This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
File: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft (raw, json)
Hash identifier: Oql3tfgbNorP+/4A4qsPi4r0jSQES/8lvhwK1o0Umbw=
Subject key identifier: 9B:E9:26:B0:6D:87:04:56:69:3C:B2:96:13:36:C1:7E:1E:8C:3D:9E
Authority key identifier: E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E
Certificate issuer: /CN=A9190059/serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
Manifest number: 20
Signing time: Sun 25 Jan 2026 06:53:31 +0000
Manifest this update: Sun 25 Jan 2026 06:53:31 +0000
Manifest next update: Sun 01 Feb 2026 06:53:31 +0000
Files and hashes: 1: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl (hash: u5yjU4EbLUzYHIIDabnQCBC5HxVP2qJ0ee9Tvv3ZyO8=)
2: 0DA28718CE5E11F084703925C4F9AE02.roa (hash: 8U8EBiVLGcGZamqQu9ebR7wEndmlf6Ty8cVKrFdTa4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl
rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190059, serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
Validity
Not Before: Jan 25 06:53:31 2026 GMT
Not After : Feb 1 06:53:31 2026 GMT
Subject: CN=6975bdeb-8d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:b5:7b:6f:18:54:cd:10:fe:9c:81:27:5f:
fe:23:6d:1b:cf:41:34:b7:a6:82:d2:e5:08:3f:85:
df:24:9a:c1:30:4a:07:8e:77:39:d6:5f:d3:07:b3:
e3:2b:ac:42:2f:1b:bc:03:2d:24:71:49:26:05:71:
82:af:34:2d:7c:cd:f9:26:cc:a8:73:5c:43:14:83:
bc:2b:8e:03:97:24:af:01:bb:d8:43:d6:f3:db:aa:
ec:e6:af:2b:6d:9b:cb:66:4c:14:83:34:a5:b8:aa:
de:28:b7:e0:10:60:c3:2e:23:f6:0b:af:e0:7a:ec:
06:be:34:63:37:b9:79:1b:05:f3:95:8d:64:9c:55:
95:90:cf:95:ec:44:05:16:af:4f:fe:ae:ed:1b:a4:
12:c5:0b:c6:bb:49:63:da:fb:c7:98:ed:d9:56:8d:
71:be:f3:6d:62:24:14:4e:49:7c:20:7e:c8:44:e1:
90:ca:01:1d:6c:69:66:57:79:05:32:75:e9:6e:af:
6f:f3:c1:7b:6e:e9:90:7c:94:d7:0e:95:38:b8:d7:
c3:11:7c:9d:96:57:37:97:0b:3f:9f:88:a7:3c:13:
f6:0c:fd:e7:39:8b:d5:76:9c:9d:c5:4b:f3:3f:9e:
2c:2e:71:ce:0a:13:07:ac:1c:6d:99:88:5b:90:88:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E9:26:B0:6D:87:04:56:69:3C:B2:96:13:36:C1:7E:1E:8C:3D:9E
X509v3 Authority Key Identifier:
keyid:E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cd:16:99:af:72:11:e5:bf:56:8c:31:71:7c:e7:eb:ae:68:
ab:a8:13:f5:b3:b1:b9:9a:21:aa:16:2c:b8:84:24:93:90:8c:
78:2c:e8:de:95:ca:c8:4d:a7:0d:bc:2e:e1:b4:cf:11:e8:ff:
69:b4:e5:ef:0b:5a:50:24:b3:dc:42:18:8c:73:c3:66:f3:7c:
ca:36:d5:55:f4:e6:c8:45:dd:ab:02:ae:a1:26:71:ed:64:ad:
0a:b2:dc:a1:32:1a:ae:9d:67:51:ca:2e:b6:3c:35:51:46:b5:
b7:6c:73:60:c7:13:2c:8f:cc:a3:63:5b:14:5b:8f:24:ff:17:
cf:b8:25:49:da:ab:3b:3d:67:52:00:f0:b5:2c:c8:b9:ef:92:
74:f5:c2:b4:d3:5f:6f:f9:b8:12:25:b1:62:e2:ac:c2:2e:b9:
ab:19:3f:c0:11:74:fa:d7:29:c4:1c:e8:98:db:a5:d4:a7:54:
0b:bd:33:b2:4f:f3:9f:8e:f7:69:09:2e:0d:7b:6c:6b:69:1f:
00:37:2d:4e:9f:4a:73:3c:d8:60:9a:69:4c:18:9e:a1:ef:ae:
0f:87:5a:dc:09:41:32:ef:25:48:b6:09:5e:0c:06:17:84:ea:
c6:0d:19:3f:77:1b:d1:15:0d:2c:2f:38:54:77:7e:d8:09:de:
65:5c:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:11:55 2026 by rpki-client