This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
File: LzabRI0hcVlrosk82-JY6vMxdZQ.mft (raw, json)
Hash identifier: ZLBKhTfIb6EYi2HInz2Cr6zpgIlV2Tk9c+8E86N2yis=
Subject key identifier: 32:D2:EC:9A:49:CC:B0:0D:4B:2D:C6:06:12:4B:BD:69:FE:2F:24:88
Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94
Certificate issuer: /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594
Certificate serial: 0736
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
Manifest number: 072C
Signing time: Sat 24 Jan 2026 21:18:19 +0000
Manifest this update: Sat 24 Jan 2026 21:18:18 +0000
Manifest next update: Sat 31 Jan 2026 21:18:18 +0000
Files and hashes: 1: LzabRI0hcVlrosk82-JY6vMxdZQ.crl (hash: q81Ejm7kszAmXeht1bmL7gLny60pbbryhtnZptO0K9w=)
2: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (hash: fNgIH67XyQ/WVQmI2S4PmAo5xtTJ5qL5rco+XN6lPg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl
rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1846 (0x736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161A5A, serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594
Validity
Not Before: Jan 24 21:18:18 2026 GMT
Not After : Jan 31 21:18:18 2026 GMT
Subject: CN=6975371b-655c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:e1:21:52:14:2e:5a:e5:35:fe:12:fa:69:
e2:eb:da:02:6a:26:19:fd:49:d0:57:e3:46:c1:91:
ee:e8:2c:1c:a3:91:45:41:e6:e2:fd:4a:c0:cd:8f:
29:4c:c3:48:70:ee:59:0b:0e:f5:17:3c:75:df:a9:
16:41:b3:9b:61:cb:2e:a5:e7:15:18:40:c3:a7:f3:
4c:58:71:b9:fc:e7:dd:83:e5:48:0b:7a:12:cb:6c:
1b:75:b4:7b:2d:d0:d5:ab:ec:62:d2:c4:83:1b:33:
d9:49:12:2f:8c:55:de:c0:84:36:6d:6d:0e:cc:88:
0c:b5:cd:b1:3a:28:30:06:3d:82:34:4f:6d:6c:02:
57:cf:5b:3a:95:3f:9b:5d:64:e6:e1:fe:59:6a:5a:
c3:7d:62:84:ff:a1:4f:ce:5d:f8:f9:55:c1:83:81:
b5:24:ba:51:17:6a:c3:c2:11:85:bd:50:2a:64:78:
08:e5:ac:1e:f2:e5:8a:70:c1:2c:eb:5e:ec:b4:4b:
95:29:ed:66:31:88:0a:3b:16:16:68:07:ee:f9:28:
32:cc:6d:51:c3:4f:55:4b:22:11:9a:2a:8b:43:71:
d3:49:a9:59:fb:26:4a:8f:65:e7:d3:a1:15:22:04:
e7:d3:77:e9:5a:c8:f8:f8:3b:1b:17:c0:63:64:39:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D2:EC:9A:49:CC:B0:0D:4B:2D:C6:06:12:4B:BD:69:FE:2F:24:88
X509v3 Authority Key Identifier:
keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:32:78:af:e1:12:d6:17:d7:02:f2:29:ec:09:e6:56:06:f7:
a5:4c:8a:e5:f9:b0:77:fa:8c:be:af:54:50:aa:35:17:cf:a1:
3f:63:08:e4:da:12:7d:df:05:19:e1:31:59:1f:56:fe:ab:b6:
0d:52:71:c1:5e:0e:3f:00:43:e0:f4:d2:bc:cb:f9:da:5d:49:
71:1b:b3:f0:9c:59:42:29:c5:92:51:5a:73:28:ee:a3:71:c3:
3a:ef:93:e7:40:1d:47:eb:08:4b:9b:c5:e5:0d:5f:fa:48:5e:
82:5a:67:42:b6:a8:ea:23:32:61:68:04:e3:da:78:d0:f7:b5:
fe:c5:a7:eb:12:6e:27:db:df:95:39:2b:06:ff:f3:8f:75:9c:
16:ff:d9:5b:cb:33:96:88:ef:da:21:66:9e:b6:03:9a:bd:27:
c0:d0:f2:7e:0a:fa:c4:4d:30:d7:55:13:83:0f:b4:02:45:4b:
5b:2e:1a:29:6c:e0:5c:cc:18:f6:6e:74:64:f5:59:58:0c:dc:
07:76:f1:98:48:d2:85:8c:73:0e:2b:02:04:72:62:77:13:07:
9b:96:21:ec:cc:ad:9c:17:5e:70:94:05:28:f9:3c:2a:ce:04:
cb:b1:47:71:a8:22:38:99:25:b8:ea:55:ff:bd:13:99:7f:c4:
22:63:6a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:51:32 2026 by rpki-client