This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft (raw, json)
Hash identifier: gzT3AHpsMjlng9HVtcp4AqekqeteRoy77d7ygmgXlL0=
Subject key identifier: E1:58:55:42:34:2C:F2:32:CE:69:95:0B:87:BB:B7:48:74:18:61:59
Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64
Certificate serial: 08F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
Manifest number: 08DA
Signing time: Sat 24 Jan 2026 17:38:46 +0000
Manifest this update: Sat 24 Jan 2026 17:38:46 +0000
Manifest next update: Sat 31 Jan 2026 17:38:46 +0000
Files and hashes: 1: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl (hash: HlE4hCsJLcjh0WURBriI/7cbSNUmjIiCUIy/UjdaVjs=)
2: 18B1B5361CE611EBB543881CC4F9AE02.roa (hash: KeAs7Gj0a8YzbbytS20guI+ZWtP16JsyUZNhndCzV6Q=)
3: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (hash: O4ifFOc81fDMLSySd7Uu6xiGT3cNLLcxIESYfvptWZs=)
4: D385E420314711EBA579873DC4F9AE02.roa (hash: CnYLh4BUAxrR2NuZuYhJl2t7I2W898doVAQxEO1yi00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl
rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292 (0x8f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64
Validity
Not Before: Jan 24 17:38:46 2026 GMT
Not After : Jan 31 17:38:46 2026 GMT
Subject: CN=697503a6-9de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:f9:9f:5e:79:25:69:c2:ac:d9:b0:25:ff:
60:2e:7e:be:28:82:1c:0a:13:16:e7:48:22:db:c6:
55:20:a2:36:05:43:0e:08:1f:b4:3b:45:cc:45:73:
be:0f:e2:8c:33:be:c6:e7:10:f5:c0:05:da:c7:4e:
6c:0a:22:a6:cb:73:d8:a6:af:10:75:b9:99:a5:8c:
96:34:85:b6:9d:5d:66:c7:e8:be:8a:f3:16:e6:b0:
51:80:95:35:fc:3d:43:2e:bd:3f:9b:89:42:46:1a:
0d:cf:2a:9d:b9:ac:e8:ae:c3:e0:0e:96:de:dd:4b:
8a:c0:ed:41:84:13:eb:60:b3:53:68:86:07:bc:81:
3c:12:03:c3:45:ce:26:66:50:a0:d7:3f:fc:4a:5a:
d4:28:c0:3d:91:54:ef:a3:bc:9a:65:66:f3:4c:14:
5f:c1:5c:65:92:79:eb:1c:08:a9:06:d9:71:ee:e9:
79:8d:49:7f:b6:1b:7e:fe:e8:75:84:cf:5c:93:42:
0c:b8:26:c8:4d:b5:6d:e6:fa:a6:08:f5:5e:31:73:
aa:4f:88:f0:d3:e7:cd:39:b1:d5:a1:29:67:b9:15:
e8:34:51:b7:05:a6:bd:e1:d5:98:e0:42:4a:c4:19:
a5:68:d0:0d:c4:b0:af:c2:b7:cd:4e:92:eb:f5:aa:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:58:55:42:34:2C:F2:32:CE:69:95:0B:87:BB:B7:48:74:18:61:59
X509v3 Authority Key Identifier:
keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9e:2b:fa:e6:64:af:29:1b:4c:99:fe:22:22:00:b2:28:a4:
67:76:a9:91:5b:a1:62:05:00:21:ea:91:32:85:68:51:53:88:
69:da:1c:31:c7:8e:fc:fc:14:7e:51:89:52:85:c6:94:bd:f4:
a6:70:45:bb:27:6a:31:f7:e4:82:3a:36:e1:51:66:f7:52:cc:
97:5f:f5:79:05:c9:05:ea:6c:88:6c:be:e0:d6:0a:53:d2:99:
fb:bc:04:17:2a:da:ee:de:c9:0f:33:5e:ae:48:d8:7e:e0:9d:
ea:ff:4e:87:34:d8:09:cf:e6:3f:bf:f0:63:d2:06:b2:06:1b:
b3:c1:40:0c:0b:b1:00:af:30:b7:9e:be:c3:c5:59:2e:a5:93:
44:8f:eb:d8:01:ad:15:2d:ef:ba:19:ba:27:89:c7:ce:70:6d:
db:28:10:d3:20:a1:12:88:ff:fd:33:dd:eb:95:60:b6:dc:41:
d6:56:d1:39:d6:47:76:32:3c:65:c7:58:83:0e:04:40:65:3d:
1e:5c:f5:97:dd:56:73:a2:54:a8:e7:c2:8c:42:d9:ca:30:fb:
22:cc:f2:03:2b:8a:4c:eb:fd:b0:6e:a9:8f:64:85:72:a1:be:
48:1b:0d:4c:25:f5:1b:55:1a:ec:62:ae:da:8e:fd:9f:e7:ef:
0d:b5:0e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:29 2026 by rpki-client