This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
File: plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json)
Hash identifier: xajYdWS4pHvA/yRFRKeiM+PSe9dwfDnSk03aMYqSJPo=
Subject key identifier: B3:73:0C:F0:85:F1:C5:49:65:8A:07:E5:A9:30:72:95:51:4D:5B:D0
Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D
Certificate issuer: /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D
Certificate serial: 289D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
Manifest number: 2897
Signing time: Sat 24 Jan 2026 15:27:30 +0000
Manifest this update: Sat 24 Jan 2026 15:27:29 +0000
Manifest next update: Sat 31 Jan 2026 15:27:29 +0000
Files and hashes: 1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: oVAiYCnPu4n/s8HQ46sc+Nu7k+ieMEH+O0uhJPJCzSM=)
2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: ilkJ29yBOqKW1VNl3LfMOLm13wPfo28yqbUOr5Kvvtg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl
rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10397 (0x289d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919986F, serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D
Validity
Not Before: Jan 24 15:27:29 2026 GMT
Not After : Jan 31 15:27:29 2026 GMT
Subject: CN=6974e4e2-525e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:58:b3:f6:07:ba:4d:75:55:56:b2:9c:80:
d0:35:1b:ec:1a:58:38:8e:97:88:84:3a:6d:47:f8:
72:42:72:6e:9e:36:80:10:5f:d8:85:c4:e5:8e:29:
fb:ef:58:59:47:8e:07:44:69:fc:09:a3:43:8f:f6:
d5:07:cc:00:e2:71:72:de:c4:e1:b6:0f:03:a5:6f:
aa:96:ba:08:3c:63:8a:d0:c2:cb:3d:c1:94:5c:01:
32:f0:02:63:44:5b:6a:5e:fb:f0:2a:d0:0f:96:34:
a0:bc:88:f8:d3:b4:6a:df:7c:24:06:eb:70:41:78:
e8:c6:ae:73:55:88:7e:73:ed:f8:0c:65:87:ae:fc:
96:fe:84:cc:f3:db:d5:ae:9e:01:31:31:08:a5:5b:
d4:0f:9e:22:dd:83:74:c1:ba:50:20:95:60:88:12:
45:74:00:da:55:b0:46:7b:01:33:6c:fc:2d:f6:2e:
1e:7e:fe:f6:c9:59:8d:69:e8:b2:3f:58:0b:ba:62:
45:97:fb:9c:3c:c9:cf:3b:9a:2f:eb:ac:1a:44:81:
49:ad:6a:61:72:0d:a1:cb:6c:f0:66:c6:1d:13:08:
b3:4d:1d:82:55:8a:13:97:b4:7f:31:3d:45:16:f7:
bf:e9:3d:e6:9a:62:cc:f8:6d:cb:92:9d:32:64:bb:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:73:0C:F0:85:F1:C5:49:65:8A:07:E5:A9:30:72:95:51:4D:5B:D0
X509v3 Authority Key Identifier:
keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:91:28:67:20:e2:4d:e5:f6:48:2a:4e:72:d9:c7:cf:c7:95:
2d:4d:57:d2:f2:5f:c2:0d:ef:c5:50:a0:36:16:d5:e7:a2:6e:
d5:89:81:73:f3:74:44:a2:35:48:44:0e:39:65:9f:aa:d3:b1:
d4:e7:97:8f:01:65:07:ee:17:0b:ca:6a:e7:81:a8:10:77:04:
b8:d4:7c:57:4c:89:e4:28:8c:65:3a:cc:43:6e:58:b3:be:fc:
a2:e5:18:78:b2:55:e0:c5:04:18:a7:bd:5e:74:f1:d5:89:14:
cc:cc:31:15:49:f9:77:5c:73:6b:cb:e2:73:04:47:44:03:65:
3c:e6:cb:9c:4d:06:ee:c2:16:c8:44:85:8a:29:09:f7:75:da:
9f:da:47:e3:5f:76:e0:b4:92:d1:c1:7e:d3:d9:05:68:15:ef:
a9:65:ed:c7:78:14:47:b5:37:b3:2e:f2:71:82:07:7e:cc:35:
6d:b2:2d:0c:81:ae:3a:de:3e:21:f0:b5:93:6a:64:03:17:6b:
e4:94:79:c5:bd:a9:52:f6:08:d1:c1:39:57:b5:ec:eb:bb:99:
d2:c7:fd:44:5d:51:75:51:2e:06:3d:3f:87:2e:e8:c9:0d:bd:
af:4e:5a:6d:e3:17:8c:0c:cb:c5:d4:15:e5:2b:11:0d:ea:ea:
ab:7f:f7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:17 2026 by rpki-client