This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json)
Hash identifier: qgtZIHolb3Q+2pBbbeiK+0Hwu9KkAbKPZdulI4pzHIs=
Subject key identifier: EF:73:25:01:AD:6B:D3:D2:16:16:42:E9:E5:6E:EB:5E:FE:06:ED:C8
Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
Manifest number: 01B6
Signing time: Sun 25 Jan 2026 02:25:17 +0000
Manifest this update: Sun 25 Jan 2026 02:25:17 +0000
Manifest next update: Sun 01 Feb 2026 02:25:17 +0000
Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: T7Eo+b9JEOt63rWmG8Ssuz0Yy1KRrSrKc3DgVqk+eoI=)
2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: PHAPD39R0/+5V+WCmlH3xcXfFFqLnGp5Euy8i5sqtnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Validity
Not Before: Jan 25 02:25:17 2026 GMT
Not After : Feb 1 02:25:17 2026 GMT
Subject: CN=69757f0d-4eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:04:d3:b2:0b:9d:ef:14:2c:d4:ba:c2:78:
71:38:0d:c5:46:38:13:8b:e2:04:72:45:ce:68:37:
17:c0:76:bd:18:5f:28:3d:b1:98:4d:fa:fe:fd:5b:
4e:09:d2:c6:d2:e7:ff:73:d9:7d:5c:fa:a9:d6:3d:
f2:d7:73:78:f9:8f:0d:4f:ff:a6:be:c2:93:6e:6d:
5a:59:cc:d1:a2:36:f9:65:67:f8:24:6e:48:f8:0e:
39:03:f8:89:19:57:84:19:35:f9:70:d4:2d:35:1d:
5c:57:bc:fa:70:ab:12:9a:ed:8e:b9:83:43:7b:f3:
cf:91:1a:5e:59:69:b6:af:69:9b:50:48:d2:f4:8a:
85:e6:9e:78:69:b4:03:6a:ed:37:43:d1:3b:41:8d:
85:78:93:6c:48:74:9b:90:cc:67:8c:13:a3:5e:c1:
60:fa:73:ae:3a:5d:87:38:a7:dc:fb:ed:51:3b:81:
b3:a2:36:cd:77:a7:f0:f8:34:e4:56:53:4c:5f:3f:
0a:0b:4e:0e:a8:f8:ec:d0:e1:f3:92:38:04:f7:05:
23:07:8f:55:a6:e0:35:53:dd:43:4f:aa:af:96:2e:
80:df:39:58:fb:c0:36:a0:48:dd:5b:98:55:80:a4:
5f:74:31:61:bd:b7:18:43:87:d6:2f:cc:87:80:ee:
5c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:73:25:01:AD:6B:D3:D2:16:16:42:E9:E5:6E:EB:5E:FE:06:ED:C8
X509v3 Authority Key Identifier:
keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:16:41:ee:09:3a:d0:6f:56:c7:09:01:fe:82:a8:bc:08:cf:
21:3c:d7:99:4d:09:55:78:59:66:2c:01:ef:a8:c2:c8:c8:fb:
b5:2b:3b:06:7d:44:9c:c0:2a:d3:9f:42:e8:b7:b7:b1:28:92:
d7:4b:23:55:2e:c4:46:f5:0f:d5:b5:22:d4:b2:6f:04:ea:ff:
85:c7:a4:b5:11:36:fe:e5:bf:5d:dc:d5:9c:30:5e:70:12:6a:
ea:1c:c9:c3:de:0f:09:e0:0d:88:72:ad:a9:2e:3e:5e:d8:fb:
1c:c4:d9:e2:16:e8:15:dd:6c:25:de:c4:b9:d4:c6:73:94:94:
cf:26:4c:87:62:da:eb:67:5a:4e:92:ba:11:79:45:d2:5d:99:
d9:71:52:dd:70:a0:f5:b4:f6:e5:a0:19:0d:69:aa:02:6d:01:
6a:08:36:82:31:2d:ff:c6:d6:53:66:2b:30:59:b9:a0:38:e5:
7d:03:dd:18:1c:fc:61:c8:b7:93:14:df:4c:84:56:da:40:e1:
43:fd:34:26:c1:5c:78:08:2e:32:c6:04:90:ef:a0:78:3a:02:
0e:b9:dc:36:59:f4:69:df:f1:3d:f3:5e:cf:55:fc:9c:9d:4c:
87:d8:9c:f5:9c:a9:9f:5c:c6:56:f7:31:39:e2:f8:03:16:97:
5f:e7:1d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:17 2026 by rpki-client