This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
File: lA0nrhRKrcqeNFLLOMMjasv3Als.mft (raw, json)
Hash identifier: 5lCkLeyeK9v5qxhkC/0Dc4bTr7EIEBFLM5qXEoNubUg=
Subject key identifier: C0:B3:7A:5A:44:DC:4C:5F:62:39:7F:F6:44:AA:CB:62:2A:7C:B7:6E
Authority key identifier: 94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B
Certificate issuer: /CN=A919B460/serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
Manifest number: 0A
Signing time: Wed 21 Jan 2026 07:08:40 +0000
Manifest this update: Wed 21 Jan 2026 07:08:39 +0000
Manifest next update: Wed 28 Jan 2026 07:08:39 +0000
Files and hashes: 1: lA0nrhRKrcqeNFLLOMMjasv3Als.crl (hash: 525KKtZbXZpPixZh5xigTr+X9CkctDEEn2xbZo+eZ0M=)
2: 4BE78CE0ED2A11F08C16C3A8456F56BC.roa (hash: 330aH4UPnOEaUrWzXgQByCgb0v3T98ndLyMTMHzMXrA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl
rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 07:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B460, serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
Validity
Not Before: Jan 21 07:08:39 2026 GMT
Not After : Jan 28 07:08:39 2026 GMT
Subject: CN=69707b78-3de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:8c:f9:ff:ca:26:57:7c:ec:e1:28:73:8b:
22:d5:4a:aa:18:09:5a:7c:1f:b1:93:c7:4c:99:ff:
35:8f:f7:74:0d:f9:bb:9e:d5:75:6b:dd:96:53:e8:
e6:d3:c9:b0:bb:e9:54:45:d5:c3:8a:e2:c8:62:cf:
95:bc:a9:19:03:07:55:8b:90:67:a1:d9:33:67:ee:
c4:63:3f:d9:c6:34:8d:89:02:88:84:8a:66:0e:23:
6c:23:50:68:6e:98:cd:e4:61:bd:19:d5:7b:ad:8a:
1b:08:47:c3:34:5d:d2:3d:e5:90:0e:d8:1e:95:4e:
9f:30:39:06:c3:98:97:a6:4a:c9:27:13:b2:63:95:
fe:1f:e9:ce:0e:57:97:f6:80:b0:74:01:17:2a:a7:
a0:50:c2:09:39:22:5e:21:e1:cf:40:89:74:11:ad:
59:b1:b4:3e:4e:c7:05:4b:f6:98:7e:13:13:41:88:
77:ed:b9:7c:ed:4a:cb:7b:c9:55:45:2c:c9:f1:88:
9f:61:7c:09:dc:72:be:bc:c7:b6:43:59:ac:bf:83:
4e:72:ac:bb:c1:a6:9f:b8:18:b4:36:93:28:d2:25:
f8:79:5d:de:db:7e:fb:97:be:b3:de:34:67:15:77:
32:e5:99:1e:69:fd:de:9e:7d:2d:4b:74:d6:67:7b:
1e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B3:7A:5A:44:DC:4C:5F:62:39:7F:F6:44:AA:CB:62:2A:7C:B7:6E
X509v3 Authority Key Identifier:
keyid:94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:ef:27:52:9e:05:72:49:e1:a9:3d:8b:26:45:00:ec:0c:cb:
05:50:7a:14:56:f6:04:29:89:34:57:85:11:5c:2f:70:97:c0:
3f:87:96:60:2f:2f:8a:be:6b:08:41:27:06:71:79:06:c9:f3:
1c:14:b3:c0:98:17:a6:2c:d8:bd:da:cf:c1:5b:d6:58:3e:a8:
6f:95:d7:37:56:2e:31:0e:4b:47:b6:47:5c:75:c6:01:46:f2:
79:1a:56:c5:8f:c4:26:2b:d1:71:cb:9a:5a:ad:cb:10:ff:53:
8d:f2:06:04:6b:73:f0:b8:ac:71:1e:ce:42:46:af:88:b9:dc:
16:bb:c4:b2:74:74:4b:df:27:23:d7:83:ae:31:55:ff:a7:3c:
eb:5e:b0:77:a2:27:a4:23:2b:06:96:fe:dd:08:10:4d:a9:30:
06:e9:38:de:4e:77:ba:09:5f:5b:b9:fb:7e:f9:a9:dc:f3:22:
e1:e8:b2:a9:45:d0:5e:f6:20:07:0b:ea:6d:65:1d:ae:be:1e:
02:5f:7d:e1:e6:52:a0:9a:f5:45:a9:20:af:82:3b:4b:26:c3:
a5:ac:81:3a:33:55:74:2f:55:64:c9:76:55:6c:b7:ad:32:83:
f3:0a:41:74:43:c0:13:53:d0:34:ff:40:a7:81:ac:2a:b3:11:
53:48:0e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 00:53:54 2026 by rpki-client