This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
File: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json)
Hash identifier: yF9ZNwuILPzCK0/N4Zzu243kXTwfaXoeKUeTvci5Mo4=
Subject key identifier: 9A:85:FA:95:87:B6:46:EA:72:7E:64:AC:F9:2F:A9:0D:08:F9:88:A1
Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Certificate serial: 0623
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
Manifest number: 060A
Signing time: Sat 24 Jan 2026 22:12:45 +0000
Manifest this update: Sat 24 Jan 2026 22:12:44 +0000
Manifest next update: Sat 31 Jan 2026 22:12:44 +0000
Files and hashes: 1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: 35/FZmH9JUFOS6IGwsQ8+GgWd+jkiHGOTdSAkXLpO88=)
2: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: +jBGaqvKM/p3gFY9j31Ktn8G8q5l2wqpkIruownzwFg=)
3: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: hA/qYpYBMY/Kd41Yn5++b5Q+qTaDQ7FCreW/lO2fSUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1571 (0x623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Validity
Not Before: Jan 24 22:12:44 2026 GMT
Not After : Jan 31 22:12:44 2026 GMT
Subject: CN=697543dd-81d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:f0:69:37:b2:ad:59:25:f3:f8:0d:9c:84:
53:4c:fd:e2:18:30:fd:6c:64:ac:ba:50:9d:61:ee:
f1:b7:75:9a:fc:4e:b4:a5:a7:55:61:d9:e8:ed:e6:
c0:2c:5a:1d:6b:5e:69:8a:3f:37:8a:71:62:3f:bf:
07:08:46:51:d7:d0:c5:3e:e4:28:69:78:48:06:b9:
53:40:d2:96:f8:8a:2e:2e:51:c1:29:2f:46:9f:b5:
ff:75:43:c4:25:b3:da:30:75:09:14:b6:2d:4a:57:
5c:96:a4:6a:e3:80:02:04:f6:e0:04:5a:bb:73:ef:
77:62:52:23:c5:d1:a4:62:53:fb:57:f7:20:bd:77:
be:dc:28:88:2f:ec:4f:fd:25:08:b3:8a:0a:a4:45:
e2:f6:c4:bc:17:cb:13:b8:45:2e:39:15:65:ac:0f:
82:0b:50:f3:03:71:6f:97:a8:a8:c9:99:bf:f2:17:
12:a4:a0:2f:0a:86:f3:69:20:93:f3:6f:bc:ce:6a:
f2:fc:22:87:b5:cf:bf:b0:c8:53:a5:d8:77:f6:19:
27:a5:92:e3:8b:c8:51:10:06:e0:12:36:36:89:8c:
f2:b8:db:13:4f:46:86:a3:7d:df:a7:ec:91:ec:35:
44:f1:b4:a1:50:8e:98:cb:fe:54:18:92:56:60:bb:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:85:FA:95:87:B6:46:EA:72:7E:64:AC:F9:2F:A9:0D:08:F9:88:A1
X509v3 Authority Key Identifier:
keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:54:48:36:57:85:45:79:a5:0c:8c:67:14:13:7b:b4:91:45:
78:09:64:d9:d2:ce:a0:85:27:82:6a:2f:97:0e:bf:51:ac:8d:
8e:64:f7:ec:69:81:7b:9a:18:97:51:d0:5c:8e:24:f0:8c:6c:
72:e6:36:15:b5:64:b3:69:f8:03:a1:63:09:28:79:af:79:25:
4a:01:d7:c8:f4:c6:3a:d4:f4:e0:e1:de:47:5a:20:ec:bd:9d:
43:99:ed:6c:24:db:fb:b5:65:58:88:25:33:f4:1c:6f:d5:7d:
32:98:d8:3c:73:b4:3c:e6:a4:ca:df:bc:22:72:98:bb:59:2a:
c5:98:77:7e:e5:4a:bb:f9:d4:de:fb:18:41:ec:8b:bf:00:ed:
5b:f5:c2:b4:4d:8a:fd:9e:11:6d:78:ff:58:10:e0:a8:00:6b:
19:ec:d2:41:8d:cf:9a:15:a5:b0:8d:0c:26:ca:ee:20:87:95:
11:b6:d0:18:e0:4c:81:1a:77:ab:c0:a4:e1:51:b1:42:3c:0e:
27:39:e9:13:d2:1d:db:1c:eb:f2:21:d1:58:fd:40:06:7c:ad:
45:a6:1a:ed:e2:30:e1:70:75:94:b1:2d:08:95:35:48:79:19:
7d:9e:40:3b:e4:c6:9e:45:d9:e3:c0:31:24:98:fa:3c:ce:83:
0a:21:95:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz
MDg3RTk3NzAwHhcNMjYwMTI0MjIxMjQ0WhcNMjYwMTMxMjIxMjQ0WjAYMRYwFAYD
VQQDDA02OTc1NDNkZC04MWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn47waTeyrVkl8/gNnIRTTP3iGDD9bGSsulCdYe7xt3Wa/E60padVYdno7ebA
LFoda15pij83inFiP78HCEZR19DFPuQoaXhIBrlTQNKW+IouLlHBKS9Gn7X/dUPE
JbPaMHUJFLYtSldclqRq44ACBPbgBFq7c+93YlIjxdGkYlP7V/cgvXe+3CiIL+xP
/SUIs4oKpEXi9sS8F8sTuEUuORVlrA+CC1DzA3Fvl6ioyZm/8hcSpKAvCobzaSCT
82+8zmry/CKHtc+/sMhTpdh39hknpZLji8hREAbgEjY2iYzyuNsTT0aGo33fp+yR
7DVE8bShUI6Yy/5UGJJWYLvHcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqF+pWH
tkbqcn5krPkvqQ0I+YihMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG
MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s
M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjhCQy8wRTdENjRENkRGMEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9M
Wk1JVTNNd0hkMEV3aC1sM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+VEg2V4VFeaUMjGcUE3u0kUV4CWTZ0s6ghSeCai+XDr9RrI2OZPfs
aYF7mhiXUdBcjiTwjGxy5jYVtWSzafgDoWMJKHmveSVKAdfI9MY61PTg4d5HWiDs
vZ1Dme1sJNv7tWVYiCUz9Bxv1X0ymNg8c7Q85qTK37wicpi7WSrFmHd+5Uq7+dTe
+xhB7Iu/AO1b9cK0TYr9nhFteP9YEOCoAGsZ7NJBjc+aFaWwjQwmyu4gh5URttAY
4EyBGnerwKThUbFCPA4nOekT0h3bHOvyIdFY/UAGfK1Fphrt4jDhcHWUsS0IlTVI
eRl9nkA75MaeRdnjwDEkmPo8zoMKIZVA
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:29:54 2026 by rpki-client