:4e:44:
d3:b1:b0:95:d2:fd:a7:29:58:87:dc:bc:83:e1:93:
7b:c5:9c:ba:16:6d:8e:6f:53:eb:0c:92:13:86:1c:
11:d9:79:28:07:d8:00:d9:49:bb:a4:6e:61:82:28:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:90:A7:22:1B:16:5A:76:CD:BB:A2:B1:E1:0A:14:D9:F0:18:0D:C3
X509v3 Authority Key Identifier:
keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e2:06:c2:02:c8:b3:5c:df:76:77:d0:1e:e8:99:52:28:3d:
1e:c3:9a:78:6c:04:9c:76:5c:0f:70:00:fe:c7:8a:5d:ba:21:
77:6a:c4:67:0d:fa:56:9c:b8:50:ba:7f:41:49:47:fb:00:5c:
63:5c:cd:24:cd:16:61:a2:1d:d1:d1:94:84:29:42:74:d7:5c:
20:11:5d:ae:eb:29:25:c5:90:72:07:68:e0:94:68:1f:f4:5e:
39:89:bc:f0:25:0f:ca:a7:b4:30:86:9b:3e:bd:56:c7:44:f2:
16:91:39:0b:1f:64:d9:ca:a9:28:ad:43:c2:0f:55:e8:32:8c:
54:e5:b2:f6:e7:d3:7a:81:86:12:47:96:43:46:5f:cf:2c:a0:
77:97:86:fc:a6:4c:7f:37:01:1a:ee:ba:04:0a:53:dd:df:47:
e1:6e:9c:1b:99:9a:4d:27:be:3c:88:20:2b:95:93:6c:46:a3:
7b:0f:e8:38:be:6c:f5:22:32:60:f9:a6:86:39:16:15:df:4c:
09:9e:e7:84:99:01:21:a8:2d:fd:9f:a5:c3:c0:b6:0b:35:c0:
3e:b8:a9:eb:94:5f:95:2b:98:43:4d:8f:2d:12:41:31:b1:b7:
ea:a5:ef:e4:dd:12:05:70:d0:5c:11:94:c1:aa:2a:6e:4f:d5:
39:0d:ca:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:11 2026 by rpki-client