This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
File: lBEWOnNX79ihLWm2yUdlT0Xebio.mft (raw, json)
Hash identifier: M4kSitcv01HT6n8UtbN8XQKD5iv73+BUl+NX2+joynw=
Subject key identifier: D0:76:46:BB:5F:A7:2A:58:5A:AC:AB:70:10:07:3B:19:42:7F:89:88
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Certificate issuer: /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
Manifest number: 21
Signing time: Fri 23 Jan 2026 06:48:54 +0000
Manifest this update: Fri 23 Jan 2026 06:48:53 +0000
Manifest next update: Fri 30 Jan 2026 06:48:53 +0000
Files and hashes: 1: lBEWOnNX79ihLWm2yUdlT0Xebio.crl (hash: qhjhw/5IRtDX5ipv25uvuIUCiU/xlcMyBpxuN93TGeo=)
2: 1E74642AEEC611F0B6553517716F56BC.roa (hash: SOSLWLvLrsjjJ6AEtm/F/8vErniCw4XxHqkv+EwD6A4=)
3: 1F740B32EEC611F0B6553517716F56BC.roa (hash: GkuChrKCeIjrx/7RKi1sDVvBepAqIC5AXcgUnelT0n4=)
4: 1EF20696EEC611F0B6553517716F56BC.roa (hash: 3GuxeAjrlB+hxfwnx2ev/UrANIlreKIaPOJsJtCLgaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Validity
Not Before: Jan 23 06:48:53 2026 GMT
Not After : Jan 30 06:48:53 2026 GMT
Subject: CN=697319d6-0326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:62:43:03:0e:98:8b:ac:eb:b7:8a:de:35:
b6:b2:3c:77:99:55:16:96:e1:d4:f4:92:e7:d1:dd:
5e:e6:5f:45:15:e4:4e:71:9f:d3:21:f1:fb:5d:64:
f9:ad:d6:9f:56:e8:12:b1:33:8d:77:88:f7:99:44:
cf:1a:02:4e:7e:a9:86:8c:e5:c7:59:fc:e0:03:f7:
c2:e1:c2:28:96:f5:d4:10:b6:b8:8b:30:ee:54:a9:
53:2f:d6:04:c9:69:6f:63:57:20:80:93:81:79:0e:
d8:7f:ed:b3:54:4c:78:03:3f:0e:a8:72:3b:f2:27:
11:e4:92:c7:3c:3d:d7:91:b6:97:0f:2e:4b:be:78:
27:ce:32:4e:6c:d8:3c:d1:1c:8e:d4:55:20:f5:09:
90:30:d5:44:d7:ca:80:83:06:9a:41:09:05:ad:ca:
ea:01:1a:72:46:03:7a:a3:19:a2:34:9e:4c:a6:3d:
03:90:4f:79:cd:9b:33:0f:7d:0b:79:b2:91:a7:2c:
c4:6b:f4:f7:2a:9e:e4:cc:49:a8:8c:a4:b5:4e:c9:
b5:10:ea:63:bc:13:99:24:5a:3b:77:2d:32:68:de:
5a:a3:fd:c0:6b:04:31:d4:73:c9:32:aa:e7:b1:48:
b7:cc:ee:49:af:d3:cc:b5:ac:5c:8e:54:eb:53:8b:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:76:46:BB:5F:A7:2A:58:5A:AC:AB:70:10:07:3B:19:42:7F:89:88
X509v3 Authority Key Identifier:
keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:97:1e:a3:48:19:56:ba:8f:e7:f9:49:09:80:11:61:91:63:
24:92:ad:a7:db:47:95:79:f9:86:b8:61:be:2c:20:69:0d:1c:
55:a6:c0:be:1a:b2:00:43:0e:00:bf:9a:11:69:14:f3:eb:d7:
61:15:94:50:70:85:12:93:34:dc:83:7d:57:f9:be:50:02:d5:
02:bf:68:fe:53:b3:4b:5d:97:fd:8d:bb:f8:ad:59:d1:d2:55:
27:86:c8:78:5f:2f:5c:8d:c8:59:b7:57:c7:9b:68:6e:4a:07:
f6:61:3a:1c:14:2d:e0:8f:37:4c:22:9f:85:21:a8:60:ac:0f:
fb:aa:0d:11:02:f4:2f:03:e1:42:b4:b5:69:68:54:00:04:2f:
25:08:74:08:04:59:18:0e:fe:39:69:d4:90:7f:23:84:b6:27:
d1:3c:08:2b:40:08:e5:c9:96:6f:ea:5f:d4:81:bf:ed:f0:c3:
48:96:fc:a1:63:3d:dd:c1:28:e5:76:7a:f2:07:13:c4:5c:9d:
f7:47:fd:ee:47:39:cd:e3:9e:08:db:97:58:9d:08:5d:89:a5:
0c:92:11:dc:95:08:a3:bc:44:e9:d4:82:0d:5c:4e:13:7b:2b:
67:90:18:8e:58:e7:0e:7c:5a:bb:29:6f:a5:fd:00:ca:75:93:
3a:d4:43:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:23:24 2026 by rpki-client