This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier: X6fsHQsjHgoeKNehHtWN87lA4XC7Q4cCxK9Um6Z+QEA=
Subject key identifier: CD:95:D9:FD:D2:DA:FE:9B:5F:31:F3:D7:48:56:C4:D1:A1:07:88:32
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number: FA
Signing time: Sat 17 Jan 2026 04:21:45 +0000
Manifest this update: Sat 17 Jan 2026 04:21:45 +0000
Manifest next update: Sat 24 Jan 2026 04:21:45 +0000
Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: 8fqkl0+DfLX1VTtMvW96pwGShnm1BH9FbZv9aQXnYBc=)
2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: e8wZoAxd5aA3CtPGlNCm2H8RgaO0sg67bbRxbVIcezE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 04:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Validity
Not Before: Jan 17 04:21:45 2026 GMT
Not After : Jan 24 04:21:45 2026 GMT
Subject: CN=696b0e59-aba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:fe:8c:4d:ee:49:60:2e:6a:0b:6e:9c:3b:
66:e8:38:43:b8:e2:a0:67:1a:d2:3d:1f:c1:cc:b3:
51:2a:a9:87:6a:30:df:7e:6a:3d:3b:ce:f4:5e:7f:
80:64:6f:ac:63:44:75:ca:32:35:3a:f5:dc:4f:03:
63:dd:9d:8a:3e:b0:c2:a2:03:2d:0a:19:1e:85:c5:
3a:00:32:88:5d:4a:b0:94:bc:bc:15:ea:45:d1:2f:
c4:79:1b:d3:20:59:d9:80:d2:7b:89:f0:e1:dc:6f:
3c:1c:3b:6e:dd:3d:d6:e3:07:90:3c:fc:09:85:f9:
99:29:35:63:2f:11:25:0a:bd:dd:1e:50:75:12:8e:
91:32:59:fd:b0:3a:02:3f:ce:c5:59:61:b4:2f:3d:
4a:46:a4:82:53:40:7c:c0:d7:03:d1:5b:eb:5d:0d:
17:69:17:25:46:45:fd:7c:7f:bb:87:cf:94:09:3d:
e7:aa:17:0a:c2:07:e5:a2:f6:2a:b8:93:88:d5:ff:
5e:90:8b:a1:c4:9a:0f:6c:22:8d:de:f5:f3:b4:8e:
95:dd:fc:ca:7c:51:43:c8:e3:d5:d5:6d:9e:4a:0f:
db:17:7d:00:69:ae:ff:4a:4f:bd:ca:1c:14:01:91:
0c:9d:9d:94:7f:ca:6b:72:e1:e7:b8:f6:df:ca:51:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:95:D9:FD:D2:DA:FE:9B:5F:31:F3:D7:48:56:C4:D1:A1:07:88:32
X509v3 Authority Key Identifier:
keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:27:22:92:db:03:7a:c6:9d:2a:9e:12:dc:bb:d6:a7:2f:9b:
8c:00:6a:0f:90:de:3f:93:63:bc:a6:5d:0b:22:02:4b:42:62:
d0:b8:99:c5:a9:81:ba:d4:77:de:b8:80:cb:7d:1c:c3:24:ff:
43:ed:cf:80:27:10:c5:82:89:e5:08:c4:9d:9c:dc:1f:33:74:
73:56:62:96:94:8f:d4:3a:44:60:1c:e7:1d:0a:c1:34:1c:a1:
bb:06:0f:4e:2d:88:2d:51:d3:10:35:b3:83:25:dd:8c:a6:19:
2b:a2:9d:c3:9d:3c:5f:32:a0:53:76:96:50:e5:ea:b9:f4:e7:
28:11:2b:8f:54:7a:c3:59:10:90:6c:b0:db:cb:04:ad:9e:e7:
fe:b4:90:f3:a2:91:32:89:88:41:b8:ea:54:c1:7e:5c:37:66:
72:8a:4e:30:37:58:33:86:7e:4e:33:b3:ff:d6:67:c9:83:61:
c7:e6:3d:a7:6c:85:9e:2e:fd:63:14:67:40:45:b7:e3:82:f1:
d4:4f:16:4e:5f:4d:f6:61:69:b2:36:58:87:ca:04:35:f4:09:
8b:17:17:83:f1:e6:f6:da:e4:d6:a2:6a:d6:1d:31:ca:58:34:
24:a9:cf:05:d2:ee:6e:5b:72:b2:32:bf:96:cd:4c:05:99:46:
53:9f:56:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU2MDAxMTAvBgNVBAUTKEUwQjk0NThGNjk4MjVGRjgyOTM4N0IxMzlFODhGRDNC
RDY3NDAwODcwHhcNMjYwMTE3MDQyMTQ1WhcNMjYwMTI0MDQyMTQ1WjAYMRYwFAYD
VQQDDA02OTZiMGU1OS1hYmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwM/+jE3uSWAuagtunDtm6DhDuOKgZxrSPR/BzLNRKqmHajDffmo9O870Xn+A
ZG+sY0R1yjI1OvXcTwNj3Z2KPrDCogMtChkehcU6ADKIXUqwlLy8FepF0S/EeRvT
IFnZgNJ7ifDh3G88HDtu3T3W4weQPPwJhfmZKTVjLxElCr3dHlB1Eo6RMln9sDoC
P87FWWG0Lz1KRqSCU0B8wNcD0VvrXQ0XaRclRkX9fH+7h8+UCT3nqhcKwgflovYq
uJOI1f9ekIuhxJoPbCKN3vXztI6V3fzKfFFDyOPV1W2eSg/bF30Aaa7/Sk+9yhwU
AZEMnZ2Uf8prcuHnuPbfylGbgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2V2f3S
2v6bXzHz10hWxNGhB4gyMB8GA1UdIwQYMBaAFOC5RY9pgl/4KTh7E56I/TvWdACH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yMjFCQUVCRTc3
RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hfZ3BPSHNUbm9qOU85WjBB
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzRMbEZqMm1DWF9ncE9Ic1Rub2o5TzlaMEFJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTYwMC8yMjFCQUVCRTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hf
Z3BPSHNUbm9qOU85WjBBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlJyKS2wN6xp0qnhLcu9anL5uMAGoPkN4/k2O8pl0LIgJLQmLQuJnF
qYG61HfeuIDLfRzDJP9D7c+AJxDFgonlCMSdnNwfM3RzVmKWlI/UOkRgHOcdCsE0
HKG7Bg9OLYgtUdMQNbODJd2Mphkrop3DnTxfMqBTdpZQ5eq59OcoESuPVHrDWRCQ
bLDbywStnuf+tJDzopEyiYhBuOpUwX5cN2Zyik4wN1gzhn5OM7P/1mfJg2HH5j2n
bIWeLv1jFGdARbfjgvHUTxZOX032YWmyNliHygQ19AmLFxeD8eb22uTWomrWHTHK
WDQkqc8F0u5uW3KyMr+WzUwFmUZTn1Yq
-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:52 2026 by rpki-client