This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json)
Hash identifier: Ak+k0QsC6ReVzm1oM0oes6NkNkvNyzXk7g4N1p36dUU=
Subject key identifier: FB:E9:70:6C:8A:3A:2F:43:FA:13:9B:85:69:1A:9A:A3:BD:B2:7A:F5
Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Certificate serial: 357F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
Manifest number: 3544
Signing time: Sat 24 Jan 2026 14:15:42 +0000
Manifest this update: Sat 24 Jan 2026 14:15:41 +0000
Manifest next update: Sat 31 Jan 2026 14:15:41 +0000
Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: hQ5o4wiuQggoqVNFsAWlg3SVndjHaR4GfrXXexxQAwA=)
2: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: gPXM355jFI8rfBytnJ40meI4jOctz96q7otlI3dOULI=)
3: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: kZ7lGqUSa7QDbdQn5Phtug9wEvqAopDp24gkxncZqms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13695 (0x357f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Validity
Not Before: Jan 24 14:15:41 2026 GMT
Not After : Jan 31 14:15:41 2026 GMT
Subject: CN=6974d40e-cfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:43:24:0c:20:4a:95:21:73:95:cc:39:d5:9b:
da:09:9c:82:05:ec:10:f1:f7:7d:b4:19:a7:ec:b7:
9d:93:e4:28:83:0b:b2:c6:c1:45:c0:f6:71:5e:75:
bf:de:1b:8f:76:f1:63:0c:ed:12:17:ce:4b:9e:39:
13:6e:19:35:7b:36:05:9a:c9:5b:ea:fa:e5:84:a6:
cd:39:24:62:be:46:11:b3:3e:25:c5:fd:56:0e:5a:
09:6c:fb:60:56:e3:90:52:d7:f0:54:e5:42:0b:0c:
3b:ce:06:46:d7:0f:b8:15:74:dc:01:f1:38:90:cb:
0b:3a:be:74:cb:43:f0:a2:0d:dd:57:5a:de:ea:86:
4e:08:cd:e4:30:de:e0:43:ac:d5:a0:68:cb:70:e1:
fb:7b:07:ce:29:fb:2f:0b:7a:8f:9c:8d:d3:db:36:
d1:53:ed:b8:80:09:b3:4e:9d:9c:6e:f1:10:21:ed:
b9:8a:dc:81:0b:f4:a3:7c:a8:82:27:e0:dd:f1:c1:
83:63:1f:4a:7a:eb:35:69:35:13:e2:66:1b:07:d3:
ab:ae:24:ae:14:72:50:64:9e:4a:db:e7:32:89:66:
20:af:97:3b:97:01:22:6d:14:d0:96:75:7e:23:ea:
e5:0d:f8:91:3f:a9:5a:77:03:5b:c5:68:0d:ea:57:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E9:70:6C:8A:3A:2F:43:FA:13:9B:85:69:1A:9A:A3:BD:B2:7A:F5
X509v3 Authority Key Identifier:
keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:a3:1a:80:ac:7d:6c:12:c6:8d:07:91:d0:bd:33:21:eb:e8:
8d:c0:19:73:fd:09:89:0f:72:36:16:9d:7a:be:58:e7:b8:00:
24:99:82:f0:15:12:af:da:9b:a9:49:82:41:35:2c:b6:d0:cb:
f8:b3:f6:60:f7:be:12:30:e7:eb:52:64:67:a8:43:ec:6e:3d:
28:75:49:df:da:2c:b4:51:cd:bb:19:6f:40:e2:fa:6f:b4:a4:
44:14:86:18:69:46:c3:2e:a6:d4:f1:32:65:02:9d:66:b4:b7:
eb:9a:3e:d6:24:09:31:21:74:ff:63:2c:7d:f6:86:35:b8:cd:
b9:4e:e1:d3:93:42:6e:a8:b8:7d:73:9d:cc:80:26:df:57:ea:
6c:2b:95:46:8d:d4:60:58:03:21:f8:e0:34:2d:7f:15:e9:9a:
6b:10:28:e3:26:80:6e:2b:e4:b0:e7:78:d1:72:3d:40:ce:92:
e8:33:a5:48:41:c7:40:2e:1e:25:04:28:49:f1:36:85:07:cd:
0c:c1:c0:76:7f:94:a2:de:a2:3a:f5:01:9d:36:e7:ab:7d:a8:
94:6a:b4:8c:d3:4d:1e:b1:5c:af:f2:75:c4:58:d4:f1:bc:96:
bd:71:59:98:9d:f8:9e:b5:cc:a5:28:f5:32:3f:31:27:b4:0a:
6a:5e:4d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:43:34 2026 by rpki-client