This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
File: LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft (raw, json)
Hash identifier: j2bJaEvqz4Nq5IlY0VORjfcrmCeFh2RJxouozqpcjs4=
Subject key identifier: 5A:F0:3E:51:EA:73:C4:66:1F:A2:8A:59:29:B8:84:5A:E4:78:24:02
Authority key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
Certificate issuer: /CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Certificate serial: 0258
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
Manifest number: 0254
Signing time: Sun 25 Jan 2026 00:56:46 +0000
Manifest this update: Sun 25 Jan 2026 00:56:46 +0000
Manifest next update: Sun 01 Feb 2026 00:56:46 +0000
Files and hashes: 1: LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl (hash: ZpUtq17mPCavQdXYTeopmKBXy8x+yCg08lOVvTIMIog=)
2: 552D155464A711ED99D40117C4F9AE02.roa (hash: 23rCyoR4WnNChFU7ymH391h0HiIrF4JQy1l5v2pbquM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl
rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153D75, serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Validity
Not Before: Jan 25 00:56:46 2026 GMT
Not After : Feb 1 00:56:46 2026 GMT
Subject: CN=69756a4e-3213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:35:99:d9:ad:49:15:0d:23:74:7a:9a:01:
6a:89:8f:aa:87:bf:1f:56:17:e1:2f:04:ab:04:36:
7f:0d:52:f5:3d:9b:59:52:c4:09:8f:bc:57:70:18:
14:02:60:6f:6e:a4:24:7e:35:80:0d:c3:38:6a:7b:
d4:9c:69:8e:11:99:cd:2b:ae:10:1c:65:32:ca:8e:
53:c4:0d:1c:2e:0d:55:a9:79:43:e5:bc:6b:e4:2e:
50:5b:f2:d0:24:47:2d:fc:ff:30:4f:39:f9:f7:aa:
aa:8d:09:6b:c0:02:f1:96:87:42:47:ee:a9:77:8a:
0a:82:73:09:fa:2d:39:3a:66:a9:4a:9f:a0:91:b6:
f2:10:45:35:76:22:da:e8:e7:67:bd:43:d7:03:d5:
a1:c4:c9:9e:cb:fa:6d:84:43:55:9a:cb:fc:f1:d8:
31:23:20:ae:82:35:c1:12:3d:2a:b3:1a:e4:46:de:
ee:3a:07:83:79:56:96:50:df:1e:b4:e4:a9:34:2b:
81:af:ff:28:6d:b6:2f:82:a2:7f:64:4f:69:fd:23:
6e:b0:96:49:ad:be:73:cb:55:29:16:85:8f:eb:b9:
b6:51:e7:bf:ef:12:78:9e:2d:3f:11:22:19:cc:2a:
cf:d8:7f:e3:7a:1e:41:fb:2f:e9:40:e5:aa:6b:26:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F0:3E:51:EA:73:C4:66:1F:A2:8A:59:29:B8:84:5A:E4:78:24:02
X509v3 Authority Key Identifier:
keyid:2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:31:9a:0d:99:09:0b:69:39:c9:42:25:23:01:e8:f7:b9:ca:
c5:c7:6f:79:8d:d8:ea:27:6c:51:47:bb:b1:69:ff:65:ba:52:
ef:5c:a2:81:dc:c7:85:cf:ae:2a:fd:d5:f7:b8:09:26:6d:29:
86:83:46:4d:16:e8:b6:97:eb:8f:da:59:60:58:31:68:6e:eb:
5d:90:31:ab:bd:57:19:30:72:b1:f4:48:9a:65:7e:8f:30:7b:
8f:bf:38:a7:06:07:57:3c:1f:50:89:a3:a3:08:fc:8c:36:55:
2e:31:45:b0:24:af:0f:46:9b:a6:54:81:7a:30:98:5a:26:3c:
95:e8:79:80:c5:cd:6d:02:46:fe:01:a5:91:b3:70:1a:8d:de:
e0:5d:d4:da:5a:85:4c:2d:4f:83:9c:84:7e:d1:15:10:dc:7b:
0e:f2:a1:b8:a1:57:0b:81:87:ee:b0:27:c1:c0:25:29:09:b8:
d6:03:6b:2e:d4:09:ce:4b:59:77:18:01:8b:90:9c:85:d7:15:
5d:e0:41:e2:30:fe:cf:c1:23:0d:92:30:41:1a:bd:58:ec:df:
38:d0:1a:a0:16:17:bb:86:9b:94:87:5b:ee:b3:b5:bd:ed:49:
f9:15:a7:f4:d6:e6:c2:e9:5b:41:33:50:69:72:eb:9b:db:20:
dd:a5:68:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:53 2026 by rpki-client