This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
File: lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json)
Hash identifier: +AoywIL9CXrloXbRiEFFw2NeCd/HUoxmmmqv4sjn9y0=
Subject key identifier: 75:34:63:30:43:C9:FC:A8:AA:93:04:CF:69:2F:9F:7B:79:80:C4:E8
Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3
Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
Certificate serial: 0335
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
Manifest number: 032C
Signing time: Sun 25 Jan 2026 00:15:48 +0000
Manifest this update: Sun 25 Jan 2026 00:15:47 +0000
Manifest next update: Sun 01 Feb 2026 00:15:47 +0000
Files and hashes: 1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: z8ozt53VLAYYMWfWauX+Wxclz8ixrVvu+yYWdrJlDK4=)
2: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: Gkpwn3+qaXPLAggtUnFxSv/8MK3BM4swBT14YB5sClw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl
rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 821 (0x335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
Validity
Not Before: Jan 25 00:15:47 2026 GMT
Not After : Feb 1 00:15:47 2026 GMT
Subject: CN=697560b3-3564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:02:85:c8:8f:f9:51:4e:b2:20:17:61:03:
aa:4c:96:d7:55:a3:98:72:d4:bd:8f:30:8e:1b:a6:
73:02:ee:44:c3:24:47:9d:20:13:40:d0:bc:d7:33:
1f:08:78:e7:c7:56:bf:ea:73:b7:f4:68:39:0e:19:
46:08:99:5a:a6:35:e0:77:61:0f:a1:62:70:26:dc:
ac:a6:87:58:9c:52:6c:cd:de:c8:16:5f:d9:18:73:
f9:03:ba:1d:e0:df:0d:ad:87:dd:93:ec:58:d3:bc:
5f:c9:32:39:dc:1c:30:0f:88:a1:53:2b:2a:f6:d7:
06:30:65:96:ca:20:e5:f9:36:a5:9a:65:89:35:3a:
44:48:b2:d3:66:3c:46:70:e5:eb:ef:29:35:bd:73:
a9:42:f1:cc:0b:b0:12:e2:35:55:f1:47:b6:21:a8:
e6:b6:d4:39:b9:0c:0f:bf:69:aa:75:62:f3:d5:98:
b6:63:eb:f6:53:51:03:41:38:12:49:ea:ea:d6:07:
f7:c2:96:0f:84:13:a5:16:de:0c:b4:fa:f3:fd:08:
4f:6f:63:3f:1c:3e:21:bf:0a:f4:19:09:49:e7:6d:
d1:67:b5:47:0f:4b:6a:73:fa:c5:a3:f6:db:5e:33:
b4:d7:f6:62:12:e8:b0:3e:e2:1e:46:2d:9e:e0:61:
05:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:34:63:30:43:C9:FC:A8:AA:93:04:CF:69:2F:9F:7B:79:80:C4:E8
X509v3 Authority Key Identifier:
keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d4:ca:ba:51:ea:f7:40:b5:bc:03:13:65:66:32:77:bb:c2:
67:8d:b6:b6:27:40:17:34:2c:97:e2:be:87:dd:cb:ce:48:c8:
ac:15:8b:0a:dd:e1:2b:6c:75:20:9d:dd:b7:7e:f5:cc:69:29:
a7:9e:1c:77:f6:9f:b3:4c:f7:be:b5:bf:e5:6d:0f:c1:b4:8e:
88:6a:4c:b8:c3:02:31:bc:af:f6:1a:24:12:3b:2a:56:92:c7:
69:f3:55:df:7b:32:71:05:3e:fe:2a:fb:19:d4:37:60:0d:8f:
09:10:2a:3e:1c:63:a7:3e:3d:5f:c8:e4:d8:b2:97:86:54:7d:
58:9e:eb:dc:6c:5e:78:1c:d1:56:1d:46:33:57:0e:41:ad:1d:
8a:43:1b:ee:33:16:e3:5f:cc:65:f8:c9:1b:32:3b:2f:f8:fa:
16:3e:d0:79:9a:50:6d:80:23:c8:be:14:91:5f:cd:69:26:66:
a4:d5:cc:e0:cf:0d:d6:94:c5:44:2e:66:64:e0:b8:44:08:ec:
e7:48:47:cb:a5:ef:3d:23:33:44:15:51:aa:12:75:de:51:1c:
13:31:5e:e0:ec:fe:93:94:47:ae:7c:17:d8:16:be:d0:47:42:
9e:81:20:34:7d:f2:b8:bf:74:14:1c:7f:70:2b:57:41:f4:ea:
f3:21:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:11:38 2026 by rpki-client