This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
File: 1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json)
Hash identifier: GEH9EO/FiCicrnw3rFSKPPoBbZyhvg5EHLwPAL4Mj+4=
Subject key identifier: 38:6B:91:46:68:22:AB:83:71:EC:41:FD:C9:D8:D6:6D:15:CB:90:F6
Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
Certificate issuer: /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Certificate serial: 026D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
Manifest number: 0268
Signing time: Sun 25 Jan 2026 00:47:28 +0000
Manifest this update: Sun 25 Jan 2026 00:47:27 +0000
Manifest next update: Sun 01 Feb 2026 00:47:27 +0000
Files and hashes: 1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: KC4VzjwiHAvijLoZprxU6KsBhBK5r/ARtUdGit1yaMo=)
2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: /+DB0DwIdWV5MsoUQNnzsNFXQf9YCNytI0Fy3CklZBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Validity
Not Before: Jan 25 00:47:27 2026 GMT
Not After : Feb 1 00:47:27 2026 GMT
Subject: CN=69756820-38bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:2c:7f:9d:2c:8b:38:36:a1:2a:7e:db:38:
b1:ee:16:33:df:1a:f9:c9:33:0f:40:c9:4f:94:8a:
1e:84:fa:35:fd:c2:1b:08:5e:ee:03:8f:64:e1:6f:
f6:d7:72:18:5f:6a:0e:76:e5:3b:92:70:9d:7f:70:
30:55:a0:e8:4c:08:19:ca:29:a4:34:d3:21:29:ac:
fb:ed:e9:b6:3c:a2:3c:d7:f3:ef:95:97:60:24:73:
42:3a:9c:cb:43:e8:eb:7d:c0:99:c0:cf:8e:87:6a:
ac:62:93:b6:a6:81:57:43:da:72:50:47:7a:02:1f:
3e:c3:ca:cf:37:d4:22:da:67:6a:05:ea:e9:81:93:
c4:41:3d:4f:7c:db:f3:6a:fe:ac:aa:56:54:9f:ea:
c2:94:37:f4:11:97:79:0c:30:52:d5:62:7b:d9:e4:
b0:bf:6f:0c:d6:31:fa:b3:07:f2:00:4c:45:03:0f:
cf:b4:da:e6:4b:f6:f2:03:4d:56:b3:ac:e9:81:af:
a2:07:08:7e:42:94:fc:f2:37:7f:6f:b5:a5:cf:32:
e6:75:e4:c2:87:d3:f4:f4:9b:2f:e9:ea:95:f8:38:
2d:12:ab:1a:e4:32:d3:da:b7:02:a7:a8:da:ef:70:
51:6d:72:ab:af:28:8b:81:65:ae:d2:7f:6e:bb:f6:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6B:91:46:68:22:AB:83:71:EC:41:FD:C9:D8:D6:6D:15:CB:90:F6
X509v3 Authority Key Identifier:
keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:11:09:90:6f:64:4d:c6:38:69:cd:f4:1b:ba:d9:b3:03:41:
b7:a1:06:22:4e:6b:45:1e:9c:db:47:2a:a9:d7:50:f5:d8:71:
f6:69:9e:31:50:21:5b:85:9f:68:02:b6:07:95:de:a3:01:b3:
9d:bd:3d:0e:99:4b:2a:fd:6e:f4:7e:bb:90:c3:3b:e4:b7:9f:
98:8e:8d:ae:a7:7e:57:99:64:0e:03:03:15:d9:c3:49:8f:55:
ff:7c:d7:05:ba:43:08:a3:68:a8:ad:54:72:89:ad:18:5e:ee:
8c:62:0c:70:bc:76:b7:a6:bd:5a:f8:a9:d1:e0:d3:c9:49:af:
1b:b0:60:44:d6:c8:db:a6:87:bb:35:0b:be:19:4a:a7:e4:f5:
61:4e:27:a6:8d:a5:0b:8a:9a:66:65:cb:e4:4d:a2:7d:ab:14:
ea:11:af:de:1d:4a:ff:dd:d4:8e:53:77:60:f2:f8:60:46:59:
0a:cd:e1:99:cf:aa:35:3a:8a:19:6a:6a:49:56:e0:1b:f4:45:
e5:97:3f:30:7e:bb:81:96:6c:6e:06:5e:9e:aa:e5:01:44:4f:
fc:07:72:df:21:6f:23:dd:b0:67:99:b9:6c:d1:ee:f7:ca:74:
3d:f9:b6:77:c7:6d:c3:db:07:23:8b:35:c1:a1:b2:fb:4e:0d:
db:ae:c1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:31:05 2026 by rpki-client