This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
File: lDrZvGF3q4wvjoExwUpUZexClU8.mft (raw, json)
Hash identifier: ZldqpmxmpdwpXsl5HZ/wED4DYSMixnvq3vlEmP4XpXM=
Subject key identifier: 79:DB:F8:00:1D:74:0F:FE:B5:E0:E6:25:6D:44:3C:56:05:CF:C9:3A
Authority key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
Certificate issuer: /CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
Manifest number: 01AD
Signing time: Mon 26 Jan 2026 18:12:21 +0000
Manifest this update: Mon 26 Jan 2026 18:12:20 +0000
Manifest next update: Mon 02 Feb 2026 18:12:20 +0000
Files and hashes: 1: lDrZvGF3q4wvjoExwUpUZexClU8.crl (hash: XbkZJpz2XeZI8qUnF+EHuNYigyg7RQuXnMHlOYWkZOc=)
2: 203DB338782111EEAFDDBD86C4F9AE02.roa (hash: ykJXAmgC9kF9NQ7NL49IYzkwdwdEbjDilRroROFuhv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl
rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 18:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158568, serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Validity
Not Before: Jan 26 18:12:20 2026 GMT
Not After : Feb 2 18:12:20 2026 GMT
Subject: CN=6977ae85-c9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:4d:92:5e:95:00:02:62:25:70:9d:c2:87:
a3:36:54:fe:79:cb:5a:9f:01:02:8b:69:ec:e8:35:
ab:9a:d8:a7:c6:a3:ed:47:de:7f:aa:4b:34:e1:a4:
9c:59:8f:e5:d1:df:33:fc:0e:5a:08:e4:32:f7:30:
c5:f6:6c:c7:40:a0:a0:6c:ca:77:aa:19:4a:c8:59:
cc:1e:b1:60:21:ad:fe:81:4c:be:9f:f4:25:ed:0f:
25:6b:de:86:d8:45:e8:12:bf:07:86:ab:80:f5:aa:
2c:c9:a3:ac:05:0a:9d:67:d6:05:7a:27:13:5b:21:
40:97:4c:12:b7:49:62:d9:97:7b:6e:ef:3b:a5:65:
24:38:64:59:a5:c3:99:93:fc:c8:5c:3d:e1:86:a8:
4f:29:66:ea:51:89:7e:93:a2:8c:4a:84:ed:50:ca:
6d:dd:8f:03:16:21:79:9a:bf:0a:94:04:93:71:cc:
b7:82:3b:53:98:a0:d3:f8:04:d4:20:f7:97:10:5f:
e1:31:17:ff:01:f4:d5:80:a2:0c:08:e6:c3:2a:88:
b1:c3:fd:1b:b1:cd:7f:cb:50:27:71:52:69:d9:ae:
96:18:b2:92:de:34:bf:ae:aa:de:0a:7c:f1:13:4c:
98:8a:eb:67:0e:b2:04:18:90:fc:fa:9d:71:ae:db:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DB:F8:00:1D:74:0F:FE:B5:E0:E6:25:6D:44:3C:56:05:CF:C9:3A
X509v3 Authority Key Identifier:
keyid:94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0f:77:99:63:a0:04:17:a3:64:d6:48:d5:32:86:2a:7b:69:
c6:42:45:3f:64:01:63:6c:da:21:db:b5:01:7f:5e:2e:5f:9c:
8d:ac:c1:c7:a9:1a:b0:d2:9c:41:14:04:5f:99:34:5c:28:ef:
20:8f:d8:f2:d1:66:ce:d0:24:08:cf:9b:01:24:57:a5:c9:92:
7e:27:30:ae:4e:e9:cf:28:e0:c6:23:2a:bf:c2:1d:df:b2:48:
89:d9:cc:02:aa:d4:8c:a8:57:7c:04:97:a4:fe:c1:4e:05:d3:
de:a1:a9:79:a6:06:a1:31:02:95:34:71:75:50:7b:c7:52:b4:
0e:3e:1d:d1:50:16:44:e8:52:3f:9f:05:f3:cb:d8:fa:fa:24:
0a:c2:91:13:be:99:a6:3c:27:a9:de:97:7e:3d:b4:8b:c7:b6:
14:07:e6:ee:2d:43:6c:5d:8d:5a:37:5b:25:a9:52:fa:0b:54:
07:06:30:da:35:de:5a:e1:86:03:12:91:80:7f:f7:06:36:d7:
83:21:1a:9b:1d:dc:16:6c:e4:fe:2e:65:f9:66:b4:48:73:07:
a2:39:fc:d5:1d:3a:d2:40:38:50:57:94:bf:12:97:8c:1e:bc:
13:7e:1c:ad:09:c6:fd:b2:b3:8f:69:e9:13:35:08:4d:d8:a5:
e4:6f:00:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:51:44 2026 by rpki-client