This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json)
Hash identifier: PWtXKiqS8FzNF5UfDkPmSjAUo9mFy3sAT66w6JgXzrc=
Subject key identifier: D8:E7:04:49:B1:7A:04:5F:6E:50:C4:8C:C3:44:A9:5C:5A:C8:09:37
Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
Manifest number: 021D
Signing time: Sun 25 Jan 2026 01:28:05 +0000
Manifest this update: Sun 25 Jan 2026 01:28:04 +0000
Manifest next update: Sun 01 Feb 2026 01:28:04 +0000
Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: Nfv/vZEQKivEa4k+Kyse+yc+e+jG7AhgMu9QZDxBuGc=)
2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: JysCwCJJxEUrqo1TsnL+HZ8PxWYOSwYy6QcS3aO9jis=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Validity
Not Before: Jan 25 01:28:04 2026 GMT
Not After : Feb 1 01:28:04 2026 GMT
Subject: CN=697571a5-a367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:04:6b:43:48:ba:47:e5:51:28:b8:a3:85:
70:88:f0:37:22:5b:c5:5f:02:b2:6a:39:f1:71:90:
39:a1:50:37:6b:00:e3:cc:b6:9c:ad:c7:23:de:07:
1c:14:69:cf:3c:0b:6a:85:61:fc:3c:c3:01:a5:de:
bc:21:46:11:31:28:0b:81:6c:08:b4:1d:18:d0:53:
6c:85:44:88:02:33:9f:82:67:33:8f:94:87:b2:34:
dc:a2:de:38:1e:0e:a4:5d:95:ac:28:e8:67:9f:7f:
d1:be:1d:5f:28:95:0e:49:dc:0d:46:e6:a7:a0:f7:
ce:f6:3d:c4:80:1e:5c:4f:db:ec:6b:89:3a:c3:7c:
79:26:81:b7:af:72:b7:3c:d9:da:90:9e:5b:af:1b:
e8:f9:5a:12:8b:ef:3d:ab:72:c3:bc:15:3c:10:f4:
8f:14:8a:9e:c1:f8:a7:42:91:b4:99:c2:51:97:74:
1e:33:14:84:65:d1:d3:4c:1c:98:d2:6a:4f:2f:1d:
cc:04:a2:ff:26:09:15:e5:36:39:4a:5d:db:d7:03:
4e:97:ac:0a:36:aa:76:36:eb:9b:dd:4d:9a:fd:e0:
bf:79:fb:f9:9c:6d:3c:48:ae:68:70:17:16:85:86:
83:00:98:ed:82:d8:75:dc:f5:bc:e5:69:ee:16:2e:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:04:49:B1:7A:04:5F:6E:50:C4:8C:C3:44:A9:5C:5A:C8:09:37
X509v3 Authority Key Identifier:
keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:1f:64:23:c9:6c:16:01:8c:06:fa:f3:89:4f:91:65:f9:76:
d2:98:6b:8b:b1:a5:6a:da:a6:f3:5b:c5:62:1c:21:92:e2:f7:
42:5e:8e:63:27:89:ab:2d:a7:e9:33:4a:2c:7a:27:ad:63:47:
e3:41:b9:89:54:38:dd:89:bd:12:5c:b4:34:94:6a:95:68:e1:
34:35:77:68:66:1e:06:c1:50:06:12:9e:ee:27:e7:1b:68:c8:
c4:82:dc:72:8a:93:ca:7b:4f:ce:04:a5:af:ca:12:6d:74:b8:
70:f8:08:7b:82:00:a3:9e:ad:1a:e6:00:70:5d:5b:4c:40:35:
6e:4e:5e:bc:ba:95:f4:c2:4a:f2:08:e1:41:67:09:4a:8d:12:
f1:c2:4e:79:7c:65:56:c0:60:f0:ae:87:ae:54:9d:10:d1:e5:
6d:96:d4:76:fb:00:3c:5c:57:42:8b:13:70:c9:ee:4d:a7:f9:
30:13:6d:d7:5e:1b:53:4d:d8:36:d7:18:d8:d8:d2:c3:88:e3:
cc:a0:10:74:7b:96:82:ff:ca:b4:de:89:32:63:aa:98:90:18:
37:53:2a:58:4b:81:4c:30:2a:3f:07:42:ec:66:f7:a4:3a:29:
7f:e4:f2:8d:ae:2e:dc:d9:ef:74:bf:46:26:af:33:d3:0d:f1:
c9:7c:15:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:35 2026 by rpki-client