This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
File: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json)
Hash identifier: dIKH3Uo4vItt6r0/o8cQsKbByLQM8CnGbBw6shM/hSM=
Subject key identifier: DF:B9:14:B4:08:04:B8:54:D1:C6:A3:E5:A8:51:53:9C:38:C1:CA:B3
Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
Certificate issuer: /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
Manifest number: 019A
Signing time: Sun 25 Jan 2026 02:44:31 +0000
Manifest this update: Sun 25 Jan 2026 02:44:30 +0000
Manifest next update: Sun 01 Feb 2026 02:44:30 +0000
Files and hashes: 1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: ZEKhbUW+3lnFt/LyjMI3g4ewwf9U+Hz8nx7WVPjdouA=)
2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: OYcqPPoNzZ0mU98SLaUwZKPqGtyytHy4I1e+KVz3rEQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl
rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Validity
Not Before: Jan 25 02:44:30 2026 GMT
Not After : Feb 1 02:44:30 2026 GMT
Subject: CN=6975838f-cec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:aa:e0:ef:d4:12:ed:55:86:3c:dd:2d:4e:52:
31:bb:c5:b3:e1:2e:e3:95:fc:50:34:17:68:a9:96:
34:a2:79:7a:14:26:0f:6b:27:a8:58:2f:dd:59:ce:
27:87:8b:e9:3a:a3:e5:50:b4:3b:3d:b5:ba:32:b7:
0f:ab:e6:09:81:d6:33:5a:36:2d:e6:d6:59:ee:13:
21:a7:a3:e7:e1:c9:34:63:41:33:7d:87:a1:05:97:
5a:13:1e:90:48:0b:26:b0:e7:76:60:c1:ea:5c:5d:
41:cd:90:96:b6:5f:c7:30:28:93:51:60:fd:cc:87:
c5:d9:e8:3e:ee:1e:ce:fb:2c:a7:a0:44:28:28:b4:
51:71:b2:6f:85:2a:0c:92:4a:f7:5e:6d:2f:02:66:
d8:83:13:43:1a:7b:e5:15:59:6d:22:ae:2e:e5:76:
59:23:a1:35:a4:90:60:91:e3:b4:a3:d8:6f:31:cd:
1b:bd:d4:3f:58:ac:e5:41:dd:b9:d9:1b:c7:f9:46:
b7:82:fa:58:f3:52:1d:56:db:2a:2c:32:cb:b3:7f:
c5:90:5a:06:50:0d:f6:38:5b:7f:ee:e0:6c:9d:a1:
78:23:60:68:32:10:66:6d:ac:24:4e:45:ee:c1:e0:
75:ca:c3:1f:8a:47:8b:a6:e4:64:58:de:db:99:95:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B9:14:B4:08:04:B8:54:D1:C6:A3:E5:A8:51:53:9C:38:C1:CA:B3
X509v3 Authority Key Identifier:
keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3c:f0:99:b9:18:a4:a9:73:e2:a9:4d:86:93:67:02:fd:c9:
e6:28:d6:55:80:c1:b2:2a:06:cf:ac:e7:b0:d4:d6:be:01:88:
b2:e1:fa:ec:ba:74:c0:c1:1b:ff:20:93:9f:9a:1d:df:86:19:
9a:f7:3d:a9:83:f6:e2:8b:63:83:d5:47:6c:e1:b2:94:43:86:
4b:0a:c4:68:cb:11:ca:23:db:db:f7:6d:97:b1:99:1f:b6:47:
8c:a0:57:30:af:4c:7e:a4:61:b7:b2:36:38:3d:99:7a:8e:18:
e8:63:9b:09:47:94:0d:8f:61:e2:90:7c:5a:f3:19:af:4b:b6:
e6:5d:f2:69:1c:cf:21:44:a9:e9:7a:45:36:79:12:61:e9:59:
2a:35:a5:34:bd:da:a2:46:77:42:02:d0:a9:a7:34:bc:07:ce:
fd:ed:90:3b:44:c0:1a:9c:bb:2f:35:ab:a9:18:e6:2c:c1:e6:
8e:5f:ca:16:3e:78:22:aa:80:65:07:92:0a:e6:c4:c9:f3:4e:
8b:e9:1e:5d:3c:15:cf:fc:af:c8:41:3b:72:c2:1e:31:76:55:
9b:7d:3a:05:97:ea:46:a4:af:0b:fc:2d:1e:af:0e:ef:67:37:
fa:f5:59:0b:16:1c:89:2c:db:60:4c:34:1f:b2:d5:c7:ff:d3:
12:48:db:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:29 2026 by rpki-client