This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json)
Hash identifier: XcX0vGMDuREmXl/gh5V8T1LS+OZ8m+FUzguVjs39mnU=
Subject key identifier: 38:1D:AC:54:22:E4:26:1C:A6:1F:2A:39:86:17:7E:5A:44:FA:D8:01
Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Certificate serial: 092F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
Manifest number: 0918
Signing time: Sat 24 Jan 2026 19:43:14 +0000
Manifest this update: Sat 24 Jan 2026 19:43:14 +0000
Manifest next update: Sat 31 Jan 2026 19:43:14 +0000
Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: VgGQ68/9kzimCBoAO3rQ1jPTHsOEcVw7jpzqp2igi6w=)
2: E984A66AAC3211F09AD8CA60C4F9AE02.roa (hash: 8zEE98x0PtTnTuANGMUxq1+2Rj/m6rmYMLTVUh60RuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2351 (0x92f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Validity
Not Before: Jan 24 19:43:14 2026 GMT
Not After : Jan 31 19:43:14 2026 GMT
Subject: CN=697520d2-742c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:62:ea:05:b8:75:6b:b2:2b:07:b8:f5:8a:af:
21:08:83:48:59:97:6f:b2:f3:e8:d1:ba:8c:77:d8:
89:76:89:ae:61:1c:96:f6:86:d4:47:53:78:e1:51:
98:e2:50:70:02:2a:ee:34:fa:c4:b8:44:45:1a:72:
82:88:6f:6a:a0:60:a2:bd:7c:ff:df:e2:63:68:26:
c9:0a:30:19:da:37:a1:14:0b:ab:17:06:f5:91:e0:
db:7e:f5:65:06:52:23:2f:ce:67:fa:5e:19:49:6b:
f1:c4:43:08:9a:fe:a1:8d:1c:87:67:61:5c:9e:df:
19:a0:63:b3:99:a3:7d:9f:9b:9a:df:2d:e6:7a:c0:
82:fa:20:d9:10:20:be:69:18:a9:3c:59:0a:09:61:
25:56:d6:c5:b0:61:b4:a7:72:fa:46:f9:39:89:b0:
81:13:a4:4a:16:a1:13:2c:dc:c4:07:f4:28:59:7a:
ef:5f:94:ba:e6:eb:32:20:0b:d2:f0:39:93:4e:84:
5b:d4:30:0b:ee:d7:8e:18:ee:f0:2b:c0:ef:eb:b8:
4c:ab:fa:ad:6b:48:2b:31:61:a5:80:84:28:c8:de:
b0:2b:63:01:f5:2e:4d:3f:a9:95:d3:c0:5e:ea:52:
fa:f3:61:ba:14:f0:72:0b:9b:f1:92:64:59:f8:7a:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:AC:54:22:E4:26:1C:A6:1F:2A:39:86:17:7E:5A:44:FA:D8:01
X509v3 Authority Key Identifier:
keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:42:d0:70:d9:8c:65:e0:c9:a8:dd:9c:e6:4b:14:ab:28:1a:
b5:3a:f7:db:54:a3:3d:05:8c:1c:02:31:8e:70:9d:12:93:55:
6e:ef:b1:7c:fe:5e:8e:f4:1d:29:d2:56:32:ac:a3:f3:73:3a:
4d:e2:bb:c9:8e:fd:44:a6:4e:15:4f:aa:4e:17:c4:74:11:14:
07:1b:50:2a:b9:e4:aa:62:59:67:be:4c:5e:6b:8d:8c:74:ae:
9c:fb:a1:09:21:76:e1:bf:6f:50:19:de:ca:33:22:fd:d3:cc:
a2:0b:27:23:56:87:4b:72:7a:79:cf:be:03:2b:11:9c:85:33:
4c:fd:1f:7f:f7:ce:a3:c1:e6:2b:3a:4b:80:22:44:66:37:dc:
3f:86:ff:d8:cd:ca:e5:41:4b:7d:b2:f4:ab:d9:d0:5d:37:49:
8e:de:38:58:31:13:8a:f0:32:32:ed:6f:a8:d8:84:37:de:ed:
be:4f:47:9b:b2:e6:69:05:d1:28:30:d8:f2:bf:bb:66:b3:66:
fe:eb:60:ac:79:8c:be:82:f7:26:fa:96:cd:57:67:ca:b5:3a:
dc:65:03:a3:64:74:b1:90:d7:73:5d:7e:27:be:53:25:ac:04:
5a:21:eb:ea:98:7a:7d:bd:b9:a2:c6:bd:b4:e6:a2:91:09:2f:
cc:75:11:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhFNDkxMTAvBgNVBAUTKDJEM0RGQjVFMjIxMkIyOTA1ODY4QjE3NzE2N0Q1NDhC
MERGRTNDRjQwHhcNMjYwMTI0MTk0MzE0WhcNMjYwMTMxMTk0MzE0WjAYMRYwFAYD
VQQDDA02OTc1MjBkMi03NDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmmLqBbh1a7IrB7j1iq8hCINIWZdvsvPo0bqMd9iJdomuYRyW9obUR1N44VGY
4lBwAiruNPrEuERFGnKCiG9qoGCivXz/3+JjaCbJCjAZ2jehFAurFwb1keDbfvVl
BlIjL85n+l4ZSWvxxEMImv6hjRyHZ2Fcnt8ZoGOzmaN9n5ua3y3mesCC+iDZECC+
aRipPFkKCWElVtbFsGG0p3L6Rvk5ibCBE6RKFqETLNzEB/QoWXrvX5S65usyIAvS
8DmTToRb1DAL7teOGO7wK8Dv67hMq/qta0grMWGlgIQoyN6wK2MB9S5NP6mV08Be
6lL682G6FPByC5vxkmRZ+Hq2PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgdrFQi
5CYcph8qOYYXflpE+tgBMB8GA1UdIwQYMBaAFC09+14iErKQWGixdxZ9VIsN/jz0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEU0OS8zRjAyMDI0NkJF
MTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3NwQllhTEYzRm4xVWl3My1Q
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xUMzdYaUlTc3BCWWFMRjNGbjFVaXczLVBQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEU0OS8zRjAyMDI0NkJFMTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3Nw
QllhTEYzRm4xVWl3My1QUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrQtBw2Yxl4Mmo3ZzmSxSrKBq1OvfbVKM9BYwcAjGOcJ0Sk1Vu77F8
/l6O9B0p0lYyrKPzczpN4rvJjv1Epk4VT6pOF8R0ERQHG1AqueSqYllnvkxea42M
dK6c+6EJIXbhv29QGd7KMyL908yiCycjVodLcnp5z74DKxGchTNM/R9/986jweYr
OkuAIkRmN9w/hv/YzcrlQUt9svSr2dBdN0mO3jhYMROK8DIy7W+o2IQ33u2+T0eb
suZpBdEoMNjyv7tms2b+62CseYy+gvcm+pbNV2fKtTrcZQOjZHSxkNdzXX4nvlMl
rARaIevqmHp9vbmixr205qKRCS/MdRGg
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:11 2026 by rpki-client