This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
File: lA0nrhRKrcqeNFLLOMMjasv3Als.mft (raw, json)
Hash identifier: zEOJ6PrvWgjcTnT5PuBN70WWj0lnca9oNH+l31SOFJs=
Subject key identifier: 0A:A3:BE:9B:E8:FE:5C:0A:E5:72:DA:62:6F:A8:4D:2B:72:B3:B1:AE
Authority key identifier: 94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B
Certificate issuer: /CN=A919B460/serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
Manifest number: 0B
Signing time: Fri 23 Jan 2026 07:06:41 +0000
Manifest this update: Fri 23 Jan 2026 07:06:40 +0000
Manifest next update: Fri 30 Jan 2026 07:06:40 +0000
Files and hashes: 1: lA0nrhRKrcqeNFLLOMMjasv3Als.crl (hash: 6eoshF7Z+doaloliY/5QDe3/1GU5XYJ9+xdEsApdu74=)
2: 4BE78CE0ED2A11F08C16C3A8456F56BC.roa (hash: 330aH4UPnOEaUrWzXgQByCgb0v3T98ndLyMTMHzMXrA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl
rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 07:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B460, serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
Validity
Not Before: Jan 23 07:06:40 2026 GMT
Not After : Jan 30 07:06:40 2026 GMT
Subject: CN=69731e00-572d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:95:20:a5:d3:5e:18:50:30:18:e2:ed:96:
bc:3f:44:d5:16:93:4d:05:54:51:23:b7:f6:fb:e0:
ce:33:27:ed:53:e5:85:4d:00:ca:4e:20:8f:b6:ec:
b1:3b:c5:87:4e:55:d3:46:de:64:26:ea:9a:75:0d:
3c:2c:14:f4:65:2c:e9:67:cc:c0:48:cc:df:95:3e:
28:cf:d9:78:87:95:9a:ce:b9:bb:ab:30:6c:93:70:
34:20:cc:b3:3c:86:b7:3a:20:29:c5:51:01:15:68:
ae:c7:f4:b9:8f:03:dc:9d:4d:12:e5:a7:f9:da:61:
8d:78:d4:17:44:24:d3:4e:d0:9d:ac:51:5c:d3:87:
e0:06:c0:d4:2e:20:c5:01:48:7f:5e:e0:16:c7:96:
cb:9c:45:d4:76:c6:54:e4:c5:3e:53:7c:a8:aa:37:
a0:58:cf:79:58:59:e5:50:01:8d:43:14:ee:6f:fb:
f8:3b:53:6f:5b:1d:c1:1c:82:32:4e:8e:fe:06:32:
aa:04:8a:e0:ec:c1:28:ff:3f:59:a6:a9:f9:0a:31:
69:37:db:2e:39:2d:33:ea:33:e9:14:93:72:6e:24:
6b:c1:7f:2e:e0:9e:60:1b:d2:bc:53:58:3d:f0:18:
75:52:5e:e9:cf:b1:e6:77:36:1f:3b:d1:18:e2:6b:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A3:BE:9B:E8:FE:5C:0A:E5:72:DA:62:6F:A8:4D:2B:72:B3:B1:AE
X509v3 Authority Key Identifier:
keyid:94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:82:7a:87:2c:de:ae:a2:5a:77:94:d4:0b:36:dc:24:b1:e0:
6b:17:2f:1f:35:69:44:0f:e0:90:b8:a1:52:b1:98:f9:92:fa:
7f:ec:22:ad:ad:5d:7d:d1:40:c8:f3:b1:6d:12:37:b2:0c:e1:
26:80:83:0d:45:28:32:07:b3:bb:f3:63:59:5e:c5:a0:b2:e0:
d0:2d:58:52:cd:d4:cb:3b:07:ed:0f:cf:1a:ad:44:79:be:27:
b5:90:58:85:c8:51:0f:71:8b:5e:28:cb:50:2b:48:1e:ca:8a:
49:27:8e:c1:38:1c:24:5d:4d:35:a0:d3:36:9c:d4:46:13:4d:
0d:73:3d:e5:8a:d2:0e:3d:9e:ef:6a:73:dd:96:56:04:8a:da:
be:23:6b:50:67:fd:ac:f8:4c:f3:e5:db:08:d4:f0:8c:fe:c6:
ec:e9:c6:98:5c:3a:e5:d7:78:e7:01:65:36:11:21:5c:a8:85:
6a:2e:4b:4c:1f:fe:7c:95:f9:75:16:65:65:6a:a3:f2:01:46:
96:95:c8:d8:4e:b0:33:14:d6:2a:44:15:3f:b3:8b:7c:ac:35:
f6:22:72:22:1f:49:b2:9a:1c:d8:ab:c7:42:50:c1:10:90:5e:
53:ed:4b:77:e5:37:ca:84:55:8c:0c:0a:34:ea:9b:7d:22:4a:
41:f3:33:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:26:07 2026 by rpki-client