This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft
File: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft (raw, json)
Hash identifier: wL8GAcGNlNMhl4iw0ScE3Gxgj9WfcwISEtl+LuxLsaQ=
Subject key identifier: 59:FB:6B:AE:A8:89:95:21:3C:2D:B0:6C:F9:46:C5:72:37:12:1A:E3
Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
Certificate issuer: /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Certificate serial: 0CE4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft
Manifest number: 0CC8
Signing time: Sat 24 Jan 2026 17:52:40 +0000
Manifest this update: Sat 24 Jan 2026 17:52:40 +0000
Manifest next update: Sat 31 Jan 2026 17:52:40 +0000
Files and hashes: 1: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl (hash: oL18PD4jRbmeZhiSIkYMJnj4lN9RRdGjGdWaceC3yvs=)
2: 3726AAFA0C0011EAA414FC4AC4F9AE02.roa (hash: 14kB3SfK8FO3TDcXjwd2x1V5vnXFwADnDTKaZlPfI5E=)
3: 37FE0B120C0011EAA414FC4AC4F9AE02.roa (hash: dRoQPSF6KT1Zue8dq53bmaroAkFylgM4n0LR39Z/E84=)
4: 99191AA404E911EAA9C20A60C4F9AE02.roa (hash: /7EkCVyzyWdgaZFFu1ty8sDFh13rW+8i+NvNFe/0Rfg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl
rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3300 (0xce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131ABD, serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Validity
Not Before: Jan 24 17:52:40 2026 GMT
Not After : Jan 31 17:52:40 2026 GMT
Subject: CN=697506e8-d0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:36:f0:65:38:25:20:f3:fd:08:ea:52:ba:
04:8a:37:7a:e1:61:bb:1a:34:51:c6:76:79:04:74:
2d:be:10:cd:37:43:c2:01:e6:0b:6a:89:20:a2:61:
dc:2d:0e:ec:1b:eb:62:63:1d:24:2a:14:30:d4:2d:
46:58:af:c4:3f:e3:ad:c9:25:97:b9:bb:48:c9:2c:
ba:9f:99:0c:2b:14:53:68:ae:76:20:17:42:32:cd:
03:68:c2:21:88:00:1e:80:fc:32:bc:01:46:d9:5a:
fb:62:ad:4e:2f:00:0b:46:ba:9f:22:00:84:73:3c:
94:d8:07:ac:6b:f2:3d:d0:c9:2b:42:7a:ec:13:bd:
c0:19:d0:25:c0:34:ae:0a:84:1a:9e:cc:ce:0d:ee:
c2:8c:0f:4f:3a:e1:99:a8:51:3f:7d:80:4b:0b:fe:
80:2f:d3:20:7d:36:fa:96:58:a9:42:eb:e7:74:d3:
1e:4f:40:fb:5f:09:fd:83:7b:64:88:6a:ae:55:34:
04:ec:ac:4d:f2:dd:63:75:df:6e:ae:70:6e:84:97:
46:2f:af:bf:91:20:bc:1e:ff:ab:10:b4:77:83:87:
f7:b2:a7:ef:d0:b1:66:3d:fc:41:a6:9a:9b:c2:2f:
16:66:11:8c:be:87:0f:23:90:3b:79:8a:a2:57:eb:
0b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FB:6B:AE:A8:89:95:21:3C:2D:B0:6C:F9:46:C5:72:37:12:1A:E3
X509v3 Authority Key Identifier:
keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:1f:bf:38:55:f7:ad:6e:f7:ca:2c:33:fb:eb:5d:b0:ec:1f:
76:87:67:ef:75:29:06:07:98:9a:60:f2:76:c9:f5:c1:32:33:
5f:bd:e6:f8:ab:22:85:4c:78:7d:16:77:74:ef:c9:31:4c:d2:
36:6d:b4:c3:0d:3f:27:99:35:29:ae:ad:0e:92:29:01:42:73:
d3:d4:ae:91:b3:a8:38:91:f9:88:63:15:1d:9a:7f:97:2c:8e:
7a:38:72:74:21:78:b8:bb:12:49:f6:95:2f:5f:c3:83:d7:46:
00:6e:63:75:14:09:48:71:f4:66:00:5b:2d:e9:cc:33:74:75:
5a:b1:71:71:ce:6c:32:ef:9d:72:e8:b4:fb:13:93:f2:d7:bd:
05:55:21:75:44:71:af:92:90:72:86:81:6b:1c:9b:bf:b2:9f:
d8:15:16:c1:00:7a:c9:a1:f5:73:ee:03:47:9a:e6:21:2f:57:
a8:da:3d:68:c3:d8:f5:09:61:ba:7c:5d:90:36:96:b5:59:94:
97:fc:54:bd:bc:85:9c:b5:a9:bc:93:3c:2b:f8:70:d7:60:f4:
a9:e3:25:4d:9a:d7:8a:94:98:c5:d9:c6:c1:67:3b:a0:7d:4d:
0d:94:63:08:bd:9a:f0:e6:8b:c2:61:18:01:a2:6b:a7:12:fd:
11:57:56:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:39:36 2026 by rpki-client