This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
File: 4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json)
Hash identifier: DYdbTKlukyjKsErP1UyTqC60bpvIjUAHcP9WbAFTCl4=
Subject key identifier: B4:44:23:F6:2D:A1:04:00:ED:6F:A8:E5:88:24:18:6A:A9:49:80:A4
Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC
Certificate issuer: /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
Manifest number: D0
Signing time: Sun 11 Jan 2026 04:57:20 +0000
Manifest this update: Sun 11 Jan 2026 04:57:20 +0000
Manifest next update: Sun 18 Jan 2026 04:57:20 +0000
Files and hashes: 1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: +2j4pUZCwvUq7QdWL70CSf9hPuixGK0tVh8Pr7LgrlU=)
2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: ifxT97kQev+52ME20DTb7eJQD9D/B9KLVgjdG2wnFaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl
rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 04:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
Validity
Not Before: Jan 11 04:57:20 2026 GMT
Not After : Jan 18 04:57:20 2026 GMT
Subject: CN=69632db0-5763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6e:05:78:2a:6b:3f:40:a6:56:69:9d:83:13:
7f:f0:b4:74:18:3f:3b:98:02:7e:c3:25:71:c1:20:
9f:7f:f7:a0:4e:2e:4b:21:16:43:fb:98:6f:46:d3:
16:b9:26:7c:94:4f:4f:8d:dd:40:1c:7b:1d:b0:89:
55:4f:4d:47:ef:6f:5e:01:07:d8:51:41:3c:7a:82:
8d:35:fb:a6:5f:41:1d:ae:b8:ac:f5:4d:36:21:01:
a0:09:78:a1:8f:0e:a5:9c:67:2c:29:73:65:74:34:
04:51:9f:3b:ed:c3:4d:47:43:34:ca:0e:5e:43:23:
3d:fb:66:44:d7:4c:49:fe:7a:5b:ed:ab:87:20:fc:
bb:11:a8:15:d1:bc:6e:7c:70:cd:40:4d:bc:9e:cc:
93:4a:bf:5a:c4:7a:5a:de:32:e3:cf:6c:1e:4c:1b:
dd:fb:ca:db:b0:b1:21:35:6a:74:af:00:71:a2:9c:
0f:1b:e4:38:80:23:e9:6b:81:56:0c:46:3e:5f:22:
83:9f:8c:b4:74:f0:20:b1:64:e4:06:f6:09:da:f5:
d7:5a:a5:eb:a5:92:02:b7:5f:d0:fb:f7:30:9e:c5:
58:6b:7d:a8:45:e9:c9:ea:16:60:ab:58:7c:d6:69:
49:5d:9d:b2:30:93:b4:19:0d:31:a3:56:98:67:cd:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:44:23:F6:2D:A1:04:00:ED:6F:A8:E5:88:24:18:6A:A9:49:80:A4
X509v3 Authority Key Identifier:
keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ef:37:15:5f:87:52:ad:ad:57:2c:62:0f:c3:11:e4:37:3a:
f4:60:8c:d5:5c:16:8e:05:19:b1:1a:49:3c:70:b3:9f:58:8e:
60:d1:18:8a:86:55:38:e6:ee:b3:c9:22:87:04:2d:a0:f3:7e:
93:fd:4e:c5:8a:a4:8a:ec:b3:c0:f9:02:f7:e0:77:2c:2d:61:
b6:4e:68:dc:63:bc:01:f9:c9:7b:70:d0:bb:4c:c2:54:5d:2e:
c3:8e:91:4a:b9:5d:6d:34:30:cf:f5:78:6b:cd:a5:43:8a:03:
c5:18:07:4d:29:77:93:4b:d0:24:20:bf:d6:cc:b6:6e:11:93:
ed:32:7e:11:2f:6c:e8:47:4b:a9:f5:e8:5a:b8:b1:6d:b8:0c:
f2:89:4b:c1:5d:0e:80:d7:3c:50:2b:d3:38:cf:da:57:fb:c6:
a6:cd:fe:9e:7b:5e:e5:b3:70:85:04:09:48:65:7a:12:16:79:
b0:1a:ac:da:48:03:be:59:3b:52:d8:a9:72:a5:6a:12:a6:e1:
6a:83:62:8c:f6:ae:0e:83:6e:db:a1:56:05:39:40:e5:61:38:
53:8d:e1:ba:d5:70:ed:8c:ea:82:2d:f5:5f:83:53:2d:a6:77:
ee:18:fd:47:d9:91:80:39:f2:c4:80:ee:a1:e0:63:f1:37:11:
eb:d2:5c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:07:03 2026 by rpki-client