This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json)
Hash identifier: ybu56mtSA3QusvkfLmHio3f7f/8SoD04ktT+LfERBq8=
Subject key identifier: 67:5D:A6:A4:A2:1B:C0:A3:B6:79:8C:21:D3:4B:48:43:53:6B:B8:3D
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial: 0BDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
Manifest number: 0BC0
Signing time: Sat 24 Jan 2026 18:30:43 +0000
Manifest this update: Sat 24 Jan 2026 18:30:42 +0000
Manifest next update: Sat 31 Jan 2026 18:30:42 +0000
Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: DAHhl7OfXWyZHQRe8IsjJhjWrU4rQyNLOlSBhSjoOvc=)
2: 843804BE744C11F0B13EF277C4F9AE02.roa (hash: KVcRx1AIexKUEoEWUnnAhnjFkWCaA/g6jhGPzAyzQQ4=)
3: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: eX92U/H+ZCVecCeGgTVqWhOCqzFSaTsYmsLKYsy4M8s=)
4: 60CAF672CAC211F08083F41BC4F9AE02.roa (hash: kiwqoX3h4ubEB/f3uAb3AdDh++JWYwrrl7T90TiKXzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034 (0xbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Validity
Not Before: Jan 24 18:30:42 2026 GMT
Not After : Jan 31 18:30:42 2026 GMT
Subject: CN=69750fd2-4deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:aa:d9:8c:b4:16:ef:4c:6d:1a:df:a6:e8:
bc:52:8a:53:aa:b4:28:e0:97:8d:cb:bd:22:cb:a0:
05:5f:4e:fe:3b:e5:12:a6:cc:86:aa:ba:4e:3a:2b:
f4:96:06:f0:a3:3b:34:25:9a:89:44:fe:2c:f6:61:
2a:0b:9a:6f:93:b5:63:68:cc:46:ad:b3:ea:24:37:
a8:99:03:3e:2a:7d:92:2b:ca:dc:4b:b8:63:f8:b7:
8f:99:ab:af:28:67:a7:39:95:4b:d9:e7:23:9b:b3:
db:65:54:35:b3:44:71:c4:6e:a1:fd:87:5d:9e:05:
1f:cb:7b:94:29:d1:04:03:35:e3:d0:98:32:6f:9f:
31:32:68:06:74:51:4b:16:dd:cf:d1:66:74:95:5a:
bc:1d:53:e4:ae:00:9f:d9:25:2c:a1:0d:dc:ce:cf:
b6:2b:a8:bd:fa:ef:bc:9e:74:0e:56:28:7b:26:19:
3b:24:d9:65:66:2e:21:35:e6:e3:06:24:b2:d7:3a:
0d:31:cf:35:41:50:05:39:0f:4b:eb:1a:76:d2:9c:
8c:a6:44:31:2e:8d:af:b5:74:fd:16:cd:06:20:61:
f9:02:3d:96:fb:23:1c:c0:18:4e:54:79:b4:a6:e7:
78:eb:13:6d:7e:fc:62:09:09:da:e6:88:97:f1:f1:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5D:A6:A4:A2:1B:C0:A3:B6:79:8C:21:D3:4B:48:43:53:6B:B8:3D
X509v3 Authority Key Identifier:
keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2d:2a:98:96:ad:94:9b:34:75:fa:94:12:0e:6d:6e:ac:bd:
66:e0:95:8d:d2:58:15:02:72:ad:92:3f:b3:86:5e:99:f9:e2:
76:cd:53:1c:eb:e0:23:a8:76:a6:06:b8:5c:26:fa:2e:c3:a6:
20:ed:7c:9a:66:00:ee:23:f2:20:98:44:b7:6e:d6:d7:e8:1d:
be:d0:d2:88:7b:16:95:41:ef:f9:dd:4c:dc:40:62:39:5c:c4:
d0:62:e3:1d:d4:d0:ec:2d:6c:c3:8a:f2:ab:95:71:7c:bc:93:
9f:32:2f:b7:21:6b:39:4b:fd:2f:e2:3f:4a:4a:dc:51:66:c1:
ad:e6:db:97:0a:3b:75:5d:98:2d:75:4b:91:91:3b:de:6e:11:
ab:af:06:96:8d:36:8d:9d:b1:1c:bc:c1:c2:a7:4d:6f:eb:5e:
6d:7f:82:9b:99:8f:8d:b5:e1:86:a5:20:37:ac:19:2d:59:8b:
f1:01:9c:10:ba:b1:8d:f5:23:87:28:a9:1f:44:22:f9:15:bd:
da:c5:c4:9b:93:e5:1d:e3:9a:d9:21:31:f5:8e:54:2c:9c:64:
fd:5c:85:3c:d2:f6:04:b9:a3:d0:4c:2c:6c:b0:fe:05:88:96:
8a:c3:cf:07:5b:cd:ec:b8:d3:42:e1:f8:cc:77:53:39:b3:69:
ff:88:8b:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB
RkI1RTJCQjIwHhcNMjYwMTI0MTgzMDQyWhcNMjYwMTMxMTgzMDQyWjAYMRYwFAYD
VQQDDA02OTc1MGZkMi00ZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoyuq2Yy0Fu9MbRrfpui8UopTqrQo4JeNy70iy6AFX07+O+USpsyGqrpOOiv0
lgbwozs0JZqJRP4s9mEqC5pvk7VjaMxGrbPqJDeomQM+Kn2SK8rcS7hj+LePmauv
KGenOZVL2ecjm7PbZVQ1s0RxxG6h/YddngUfy3uUKdEEAzXj0Jgyb58xMmgGdFFL
Ft3P0WZ0lVq8HVPkrgCf2SUsoQ3czs+2K6i9+u+8nnQOVih7Jhk7JNllZi4hNebj
BiSy1zoNMc81QVAFOQ9L6xp20pyMpkQxLo2vtXT9Fs0GIGH5Aj2W+yMcwBhOVHm0
pud46xNtfvxiCQna5oiX8fEJIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGddpqSi
G8CjtnmMIdNLSENTa7g9MB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4
NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94
UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQClLSqYlq2UmzR1+pQSDm1urL1m4JWN0lgVAnKtkj+zhl6Z+eJ2zVMc
6+AjqHamBrhcJvouw6Yg7XyaZgDuI/IgmES3btbX6B2+0NKIexaVQe/53UzcQGI5
XMTQYuMd1NDsLWzDivKrlXF8vJOfMi+3IWs5S/0v4j9KStxRZsGt5tuXCjt1XZgt
dUuRkTvebhGrrwaWjTaNnbEcvMHCp01v615tf4KbmY+NteGGpSA3rBktWYvxAZwQ
urGN9SOHKKkfRCL5Fb3axcSbk+Ud45rZITH1jlQsnGT9XIU80vYEuaPQTCxssP4F
iJaKw88HW83suNNC4fjMd1M5s2n/iIu+
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:18 2026 by rpki-client