This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
File: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft (raw, json)
Hash identifier: z/xt3TrYgh2xUHANTbjVNn4GbrkZgiYsI/E6XUjm7/4=
Subject key identifier: A2:47:3C:BF:30:2F:A9:0E:92:AF:28:4D:57:DB:07:13:C7:A0:FC:A9
Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
Manifest number: 015D
Signing time: Wed 21 Jan 2026 03:46:28 +0000
Manifest this update: Wed 21 Jan 2026 03:46:28 +0000
Manifest next update: Wed 28 Jan 2026 03:46:28 +0000
Files and hashes: 1: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl (hash: WH8FdI6QGXtXYqjAxYA62tRCXsJs8HsJYQeZoO4HAf0=)
2: 8DCB0F7C49D511F0A83B4647C4F9AE02.roa (hash: EVsgRJZkrCA+X6URfbAAHCVUloJhomMJyZF/Ejmuu7o=)
3: 6492D4985B9011EF8DB48C24C4F9AE02.roa (hash: It848C/9Bwo+dM5KHxOWOmLE+nNLbDgRj+xtHR+Q7NY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 03:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Validity
Not Before: Jan 21 03:46:28 2026 GMT
Not After : Jan 28 03:46:28 2026 GMT
Subject: CN=69704c14-d901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:2a:08:45:1d:22:7f:cf:34:14:54:41:b7:
2f:ee:5c:d5:44:bd:88:6c:21:8c:e2:e6:f2:b9:e9:
66:6a:d3:9a:c4:0a:c4:3f:63:8d:ad:45:4c:67:92:
2f:1b:5c:9a:52:71:cd:aa:b6:1a:97:54:d5:93:9a:
15:b1:fc:5d:20:8c:58:80:cb:97:ae:c7:03:ab:80:
d1:7b:40:d4:96:83:53:03:a0:60:91:b7:c3:d6:58:
ca:d6:55:61:cb:65:fc:3b:21:de:26:71:2b:0d:1e:
72:d5:7d:c2:60:8a:48:86:99:72:9d:7f:e5:1f:45:
cd:98:ac:e9:3b:de:af:6f:45:b2:71:21:0d:00:85:
3e:e7:43:18:cb:f9:4a:c5:19:62:b5:53:5d:e4:2f:
64:16:49:8b:b2:95:3a:f1:5e:80:5d:2a:99:50:1d:
c6:29:52:1f:65:6e:a5:73:99:e5:72:83:cc:5d:1a:
09:78:7d:95:4a:cd:7c:43:47:7b:fb:e4:0f:f8:35:
bc:57:89:3e:c0:c2:cd:bb:51:22:4e:95:71:23:8c:
77:d4:c8:f5:cb:4a:53:4f:10:65:a7:14:a7:cf:34:
a3:bb:84:db:1d:b0:cb:2a:34:d2:b5:b4:94:f7:fb:
03:cd:5e:8d:7a:c9:65:d1:bb:e4:83:5b:cf:22:26:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:47:3C:BF:30:2F:A9:0E:92:AF:28:4D:57:DB:07:13:C7:A0:FC:A9
X509v3 Authority Key Identifier:
keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:39:f5:3f:98:02:0c:91:c0:ac:f0:da:8a:4a:3d:fe:c8:d1:
80:24:67:bb:50:35:97:cd:00:d8:71:05:c0:bc:cd:48:1e:fa:
d0:8c:37:40:71:59:2b:86:02:36:ca:28:d2:21:76:3f:e8:44:
68:c1:9e:a4:9f:e9:c7:c6:37:7f:fb:ab:d7:e3:86:d4:94:1c:
7a:34:b1:3f:ae:81:85:ad:7c:e5:b3:18:9b:fb:3f:32:4e:9a:
1d:aa:a9:df:0c:5d:c6:50:62:2a:fb:1d:ef:ca:63:f5:df:f4:
35:e3:21:7d:d2:fc:83:6a:7f:a9:3c:ce:59:5e:52:41:21:a4:
3b:fd:30:2a:62:00:78:4b:dd:b7:6a:7c:2b:01:ce:ab:9e:d3:
d8:0d:9e:bd:58:02:21:5b:0e:ab:ee:63:e9:73:fe:5a:fc:cf:
44:ff:30:10:fe:14:9d:b6:d1:30:3a:96:c6:f4:ef:96:b7:18:
6a:a7:3b:c6:9b:23:11:42:51:81:40:9a:a4:ac:b8:a6:31:b7:
25:69:39:9d:79:03:7e:fb:41:9e:f2:90:4a:5a:04:6c:b7:3b:
86:61:33:0e:ae:80:06:e6:40:fb:32:a2:b7:2a:f5:55:84:b1:
e7:35:f4:22:76:70:7a:cc:00:75:12:f6:9c:3c:b5:92:9f:fe:
20:73:11:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 19:16:37 2026 by rpki-client