This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
File: pLh_nflqIHJhuXtMnjjIO1yA1m4.mft (raw, json)
Hash identifier: 9V4jKzO85jT4FBJaSaV1jtMtBHb127Quf0sY4Nx9Cek=
Subject key identifier: FA:4D:C5:24:EE:D7:F9:6C:FC:1E:3C:2D:4F:21:93:01:C3:93:FC:0C
Authority key identifier: A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E
Certificate issuer: /CN=A91BC6A6/serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E
Certificate serial: 010A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
Manifest number: 0107
Signing time: Sun 11 Jan 2026 04:17:04 +0000
Manifest this update: Sun 11 Jan 2026 04:17:04 +0000
Manifest next update: Sun 18 Jan 2026 04:17:04 +0000
Files and hashes: 1: pLh_nflqIHJhuXtMnjjIO1yA1m4.crl (hash: SGLDVwXj9Dwbt/Dnvhg+GHFbw8R6u3LkZrwhxR0m9mk=)
2: E2FE5F1C5F3911EF9C33492EC4F9AE02.roa (hash: eos5oAESK8a0e0dRgljYu7jznUQ84s3rgDiZ/8AXfOA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl
rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 04:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6A6, serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E
Validity
Not Before: Jan 11 04:17:04 2026 GMT
Not After : Jan 18 04:17:04 2026 GMT
Subject: CN=69632440-e7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:76:25:20:c0:28:9d:eb:90:82:7f:d1:4f:
d8:fa:f6:5e:65:9d:d2:1a:61:5f:1e:f0:a7:03:09:
06:f6:24:71:5a:78:d1:68:d6:5b:80:70:51:0e:2f:
bd:66:93:db:72:81:8a:54:a7:94:4f:b6:ea:7e:6e:
c9:78:ab:33:a6:91:a3:c8:97:09:4c:c6:f1:5a:8f:
cf:95:42:e6:68:f1:3a:92:5c:df:61:9c:bc:49:ef:
e7:c4:4c:fd:31:4e:79:26:3b:b4:61:bc:b6:74:a3:
70:8b:6c:ad:14:a7:51:3a:16:a5:0c:b9:1e:83:0d:
b9:21:f8:28:06:4b:3d:20:c4:1f:7e:5b:d0:c4:2f:
87:a4:5e:ca:ea:31:ce:6e:5b:ec:bf:c2:5d:0c:5a:
33:15:a7:d9:5a:19:e1:a3:1d:42:4d:02:53:b2:92:
94:81:6d:8b:dc:c6:2a:b5:e9:de:30:38:e3:d9:cd:
75:5a:12:87:9d:11:80:e5:61:be:9d:c6:87:d8:c8:
b1:ee:60:13:e1:bc:11:3f:4d:43:73:cf:da:c1:fc:
03:11:2b:b5:d5:18:d9:05:a5:cc:31:35:ad:d0:21:
ef:28:12:08:81:46:c8:6d:08:7b:f7:50:f7:60:3f:
96:c8:e4:c5:ec:ba:06:c6:dc:b9:a1:91:8c:b5:ee:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4D:C5:24:EE:D7:F9:6C:FC:1E:3C:2D:4F:21:93:01:C3:93:FC:0C
X509v3 Authority Key Identifier:
keyid:A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:96:c3:92:14:a4:67:0c:56:e4:18:22:63:8a:bc:9f:07:18:
ee:18:0e:25:42:8b:6e:7d:8d:e3:20:0b:00:d2:eb:ef:da:24:
e3:e6:16:d6:6a:b1:1d:d9:7a:13:30:60:71:18:d0:34:0d:d8:
64:5b:b3:9d:08:4e:58:4e:dd:23:38:67:eb:ee:dd:28:65:22:
17:14:da:fa:5a:5c:7e:72:a7:c7:dd:54:f6:c6:97:df:a5:5f:
9f:4d:95:ce:03:d8:fc:0f:b0:e0:ca:72:5b:26:01:85:35:ee:
6a:eb:99:53:70:50:65:5f:2d:c5:05:6e:a7:3a:62:61:36:4e:
69:83:68:d5:b2:43:d9:e9:63:71:3b:d3:fb:15:6e:3e:e9:a7:
c3:86:00:3b:9f:d9:4c:fd:61:a5:a7:a9:7d:01:fd:bc:f9:85:
92:4a:37:ae:d3:52:d4:01:5e:0f:d3:61:bf:17:53:8a:12:d4:
cf:ac:de:14:cc:b0:c6:9a:e8:3b:ae:09:c4:16:52:8b:ff:35:
24:5e:fd:18:9c:3a:42:17:71:b6:57:a1:b2:80:a3:d5:53:2f:
b4:ff:62:97:e1:9d:87:86:33:33:b5:c1:37:a7:ba:c2:66:ad:
4e:3a:b2:db:57:87:91:7a:78:04:b9:c4:bd:bf:0b:2c:2f:87:
1c:dc:30:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:29:26 2026 by rpki-client