This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json)
Hash identifier: fzpY/kmSexpE9xLmLeghbp4LziZEiSd8XrU7HPqt76c=
Subject key identifier: 75:0F:4A:83:DB:E1:C5:BD:F1:43:BF:DA:38:91:FF:64:8E:0C:5F:7A
Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
Manifest number: E8
Signing time: Sun 25 Jan 2026 05:08:48 +0000
Manifest this update: Sun 25 Jan 2026 05:08:47 +0000
Manifest next update: Sun 01 Feb 2026 05:08:47 +0000
Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: pdW9ehawNWxv1n5nVZ965iM6MNuKUjU+Mpv9CTKR1js=)
2: 45322DB8BF9111F0B4CD4C4FC4F9AE02.roa (hash: ud1mE3zDUyJoUD45JUyLpu4ly9UG6jF4f8pk2Ff/D/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Validity
Not Before: Jan 25 05:08:47 2026 GMT
Not After : Feb 1 05:08:47 2026 GMT
Subject: CN=6975a560-9e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:ae:7d:44:d2:32:f9:43:33:d8:21:ac:81:
a4:74:9e:24:7d:e6:58:f3:a7:16:fd:1b:b7:e5:6b:
2c:99:34:b4:07:77:a9:c5:91:ed:cd:05:a3:7c:c3:
48:c0:61:1b:66:10:92:fc:e9:dc:a7:46:12:6c:fc:
35:47:1c:20:aa:de:0e:94:48:91:12:c2:12:c2:81:
14:b6:ef:4a:06:00:ab:ed:8e:cc:b9:06:f1:89:f9:
07:8b:1e:19:20:d6:9d:d4:bd:c5:75:aa:e9:cf:0c:
05:20:81:da:20:ee:d7:26:4c:5e:f8:b9:02:2c:1a:
b9:8f:e2:c3:4a:b0:00:3d:f7:47:cc:be:11:6e:81:
18:f6:e2:6b:d8:98:c8:17:e8:c3:7b:d9:18:1e:3b:
a1:7f:a4:2e:51:ea:0d:90:a1:58:e9:72:a8:5e:e3:
d0:f4:09:0d:53:1d:e5:1a:09:1e:38:6c:31:62:d1:
4f:10:9f:24:3b:bd:fa:a5:07:82:1f:e7:93:40:24:
18:d8:cf:1f:1e:c1:f4:7f:f1:24:72:3b:86:67:50:
e1:c9:b9:6e:16:f1:86:04:37:87:a9:76:1c:44:52:
2d:19:d8:8b:88:27:26:b1:8a:a0:9c:9f:de:67:60:
40:03:9b:da:67:13:14:0b:ef:3d:cc:47:fe:f7:08:
76:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0F:4A:83:DB:E1:C5:BD:F1:43:BF:DA:38:91:FF:64:8E:0C:5F:7A
X509v3 Authority Key Identifier:
keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:34:6f:95:ce:0e:77:5e:d9:5d:ae:aa:95:ea:1c:ff:ec:23:
42:89:73:2d:9b:ec:4f:f1:df:75:31:bf:44:fd:f9:ff:af:1c:
2c:a4:73:66:83:e8:c6:a4:f5:6e:21:3e:66:91:6a:bd:a4:14:
9a:de:db:ef:ad:42:07:cd:34:25:03:f4:5f:8c:1c:9c:c5:22:
e8:2b:c6:5b:1f:73:d2:fb:d9:c3:4b:00:a0:ff:b2:4a:f3:eb:
dd:46:f8:c2:d2:d6:c1:3c:3f:4d:d3:af:4a:3e:d4:91:31:92:
d4:74:93:e0:0b:82:36:eb:1b:93:0e:ed:8b:31:c0:e8:d2:4e:
5b:07:a2:f2:58:43:da:81:6f:e4:d3:0f:28:63:60:ce:fc:30:
67:9e:03:b9:ef:93:46:1a:8d:53:8e:80:14:f6:b5:02:76:69:
8a:2d:36:34:27:5b:b8:59:07:d8:e1:a7:91:d9:92:4d:27:73:
14:7f:3a:38:54:8a:66:76:21:33:73:58:9e:10:fd:16:78:15:
8b:83:e0:66:53:23:3c:a6:13:65:60:2c:46:9c:61:42:32:3f:
de:c9:58:51:36:3d:7d:d4:28:90:50:6b:3d:0a:4f:08:26:e9:
b6:95:8b:01:d2:85:a9:11:8f:92:fa:e4:c6:38:00:a7:f5:d4:
57:c0:3e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:33:05 2026 by rpki-client