This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
File: LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft (raw, json)
Hash identifier: lVI//BjkZR+pRl+XEKjQfKB1EgTT41HT8KOMXmanbp8=
Subject key identifier: 44:42:0E:27:C4:0A:7F:C8:BC:6E:AF:1A:7A:82:C1:EC:9E:C9:56:2A
Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34
Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
Certificate serial: 3504
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
Manifest number: 3500
Signing time: Sat 24 Jan 2026 15:09:33 +0000
Manifest this update: Sat 24 Jan 2026 15:09:32 +0000
Manifest next update: Sat 31 Jan 2026 15:09:32 +0000
Files and hashes: 1: LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl (hash: 9eD9ah3CnSoD6N93C+XqOCfV7vR5msx3z8hWK+y0WcY=)
2: 22355CF4DE8411EDBC551D19C4F9AE02.roa (hash: cD8CzWCOccX7amwfxtqgHIbE7YwiBohTqztQjp4x6HM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl
rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13572 (0x3504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AE6A, serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
Validity
Not Before: Jan 24 15:09:32 2026 GMT
Not After : Jan 31 15:09:32 2026 GMT
Subject: CN=6974e0ad-5221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:2b:3a:95:5c:73:83:0b:f6:28:92:ce:38:
47:50:bf:01:52:3f:71:b5:2e:14:12:da:81:9d:35:
cd:1a:1c:f0:e8:50:55:e1:19:65:81:fb:cb:52:a4:
05:b7:7f:21:4b:47:0a:85:36:c4:43:ac:0c:6b:cd:
55:5e:07:01:28:67:df:14:67:43:e5:e5:40:c3:2a:
d1:08:85:c6:17:49:8f:4d:f7:d6:00:e2:03:1a:fb:
50:77:b8:93:35:f2:9e:d4:9a:3d:bf:ed:aa:42:d9:
9a:be:c6:e8:c7:e5:87:0f:6a:50:d9:cd:ff:56:29:
75:c7:e2:e2:cc:6a:37:a1:34:74:06:84:15:73:89:
92:98:e6:c1:00:ea:33:0d:3e:73:80:21:2e:d4:72:
5a:43:1c:80:67:25:09:94:fa:c9:ee:45:c8:09:bf:
fb:22:a3:c7:64:95:79:94:d7:d1:f2:79:96:42:25:
27:f8:a5:e1:9a:72:d5:89:e8:27:af:e7:c9:7c:27:
1a:6c:9f:44:10:41:8e:63:ac:ee:c6:ee:c9:49:2c:
9d:ee:bb:1b:00:6a:ee:3c:65:f4:f0:6c:f8:f2:6c:
25:87:11:a5:c1:69:02:e6:85:1a:6d:ec:46:8a:2f:
24:4b:e5:40:48:96:fe:ca:7c:2b:14:11:a1:7b:e9:
0a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:42:0E:27:C4:0A:7F:C8:BC:6E:AF:1A:7A:82:C1:EC:9E:C9:56:2A
X509v3 Authority Key Identifier:
keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:fb:a3:50:2e:71:e1:5f:47:6f:80:69:da:28:e5:e2:95:bd:
5b:fe:48:08:d2:82:7b:d2:9b:4e:1a:d3:c5:02:5d:62:ae:51:
17:bd:38:d1:aa:2b:c1:4e:fa:75:0b:fc:ab:29:b4:17:94:04:
f6:75:eb:ec:2b:f7:1f:26:10:a5:23:7c:d2:3b:6b:5e:e5:25:
aa:55:2a:90:fe:dd:31:e1:21:37:2d:f4:c5:db:1b:e9:d9:3f:
e6:e0:a5:83:ed:28:63:3a:4f:05:c6:c1:91:4a:6e:53:f2:25:
a3:1a:08:2c:5f:0a:f5:39:f2:3a:d9:cb:91:02:1e:ad:83:05:
ec:ab:51:3f:35:8f:a0:98:11:77:ea:40:f0:d3:7c:ad:0c:de:
aa:88:41:33:ed:dd:6a:b4:b6:dc:c7:73:bc:26:85:50:ae:49:
e0:8b:b0:e2:21:18:23:a2:25:3c:5c:bc:74:a2:cc:8a:11:18:
ca:44:7f:3e:9d:d7:21:ba:bb:11:a1:1c:b9:71:ce:6c:b3:a5:
73:54:80:41:a3:20:58:1a:40:01:49:ed:04:cd:ae:ca:95:8c:
de:a1:e1:14:f1:56:be:f6:29:dc:0e:c9:d4:a4:99:ed:30:93:
07:8c:77:68:7e:b5:ba:57:b7:59:bb:e8:a4:74:bf:1b:82:00:
4e:2e:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:26 2026 by rpki-client