This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json)
Hash identifier: CcLm7qNoVMfEmFzd2dgbkEtYMRwqBI0jG9cbw8In1eA=
Subject key identifier: 1C:DE:01:98:65:C9:FB:76:CA:E5:CC:26:6B:D9:5E:83:FF:10:B6:FA
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial: 6967711EDFB502E0B29FF562B5F9EF5CCA64EB1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
Manifest number: 03AB
Signing time: Sun 25 Jan 2026 05:48:56 +0000
Manifest this update: Sun 25 Jan 2026 05:43:56 +0000
Manifest next update: Mon 26 Jan 2026 07:43:56 +0000
Files and hashes: 1: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=)
2: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=)
3: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=)
4: 4B1987D5160068092602529871C93EA320045A75.crl (hash: haQ8KbE7wBE/cLYu53zwptEn/K/qL65Ox70L9/xnfBw=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 07:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:67:71:1e:df:b5:02:e0:b2:9f:f5:62:b5:f9:ef:5c:ca:64:eb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
Validity
Not Before: Jan 25 05:43:56 2026 GMT
Not After : Jan 26 07:43:56 2026 GMT
Subject: CN=1CDE019865C9FB76CAE5CC266BD95E83FF10B6FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:67:51:ac:17:48:a5:7a:e2:d5:61:33:72:2a:
73:a5:b5:90:29:40:c9:c3:76:e7:f4:79:e9:f8:0e:
87:bb:55:68:77:ab:fa:33:01:74:d7:8a:a6:06:0d:
a6:ac:11:66:14:df:13:7c:d6:88:a6:5f:ae:94:21:
9e:8e:70:bf:6e:f3:2c:36:3b:03:15:a1:97:52:c5:
bc:47:74:32:ae:45:b3:e6:94:91:26:56:89:79:dc:
a4:6f:b8:e8:aa:4e:35:85:54:4b:58:d0:e6:e5:38:
c4:de:cd:ec:21:4b:b3:88:d0:bf:fc:62:a3:5a:24:
95:c1:98:2c:1e:03:d9:ac:d3:ae:02:06:80:de:4a:
4a:94:75:9d:2c:ac:bd:17:50:88:de:7c:18:52:74:
09:a1:1b:8e:d6:a6:56:15:f4:ba:9a:6a:7b:ee:b1:
23:87:80:c2:ed:ea:2c:c9:f6:36:ba:a3:c3:b5:3a:
eb:95:ba:30:99:0a:dc:69:38:45:85:07:89:48:d4:
99:24:33:82:b3:77:48:91:18:93:7b:02:10:5b:38:
1f:11:e6:74:97:4b:e6:ef:94:d3:42:68:02:c2:6f:
51:40:97:05:09:3f:0a:bc:41:34:d7:c4:0e:19:25:
9a:f4:ee:29:2c:3a:d3:d4:7b:08:12:a3:e3:d8:85:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:01:98:65:C9:FB:76:CA:E5:CC:26:6B:D9:5E:83:FF:10:B6:FA
X509v3 Authority Key Identifier:
keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:27:20:06:46:f7:de:d0:70:b3:56:89:53:b2:22:5a:ac:43:
a1:0b:df:ac:0c:71:20:d9:7a:ba:b4:fa:5e:e4:6d:a8:14:bb:
a0:1a:50:45:c8:eb:5f:2a:c9:ac:e8:d4:ad:2f:c6:4b:76:d2:
3d:3a:6c:94:fb:23:9c:d7:44:05:e5:aa:8a:52:c5:fc:7a:a9:
96:b7:6b:99:b1:43:af:d0:70:15:39:25:76:cc:88:20:55:0f:
8f:a6:f2:34:92:8a:7b:2c:c9:8a:10:a1:0b:2d:7a:27:f8:d9:
dd:7e:7b:a5:e4:e5:35:cd:d2:88:5e:bd:a6:a6:8b:18:b5:a2:
d9:73:37:f8:76:1f:5e:c3:3b:91:84:b2:8d:a6:00:62:04:98:
f1:3e:fe:ba:16:7a:79:6c:88:76:23:0d:85:04:11:b6:d8:2f:
85:62:4a:55:55:a4:0c:8d:34:81:a2:47:c2:71:74:fc:87:04:
3c:c9:ba:65:ad:58:bd:35:c3:bc:b5:a5:91:d6:a9:ac:3e:d3:
11:3e:c1:ae:1d:03:d4:55:ac:b9:4b:2b:14:f1:8d:3d:5b:10:
5b:a4:19:2e:7b:da:c0:89:a2:26:fe:0a:6d:47:ec:7b:94:3b:
9f:01:db:19:81:3a:dd:f4:cc:d9:83:02:d2:62:48:27:51:8c:
36:0a:57:f0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUaWdxHt+1AuCyn/VitfnvXMpk6xwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2
MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI2MDEyNTA1NDM1NloX
DTI2MDEyNjA3NDM1NlowMzExMC8GA1UEAxMoMUNERTAxOTg2NUM5RkI3NkNBRTVD
QzI2NkJEOTVFODNGRjEwQjZGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIVnUawXSKV64tVhM3Iqc6W1kClAycN25/R56fgOh7tVaHer+jMBdNeKpgYN
pqwRZhTfE3zWiKZfrpQhno5wv27zLDY7AxWhl1LFvEd0Mq5Fs+aUkSZWiXncpG+4
6KpONYVUS1jQ5uU4xN7N7CFLs4jQv/xio1oklcGYLB4D2azTrgIGgN5KSpR1nSys
vRdQiN58GFJ0CaEbjtamVhX0uppqe+6xI4eAwu3qLMn2Nrqjw7U665W6MJkK3Gk4
RYUHiUjUmSQzgrN3SJEYk3sCEFs4HxHmdJdL5u+U00JoAsJvUUCXBQk/CrxBNNfE
DhklmvTuKSw609R7CBKj49iF8scCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQc3gGY
Zcn7dsrlzCZr2V6D/xC2+jAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa
dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE
NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB
a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz
MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAbicgBkb33tBws1aJU7IiWqxDoQvfrAxxINl6urT6XuRtqBS7
oBpQRcjrXyrJrOjUrS/GS3bSPTpslPsjnNdEBeWqilLF/HqplrdrmbFDr9BwFTkl
dsyIIFUPj6byNJKKeyzJihChCy16J/jZ3X57peTlNc3SiF69pqaLGLWi2XM3+HYf
XsM7kYSyjaYAYgSY8T7+uhZ6eWyIdiMNhQQRttgvhWJKVVWkDI00gaJHwnF0/IcE
PMm6Za1YvTXDvLWlkdaprD7TET7Brh0D1FWsuUsrFPGNPVsQW6QZLnvawImiJv4K
bUfse5Q7nwHbGYE63fTM2YMC0mJIJ1GMNgpX8A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:06 2026 by rpki-client