This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File: 4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier: RHTDsTxlkvRRCijEJADU2gRZpA7G9CogKkNHjkjetPI=
Subject key identifier: 91:78:13:D4:B9:CB:1E:4F:71:61:54:BD:95:8C:08:BF:E6:09:32:3B
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer: /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number: 25
Signing time: Sat 17 Jan 2026 06:42:20 +0000
Manifest this update: Sat 17 Jan 2026 06:42:19 +0000
Manifest next update: Sat 24 Jan 2026 06:42:19 +0000
Files and hashes: 1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: MKuX6cwyiQ++Akx2k/yG3tPApZKNJNkhFxIJVwC/h8w=)
2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: TNETd0cqoIROY1IKJ9vVGYHnKUW/ruP3inR8Ay7O+xs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Validity
Not Before: Jan 17 06:42:19 2026 GMT
Not After : Jan 24 06:42:19 2026 GMT
Subject: CN=696b2f4c-7b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:b0:55:d0:af:03:b5:f6:10:d6:53:b4:6a:
dc:20:b5:71:d2:61:82:3f:f5:23:20:69:f5:76:35:
83:e4:fa:27:68:fb:39:eb:6b:57:52:83:9a:5e:74:
3f:e0:d8:d4:6e:be:c8:18:a8:ef:93:bb:66:bf:f6:
c9:18:d1:6d:00:57:b1:8f:15:35:02:25:43:fb:16:
e8:b4:5d:ca:05:5c:ee:8d:7d:1c:bc:2b:ef:6e:28:
5f:23:f3:f9:ff:fc:53:24:4f:8b:ef:c0:8f:5d:ae:
7e:ae:59:d4:8a:ab:05:f6:82:ba:93:84:08:61:21:
7f:ad:df:5c:40:93:b5:63:db:0b:ea:13:66:d5:6f:
5a:35:7d:3f:08:b2:d7:81:53:3b:67:ea:86:b7:5d:
07:b2:2e:39:c0:c5:2f:35:59:58:02:ef:be:eb:7e:
fe:41:27:53:7d:ec:8f:38:86:e9:f0:d4:c8:26:2d:
28:9e:1e:f8:c2:7c:19:b2:3d:47:a6:6b:e0:15:b6:
2b:37:5e:74:3e:f5:07:22:44:24:15:55:69:a3:d6:
63:96:50:3f:65:6c:17:cd:29:ce:cb:0e:ff:07:b6:
68:59:fc:06:fa:0a:fd:63:d8:01:13:50:f9:a9:4e:
9c:a4:b5:5d:7c:7f:28:e1:ff:c8:1d:6e:72:2e:5c:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:78:13:D4:B9:CB:1E:4F:71:61:54:BD:95:8C:08:BF:E6:09:32:3B
X509v3 Authority Key Identifier:
keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:5d:36:f8:bc:08:de:d2:bc:a2:74:b1:ee:4b:ff:d8:72:56:
13:be:d0:a5:78:ef:1e:2a:50:53:7c:a2:0a:40:c6:33:be:9d:
07:2e:a4:1e:00:52:e1:3e:a9:b7:96:48:f6:30:2a:b9:59:cf:
51:64:ba:ea:10:5e:0b:75:32:2a:dd:dc:df:24:47:d5:7e:8a:
1f:9a:04:a2:93:49:91:50:be:59:a2:91:bc:be:50:11:8f:4a:
83:c6:95:4f:ed:98:3d:6d:4e:ad:cf:fc:80:72:4a:70:fb:97:
ec:ac:d8:cd:ce:0e:f0:ec:74:50:75:b0:86:18:7b:c3:a1:04:
85:e1:1a:56:d1:b9:ae:88:90:69:bb:65:24:ef:0e:7a:e5:dc:
f4:7d:1d:e5:29:0f:d3:bc:7c:b1:f3:77:37:1b:32:68:f9:98:
6b:84:5e:af:28:25:0d:11:90:9c:c9:17:33:14:e4:64:26:5c:
4a:22:1a:04:c3:ef:93:62:db:e2:1f:6d:68:8d:1e:1d:ec:6b:
53:ac:02:0a:00:0b:69:7f:06:58:e1:af:f2:62:13:61:6f:53:
cc:2a:a4:10:b5:d4:ae:bc:44:d2:7a:e2:59:b7:9c:ed:68:35:
25:8e:33:32:c1:32:7f:57:77:d4:26:31:9b:26:4b:88:a9:e5:
65:7c:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 07:45:25 2026 by rpki-client