This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json)
Hash identifier: JLuCP44fNbmS7uTc5++jfewriiKuDDdzm+vwn4FVMK0=
Subject key identifier: EE:71:B8:FB:3F:79:91:81:C6:B7:78:F9:94:E2:02:9E:2F:B5:AF:90
Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
Manifest number: DF
Signing time: Sun 25 Jan 2026 04:56:51 +0000
Manifest this update: Sun 25 Jan 2026 04:56:51 +0000
Manifest next update: Sun 01 Feb 2026 04:56:51 +0000
Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: +xfeA9tlXb2W7bK6qxLtoY/pWoJgi+RtGX99AFfifxY=)
2: 44870D64C9F711F0BE5A166DC4F9AE02.roa (hash: bp0RLIpTitUcQ67OSTbBZOecrYQ1aQaiC31xXwpL9Bc=)
3: 45541EE4C9F711F087D2166DC4F9AE02.roa (hash: ou4XIefPRD+gcNDDXhaZbU7PKX3s57bqkC7i0ZQskmE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Validity
Not Before: Jan 25 04:56:51 2026 GMT
Not After : Feb 1 04:56:51 2026 GMT
Subject: CN=6975a293-278e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:f5:b7:ec:e2:79:85:e5:32:6b:97:56:59:
b4:a7:bc:1b:1b:f9:53:aa:3d:16:ef:71:68:94:ce:
24:96:57:55:f7:ce:f3:98:30:ad:ba:49:1f:b2:b9:
8c:57:45:36:a2:5b:73:88:70:96:15:b7:39:9c:81:
dd:48:83:d9:7c:63:96:a0:56:ec:ec:9c:a6:fb:03:
e2:b3:b1:c3:b4:15:74:86:00:97:f3:b3:1b:e0:27:
6a:77:ad:ea:b5:8b:33:41:af:fb:73:c2:a5:72:f8:
bf:0a:e8:52:2f:76:1d:40:cf:d6:8c:af:8d:c8:7f:
1f:01:85:32:c0:bb:dd:79:7c:fb:79:d9:09:0e:ce:
ca:18:50:99:7c:12:77:34:83:8d:ff:16:e5:84:d1:
62:56:cd:93:c5:fe:70:40:d1:0b:7d:be:87:bf:f3:
f1:29:dd:69:3f:72:c0:75:de:b7:ee:1c:aa:86:62:
bb:4b:5e:34:be:c2:f2:50:3c:24:70:aa:29:85:dd:
bf:ed:aa:ab:86:f4:67:01:09:0e:16:fc:20:f6:07:
87:2a:9a:5d:d0:3b:a8:a1:36:d7:e0:d0:50:06:8b:
77:eb:67:82:11:95:61:51:7e:24:df:08:fb:6e:46:
9e:32:1d:90:28:36:d1:a7:b2:41:72:15:47:f0:f7:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:71:B8:FB:3F:79:91:81:C6:B7:78:F9:94:E2:02:9E:2F:B5:AF:90
X509v3 Authority Key Identifier:
keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c0:5d:be:8e:65:ed:90:4c:69:0e:47:9a:35:5e:01:f3:39:
83:51:bb:b8:5e:97:2c:66:51:f0:56:88:ee:85:bf:a0:89:23:
2e:46:d8:a9:26:4c:3f:06:13:98:0e:aa:25:6b:5f:9f:a6:47:
69:9a:c9:53:52:31:7a:55:ac:62:f4:4d:20:60:3f:ed:af:1f:
cd:4b:69:ef:48:df:29:24:98:eb:c2:49:d6:fa:e9:f6:d8:2d:
4a:35:58:af:46:85:ce:ed:2e:5b:33:78:e8:2c:8a:5d:d9:46:
34:d2:18:cf:e2:2f:da:82:c1:2a:f9:10:6a:9a:d5:b9:b2:89:
df:f6:59:f0:45:b0:58:ed:a5:1f:bd:aa:71:35:1f:c8:f1:7f:
f1:94:5e:fd:33:df:0f:7f:ab:9e:2f:51:90:36:5d:9c:21:6d:
79:75:ae:a0:1d:d3:22:e7:38:21:3b:11:b4:37:3b:52:17:23:
30:af:26:52:bf:1e:90:32:96:62:01:0c:76:56:06:1c:c2:c5:
9f:f2:32:01:06:fd:36:52:8f:f7:75:30:4c:0c:e2:9b:18:df:
05:6d:85:02:02:45:41:ff:1e:c3:e4:e4:56:d4:1f:c0:ea:96:
59:a4:b6:fc:e5:d7:39:38:56:53:da:37:04:a6:c5:03:7f:33:
77:c6:aa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:24:37 2026 by rpki-client